Extracting prog: 7m5.690113436s Minimizing prog: 1h1m10.288724513s Simplifying prog options: 0s Extracting C: 5m3.749309574s Simplifying C: 1h4m36.757586485s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setaffinity-sched_setaffinity-socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program crashed: BUG: workqueue lockup program crashed: BUG: workqueue lockup single: successfully extracted reproducer found reproducer with 6 syscalls minimizing guilty program testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setaffinity-sched_setaffinity-socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet detailed listing: executing program 0: sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) program did not crash testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setaffinity-sched_setaffinity-socket$nl_netfilter-sendmsg$NFT_BATCH-syz_usb_control_io$hid detailed listing: executing program 0: sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program did not crash testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setaffinity-sched_setaffinity-socket$nl_netfilter-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program did not crash testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setaffinity-sched_setaffinity-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program did not crash testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setaffinity-socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program crashed: BUG: workqueue lockup testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program did not crash testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program did not crash testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program did not crash testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program did not crash testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: BUG: workqueue lockup simplifying C reproducer testing compiled C program (duration=6m25.785702486s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: BUG: workqueue lockup testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: INFO: task hung in rtnl_lock a never seen crash title: INFO: task hung in rtnl_lock, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: BUG: workqueue lockup testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: BUG: workqueue lockup testing compiled C program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid program crashed: BUG: workqueue lockup testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program crashed: BUG: workqueue lockup validation run: crashed=true testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program crashed: BUG: workqueue lockup validation run: crashed=true testing program (duration=6m25.785702486s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-syz_emit_ethernet-syz_usb_control_io$hid detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free validation run: crashed=true reproducing took 2h23m27.212515842s repro crashed as (corrupted=false): unregister_netdevice: waiting for syz_tun to become free. Usage count = 7 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc include/linux/netdevice.h:4358 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3592 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3892 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3944 addrconf_prefix_route net/ipv6/addrconf.c:2488 [inline] addrconf_add_linklocal+0x390/0x5d4 net/ipv6/addrconf.c:3313 addrconf_addr_gen+0x38c/0x464 net/ipv6/addrconf.c:3442 addrconf_init_auto_addrs+0x4f0/0x890 net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9600 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3143 rtnl_changelink net/core/rtnetlink.c:3761 [inline] __rtnl_newlink net/core/rtnetlink.c:3920 [inline] rtnl_newlink+0x10f8/0x15dc net/core/rtnetlink.c:4057 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc include/linux/netdevice.h:4358 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3592 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3892 addrconf_f6i_alloc+0x1c4/0x378 net/ipv6/route.c:4684 ipv6_add_addr+0x458/0xdb8 net/ipv6/addrconf.c:1126 addrconf_add_linklocal+0x230/0x5d4 net/ipv6/addrconf.c:3311 addrconf_addr_gen+0x38c/0x464 net/ipv6/addrconf.c:3442 addrconf_init_auto_addrs+0x4f0/0x890 net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9600 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3143 rtnl_changelink net/core/rtnetlink.c:3761 [inline] __rtnl_newlink net/core/rtnetlink.c:3920 [inline] rtnl_newlink+0x10f8/0x15dc net/core/rtnetlink.c:4057 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc include/linux/netdevice.h:4358 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3592 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3892 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3944 addrconf_add_mroute net/ipv6/addrconf.c:2552 [inline] addrconf_add_dev+0x204/0x2e4 net/ipv6/addrconf.c:2570 addrconf_dev_config net/ipv6/addrconf.c:3479 [inline] addrconf_init_auto_addrs+0x464/0x890 net/ipv6/addrconf.c:3567 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9600 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3143 rtnl_changelink net/core/rtnetlink.c:3761 [inline] __rtnl_newlink net/core/rtnetlink.c:3920 [inline] rtnl_newlink+0x10f8/0x15dc net/core/rtnetlink.c:4057 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6973 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc include/linux/netdevice.h:4358 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3592 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3892 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3944 addrconf_prefix_route net/ipv6/addrconf.c:2488 [inline] fixup_permanent_addr net/ipv6/addrconf.c:3598 [inline] addrconf_permanent_addr+0x53c/0x898 net/ipv6/addrconf.c:3622 addrconf_notify+0x7bc/0xcdc net/ipv6/addrconf.c:3694 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9600 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3143 rtnl_changelink net/core/rtnetlink.c:3761 [inline] __rtnl_newlink net/core/rtnetlink.c:3920 [inline] rtnl_newlink+0x10f8/0x15dc net/core/rtnetlink.c:4057 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6973 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc include/linux/netdevice.h:4358 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3592 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3892 addrconf_f6i_alloc+0x1c4/0x378 net/ipv6/route.c:4684 ipv6_add_addr+0x458/0xdb8 net/ipv6/addrconf.c:1126 inet6_addr_add+0x350/0xafc net/ipv6/addrconf.c:3050 inet6_rtm_newaddr+0x730/0xaa8 net/ipv6/addrconf.c:5059 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6973 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x648/0x930 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg net/socket.c:729 [inline] __sys_sendto+0x36c/0x4f4 net/socket.c:2228 __do_sys_sendto net/socket.c:2235 [inline] __se_sys_sendto net/socket.c:2231 [inline] __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2231 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4358 fib_create_info+0x22c4/0x2940 net/ipv4/fib_semantics.c:1497 fib_table_insert+0xac/0x1364 net/ipv4/fib_trie.c:1212 fib_magic+0x250/0x31c net/ipv4/fib_frontend.c:1133 fib_add_ifaddr+0x118/0x4f8 net/ipv4/fib_frontend.c:1155 fib_inetaddr_event+0x114/0x1d0 net/ipv4/fib_frontend.c:1469 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 blocking_notifier_call_chain+0x70/0xa0 kernel/notifier.c:380 __inet_insert_ifa+0x8d8/0xa98 net/ipv4/devinet.c:567 inet_rtm_newaddr+0xe10/0x1674 net/ipv4/devinet.c:1002 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6973 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x648/0x930 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg net/socket.c:729 [inline] __sys_sendto+0x36c/0x4f4 net/socket.c:2228 final repro crashed as (corrupted=false): unregister_netdevice: waiting for syz_tun to become free. Usage count = 7 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc include/linux/netdevice.h:4358 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3592 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3892 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3944 addrconf_prefix_route net/ipv6/addrconf.c:2488 [inline] addrconf_add_linklocal+0x390/0x5d4 net/ipv6/addrconf.c:3313 addrconf_addr_gen+0x38c/0x464 net/ipv6/addrconf.c:3442 addrconf_init_auto_addrs+0x4f0/0x890 net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9600 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3143 rtnl_changelink net/core/rtnetlink.c:3761 [inline] __rtnl_newlink net/core/rtnetlink.c:3920 [inline] rtnl_newlink+0x10f8/0x15dc net/core/rtnetlink.c:4057 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc include/linux/netdevice.h:4358 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3592 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3892 addrconf_f6i_alloc+0x1c4/0x378 net/ipv6/route.c:4684 ipv6_add_addr+0x458/0xdb8 net/ipv6/addrconf.c:1126 addrconf_add_linklocal+0x230/0x5d4 net/ipv6/addrconf.c:3311 addrconf_addr_gen+0x38c/0x464 net/ipv6/addrconf.c:3442 addrconf_init_auto_addrs+0x4f0/0x890 net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9600 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3143 rtnl_changelink net/core/rtnetlink.c:3761 [inline] __rtnl_newlink net/core/rtnetlink.c:3920 [inline] rtnl_newlink+0x10f8/0x15dc net/core/rtnetlink.c:4057 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc include/linux/netdevice.h:4358 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3592 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3892 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3944 addrconf_add_mroute net/ipv6/addrconf.c:2552 [inline] addrconf_add_dev+0x204/0x2e4 net/ipv6/addrconf.c:2570 addrconf_dev_config net/ipv6/addrconf.c:3479 [inline] addrconf_init_auto_addrs+0x464/0x890 net/ipv6/addrconf.c:3567 addrconf_notify+0x8cc/0xcdc net/ipv6/addrconf.c:3740 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9600 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3143 rtnl_changelink net/core/rtnetlink.c:3761 [inline] __rtnl_newlink net/core/rtnetlink.c:3920 [inline] rtnl_newlink+0x10f8/0x15dc net/core/rtnetlink.c:4057 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6973 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc include/linux/netdevice.h:4358 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3592 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3892 ip6_route_add+0x8c/0x1e4 net/ipv6/route.c:3944 addrconf_prefix_route net/ipv6/addrconf.c:2488 [inline] fixup_permanent_addr net/ipv6/addrconf.c:3598 [inline] addrconf_permanent_addr+0x53c/0x898 net/ipv6/addrconf.c:3622 addrconf_notify+0x7bc/0xcdc net/ipv6/addrconf.c:3694 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:453 call_netdevice_notifiers_info net/core/dev.c:2229 [inline] call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] __dev_notify_flags+0x260/0x47c net/core/dev.c:-1 netif_change_flags+0xd0/0x15c net/core/dev.c:9600 do_setlink+0xa58/0x3658 net/core/rtnetlink.c:3143 rtnl_changelink net/core/rtnetlink.c:3761 [inline] __rtnl_newlink net/core/rtnetlink.c:3920 [inline] rtnl_newlink+0x10f8/0x15dc net/core/rtnetlink.c:4057 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6973 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc include/linux/netdevice.h:4358 [inline] netdev_get_by_index+0x88/0xe4 net/core/dev.c:1008 fib6_nh_init+0x198/0x1960 net/ipv6/route.c:3592 ip6_route_info_create_nh+0x11c/0x98c net/ipv6/route.c:3892 addrconf_f6i_alloc+0x1c4/0x378 net/ipv6/route.c:4684 ipv6_add_addr+0x458/0xdb8 net/ipv6/addrconf.c:1126 inet6_addr_add+0x350/0xafc net/ipv6/addrconf.c:3050 inet6_rtm_newaddr+0x730/0xaa8 net/ipv6/addrconf.c:5059 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6973 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x648/0x930 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg net/socket.c:729 [inline] __sys_sendto+0x36c/0x4f4 net/socket.c:2228 __do_sys_sendto net/socket.c:2235 [inline] __se_sys_sendto net/socket.c:2231 [inline] __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2231 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 ref_tracker: netdev@00000000eda717a8 has 1/6 users at __netdev_tracker_alloc include/linux/netdevice.h:4346 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4358 fib_create_info+0x22c4/0x2940 net/ipv4/fib_semantics.c:1497 fib_table_insert+0xac/0x1364 net/ipv4/fib_trie.c:1212 fib_magic+0x250/0x31c net/ipv4/fib_frontend.c:1133 fib_add_ifaddr+0x118/0x4f8 net/ipv4/fib_frontend.c:1155 fib_inetaddr_event+0x114/0x1d0 net/ipv4/fib_frontend.c:1469 notifier_call_chain+0x1b8/0x4e4 kernel/notifier.c:85 blocking_notifier_call_chain+0x70/0xa0 kernel/notifier.c:380 __inet_insert_ifa+0x8d8/0xa98 net/ipv4/devinet.c:567 inet_rtm_newaddr+0xe10/0x1674 net/ipv4/devinet.c:1002 rtnetlink_rcv_msg+0x664/0x97c net/core/rtnetlink.c:6946 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6973 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x694/0x8c4 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x648/0x930 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg net/socket.c:729 [inline] __sys_sendto+0x36c/0x4f4 net/socket.c:2228