Extracting prog: 5m18.943978326s Minimizing prog: 54m23.502068791s Simplifying prog options: 0s Extracting C: 1m52.253709799s Simplifying C: 1h0m0.01000628s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) program crashed: BUG: workqueue lockup single: successfully extracted reproducer found reproducer with 4 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xcc}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: BUG: workqueue lockup simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: BUG: workqueue lockup testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: BUG: workqueue lockup testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: BUG: workqueue lockup testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: BUG: workqueue lockup testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: BUG: workqueue lockup testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) program crashed: BUG: workqueue lockup validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) program crashed: BUG: workqueue lockup validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet-sendto$inet-socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free validation run: crashed=true reproducing took 2h16m22.828373652s repro crashed as (corrupted=false): unregister_netdevice: waiting for syz_tun to become free. Usage count = 10 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_hold include/linux/netdevice.h:4404 [inline] dst_init+0xbc/0x3e4 net/core/dst.c:52 dst_alloc+0x118/0x168 net/core/dst.c:93 rt_dst_alloc net/ipv4/route.c:1646 [inline] __mkroute_output net/ipv4/route.c:2650 [inline] ip_route_output_key_hash_rcu+0x102c/0x1dfc net/ipv4/route.c:2870 ip_route_output_key_hash+0x154/0x260 net/ipv4/route.c:2700 __ip_route_output_key include/net/route.h:169 [inline] ip_route_output_flow+0x3c/0x160 net/ipv4/route.c:2927 ip_route_output_key include/net/route.h:179 [inline] geneve_link_config+0x15c/0x518 drivers/net/geneve.c:1622 geneve_newlink+0x1ac/0x204 drivers/net/geneve.c:1680 rtnl_newlink_create+0x28c/0x9ac net/core/rtnetlink.c:3833 __rtnl_newlink net/core/rtnetlink.c:3950 [inline] rtnl_newlink+0x11a0/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x648/0x930 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x36c/0x4f4 net/socket.c:2244 __do_sys_sendto net/socket.c:2251 [inline] __se_sys_sendto net/socket.c:2247 [inline] __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2247 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc include/linux/netdevice.h:4387 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3890 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3942 addrconf_prefix_route net/ipv6/addrconf.c:2488 [inline] addrconf_add_linklocal+0x390/0x5d4 net/ipv6/addrconf.c:3313 addrconf_addr_gen+0x38c/0x464 net/ipv6/addrconf.c:3442 addrconf_init_auto_addrs+0x4f0/0x890 net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc include/linux/netdevice.h:4387 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3890 addrconf_f6i_alloc+0x1c4/0x378 net/ipv6/route.c:4682 ipv6_add_addr+0x458/0xdb8 net/ipv6/addrconf.c:1126 addrconf_add_linklocal+0x230/0x5d4 net/ipv6/addrconf.c:3311 addrconf_addr_gen+0x38c/0x464 net/ipv6/addrconf.c:3442 addrconf_init_auto_addrs+0x4f0/0x890 net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc include/linux/netdevice.h:4387 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3890 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3942 addrconf_add_mroute net/ipv6/addrconf.c:2552 [inline] addrconf_add_dev+0x204/0x2e4 net/ipv6/addrconf.c:2570 addrconf_dev_config net/ipv6/addrconf.c:3479 [inline] addrconf_init_auto_addrs+0x464/0x890 net/ipv6/addrconf.c:3567 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc include/linux/netdevice.h:4387 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3890 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3942 addrconf_prefix_route net/ipv6/addrconf.c:2488 [inline] fixup_permanent_addr net/ipv6/addrconf.c:3598 [inline] addrconf_permanent_addr+0x53c/0x898 net/ipv6/addrconf.c:3622 addrconf_notify+0x7bc/0xcdc net/ipv6/addrconf.c:3694 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc include/linux/netdevice.h:4387 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3890 addrconf_f6i_alloc+0x1c4/0x378 net/ipv6/route.c:4682 fixup_permanent_addr net/ipv6/addrconf.c:3583 [inline] addrconf_permanent_addr+0x204/0x898 net/ipv6/addrconf.c:3622 addrconf_notify+0x7bc/0xcdc net/ipv6/addrconf.c:3694 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_hold include/linux/netdevice.h:4404 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1263 [inline] fib_check_nh+0x974/0x1510 net/ipv4/fib_semantics.c:1283 fib_create_info+0x1b1c/0x2944 net/ipv4/fib_semantics.c:1503 fib_table_insert+0xac/0x1364 net/ipv4/fib_trie.c:1212 fib_magic+0x250/0x31c net/ipv4/fib_frontend.c:1134 fib_add_ifaddr+0x33c/0x4f8 net/ipv4/fib_frontend.c:1178 fib_netdev_event+0x35c/0x4a0 net/ipv4/fib_frontend.c:1516 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_hold include/linux/netdevice.h:4404 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1263 [inline] fib_check_nh+0x974/0x1510 net/ipv4/fib_semantics.c:1283 fib_create_info+0x1b1c/0x2944 net/ipv4/fib_semantics.c:1503 fib_table_insert+0xac/0x1364 net/ipv4/fib_trie.c:1212 fib_magic+0x250/0x31c net/ipv4/fib_frontend.c:1134 fib_add_ifaddr+0x2ec/0x4f8 net/ipv4/fib_frontend.c:1171 fib_netdev_event+0x35c/0x4a0 net/ipv4/fib_frontend.c:1516 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4387 fib_create_info+0x22c8/0x2944 net/ipv4/fib_semantics.c:1497 fib_table_insert+0xac/0x1364 net/ipv4/fib_trie.c:1212 fib_magic+0x250/0x31c net/ipv4/fib_frontend.c:1134 fib_add_ifaddr+0x118/0x4f8 net/ipv4/fib_frontend.c:1156 fib_inetaddr_event+0x114/0x1d0 net/ipv4/fib_frontend.c:1470 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 blocking_notifier_call_chain+0x70/0xa0 kernel/notifier.c:380 __inet_insert_ifa+0x8d8/0xa98 net/ipv4/devinet.c:566 inet_rtm_newaddr+0xe10/0x1674 net/ipv4/devinet.c:1001 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x648/0x930 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x36c/0x4f4 net/socket.c:2244 final repro crashed as (corrupted=false): unregister_netdevice: waiting for syz_tun to become free. Usage count = 10 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_hold include/linux/netdevice.h:4404 [inline] dst_init+0xbc/0x3e4 net/core/dst.c:52 dst_alloc+0x118/0x168 net/core/dst.c:93 rt_dst_alloc net/ipv4/route.c:1646 [inline] __mkroute_output net/ipv4/route.c:2650 [inline] ip_route_output_key_hash_rcu+0x102c/0x1dfc net/ipv4/route.c:2870 ip_route_output_key_hash+0x154/0x260 net/ipv4/route.c:2700 __ip_route_output_key include/net/route.h:169 [inline] ip_route_output_flow+0x3c/0x160 net/ipv4/route.c:2927 ip_route_output_key include/net/route.h:179 [inline] geneve_link_config+0x15c/0x518 drivers/net/geneve.c:1622 geneve_newlink+0x1ac/0x204 drivers/net/geneve.c:1680 rtnl_newlink_create+0x28c/0x9ac net/core/rtnetlink.c:3833 __rtnl_newlink net/core/rtnetlink.c:3950 [inline] rtnl_newlink+0x11a0/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x648/0x930 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x36c/0x4f4 net/socket.c:2244 __do_sys_sendto net/socket.c:2251 [inline] __se_sys_sendto net/socket.c:2247 [inline] __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2247 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc include/linux/netdevice.h:4387 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3890 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3942 addrconf_prefix_route net/ipv6/addrconf.c:2488 [inline] addrconf_add_linklocal+0x390/0x5d4 net/ipv6/addrconf.c:3313 addrconf_addr_gen+0x38c/0x464 net/ipv6/addrconf.c:3442 addrconf_init_auto_addrs+0x4f0/0x890 net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc include/linux/netdevice.h:4387 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3890 addrconf_f6i_alloc+0x1c4/0x378 net/ipv6/route.c:4682 ipv6_add_addr+0x458/0xdb8 net/ipv6/addrconf.c:1126 addrconf_add_linklocal+0x230/0x5d4 net/ipv6/addrconf.c:3311 addrconf_addr_gen+0x38c/0x464 net/ipv6/addrconf.c:3442 addrconf_init_auto_addrs+0x4f0/0x890 net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc include/linux/netdevice.h:4387 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3890 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3942 addrconf_add_mroute net/ipv6/addrconf.c:2552 [inline] addrconf_add_dev+0x204/0x2e4 net/ipv6/addrconf.c:2570 addrconf_dev_config net/ipv6/addrconf.c:3479 [inline] addrconf_init_auto_addrs+0x464/0x890 net/ipv6/addrconf.c:3567 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc include/linux/netdevice.h:4387 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3890 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3942 addrconf_prefix_route net/ipv6/addrconf.c:2488 [inline] fixup_permanent_addr net/ipv6/addrconf.c:3598 [inline] addrconf_permanent_addr+0x53c/0x898 net/ipv6/addrconf.c:3622 addrconf_notify+0x7bc/0xcdc net/ipv6/addrconf.c:3694 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc include/linux/netdevice.h:4387 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3590 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3890 addrconf_f6i_alloc+0x1c4/0x378 net/ipv6/route.c:4682 fixup_permanent_addr net/ipv6/addrconf.c:3583 [inline] addrconf_permanent_addr+0x204/0x898 net/ipv6/addrconf.c:3622 addrconf_notify+0x7bc/0xcdc net/ipv6/addrconf.c:3694 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_hold include/linux/netdevice.h:4404 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1263 [inline] fib_check_nh+0x974/0x1510 net/ipv4/fib_semantics.c:1283 fib_create_info+0x1b1c/0x2944 net/ipv4/fib_semantics.c:1503 fib_table_insert+0xac/0x1364 net/ipv4/fib_trie.c:1212 fib_magic+0x250/0x31c net/ipv4/fib_frontend.c:1134 fib_add_ifaddr+0x33c/0x4f8 net/ipv4/fib_frontend.c:1178 fib_netdev_event+0x35c/0x4a0 net/ipv4/fib_frontend.c:1516 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_hold include/linux/netdevice.h:4404 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1263 [inline] fib_check_nh+0x974/0x1510 net/ipv4/fib_semantics.c:1283 fib_create_info+0x1b1c/0x2944 net/ipv4/fib_semantics.c:1503 fib_table_insert+0xac/0x1364 net/ipv4/fib_trie.c:1212 fib_magic+0x250/0x31c net/ipv4/fib_frontend.c:1134 fib_add_ifaddr+0x2ec/0x4f8 net/ipv4/fib_frontend.c:1171 fib_netdev_event+0x35c/0x4a0 net/ipv4/fib_frontend.c:1516 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9705 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3151 rtnl_changelink net/core/rtnetlink.c:3769 [inline] __rtnl_newlink net/core/rtnetlink.c:3928 [inline] rtnl_newlink+0x1104/0x15e8 net/core/rtnetlink.c:4065 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 ref_tracker: netdev@000000005fdbe05a has 1/9 users at __netdev_tracker_alloc include/linux/netdevice.h:4375 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4387 fib_create_info+0x22c8/0x2944 net/ipv4/fib_semantics.c:1497 fib_table_insert+0xac/0x1364 net/ipv4/fib_trie.c:1212 fib_magic+0x250/0x31c net/ipv4/fib_frontend.c:1134 fib_add_ifaddr+0x118/0x4f8 net/ipv4/fib_frontend.c:1156 fib_inetaddr_event+0x114/0x1d0 net/ipv4/fib_frontend.c:1470 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 blocking_notifier_call_chain+0x70/0xa0 kernel/notifier.c:380 __inet_insert_ifa+0x8d8/0xa98 net/ipv4/devinet.c:566 inet_rtm_newaddr+0xe10/0x1674 net/ipv4/devinet.c:1001 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6951 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x648/0x930 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x36c/0x4f4 net/socket.c:2244