Extracting prog: 1m58.357141429s Minimizing prog: 35m29.515193514s Simplifying prog options: 2m39.357876541s Extracting C: 1m14.779121169s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmat-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-syz_clone-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_clone(0x2800000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free single: successfully extracted reproducer found reproducer with 25 syscalls minimizing guilty program testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmat-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-syz_clone-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg detailed listing: executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r3) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_clone(0x2800000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmat-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-syz_clone-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_clone(0x2800000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmat-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-syz_clone-mprotect-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_clone(0x2800000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmat-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-syz_clone-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_clone(0x2800000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmat-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmat-shmctl$IPC_RMID-socket$inet6-connect$inet6-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmat-shmctl$IPC_RMID-socket$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmat-shmctl$IPC_RMID-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmat-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-recvmmsg-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-readlinkat-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-fchdir-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') fchdir(r4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF program did not crash simplifying guilty program options testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free validation run: crashed=true testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free validation run: crashed=true testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-io_setup-prlimit64-sched_setscheduler-getpid-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-syz_open_procfs-recvmmsg-shmget-shmctl$IPC_RMID-socket$inet6-connect$inet6-mlock-mprotect-setsockopt$inet6_IPV6_XFRM_POLICY-sendmmsg-ioctl$TUNSETIFF detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget(0x1, 0x4000, 0x1000, &(0x7f00004d4000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free validation run: crashed=true reproducing took 51m20.526373015s repro crashed as (corrupted=false): unregister_netdevice: waiting for ip6gre0 to become free. Usage count = 4 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc include/linux/netdevice.h:4058 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3667 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3848 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4623 ipv6_add_addr+0x3d4/0xd74 net/ipv6/addrconf.c:1121 addrconf_add_linklocal+0x23c/0x60c net/ipv6/addrconf.c:3264 addrconf_addr_gen+0x3ec/0x500 net/ipv6/addrconf.c:3395 addrconf_init_auto_addrs+0x5a8/0x91c net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xc98 net/ipv6/addrconf.c:3692 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8715 dev_change_flags+0xd0/0x15c net/core/dev.c:8753 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc include/linux/netdevice.h:4058 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3667 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3848 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4623 ipv6_add_addr+0x3d4/0xd74 net/ipv6/addrconf.c:1121 inet6_addr_add+0x388/0x844 net/ipv6/addrconf.c:3020 inet6_rtm_newaddr+0x558/0x780 net/ipv6/addrconf.c:4980 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4058 fib_create_info+0x127c/0x1e98 net/ipv4/fib_semantics.c:1583 fib_table_insert+0xb0/0x13fc net/ipv4/fib_trie.c:1217 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1118 fib_add_ifaddr+0x114/0x500 net/ipv4/fib_frontend.c:1140 fib_inetaddr_event+0x12c/0x1f8 net/ipv4/fib_frontend.c:1454 notifier_call_chain kernel/notifier.c:87 [inline] blocking_notifier_call_chain+0xf4/0x19c kernel/notifier.c:382 __inet_insert_ifa+0x88c/0xa34 net/ipv4/devinet.c:568 inet_rtm_newaddr+0x8b4/0x15bc net/ipv4/devinet.c:970 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161 unregister_netdevice: waiting for ip6gretap0 to become free. Usage count = 4 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc include/linux/netdevice.h:4058 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3667 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3848 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4623 ipv6_add_addr+0x3d4/0xd74 net/ipv6/addrconf.c:1121 addrconf_add_linklocal+0x23c/0x60c net/ipv6/addrconf.c:3264 addrconf_addr_gen+0x3ec/0x500 net/ipv6/addrconf.c:3395 addrconf_init_auto_addrs+0x5a8/0x91c net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xc98 net/ipv6/addrconf.c:3692 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8715 dev_change_flags+0xd0/0x15c net/core/dev.c:8753 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc include/linux/netdevice.h:4058 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3667 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3848 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4623 fixup_permanent_addr net/ipv6/addrconf.c:3535 [inline] addrconf_permanent_addr+0x208/0x870 net/ipv6/addrconf.c:3574 addrconf_notify+0x7b8/0xc98 net/ipv6/addrconf.c:3646 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8715 dev_change_flags+0xd0/0x15c net/core/dev.c:8753 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4058 fib_create_info+0x127c/0x1e98 net/ipv4/fib_semantics.c:1583 fib_table_insert+0xb0/0x13fc net/ipv4/fib_trie.c:1217 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1118 fib_add_ifaddr+0x114/0x500 net/ipv4/fib_frontend.c:1140 fib_inetaddr_event+0x12c/0x1f8 net/ipv4/fib_frontend.c:1454 notifier_call_chain kernel/notifier.c:87 [inline] blocking_notifier_call_chain+0xf4/0x19c kernel/notifier.c:382 __inet_insert_ifa+0x88c/0xa34 net/ipv4/devinet.c:568 inet_rtm_newaddr+0x8b4/0x15bc net/ipv4/devinet.c:970 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161 final repro crashed as (corrupted=false): unregister_netdevice: waiting for ip6gre0 to become free. Usage count = 4 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc include/linux/netdevice.h:4058 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3667 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3848 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4623 ipv6_add_addr+0x3d4/0xd74 net/ipv6/addrconf.c:1121 addrconf_add_linklocal+0x23c/0x60c net/ipv6/addrconf.c:3264 addrconf_addr_gen+0x3ec/0x500 net/ipv6/addrconf.c:3395 addrconf_init_auto_addrs+0x5a8/0x91c net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xc98 net/ipv6/addrconf.c:3692 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8715 dev_change_flags+0xd0/0x15c net/core/dev.c:8753 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc include/linux/netdevice.h:4058 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3667 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3848 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4623 ipv6_add_addr+0x3d4/0xd74 net/ipv6/addrconf.c:1121 inet6_addr_add+0x388/0x844 net/ipv6/addrconf.c:3020 inet6_rtm_newaddr+0x558/0x780 net/ipv6/addrconf.c:4980 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4058 fib_create_info+0x127c/0x1e98 net/ipv4/fib_semantics.c:1583 fib_table_insert+0xb0/0x13fc net/ipv4/fib_trie.c:1217 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1118 fib_add_ifaddr+0x114/0x500 net/ipv4/fib_frontend.c:1140 fib_inetaddr_event+0x12c/0x1f8 net/ipv4/fib_frontend.c:1454 notifier_call_chain kernel/notifier.c:87 [inline] blocking_notifier_call_chain+0xf4/0x19c kernel/notifier.c:382 __inet_insert_ifa+0x88c/0xa34 net/ipv4/devinet.c:568 inet_rtm_newaddr+0x8b4/0x15bc net/ipv4/devinet.c:970 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161 unregister_netdevice: waiting for ip6gretap0 to become free. Usage count = 4 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc include/linux/netdevice.h:4058 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3667 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3848 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4623 ipv6_add_addr+0x3d4/0xd74 net/ipv6/addrconf.c:1121 addrconf_add_linklocal+0x23c/0x60c net/ipv6/addrconf.c:3264 addrconf_addr_gen+0x3ec/0x500 net/ipv6/addrconf.c:3395 addrconf_init_auto_addrs+0x5a8/0x91c net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xc98 net/ipv6/addrconf.c:3692 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8715 dev_change_flags+0xd0/0x15c net/core/dev.c:8753 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc include/linux/netdevice.h:4058 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3667 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3848 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4623 fixup_permanent_addr net/ipv6/addrconf.c:3535 [inline] addrconf_permanent_addr+0x208/0x870 net/ipv6/addrconf.c:3574 addrconf_notify+0x7b8/0xc98 net/ipv6/addrconf.c:3646 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8715 dev_change_flags+0xd0/0x15c net/core/dev.c:8753 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4046 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4058 fib_create_info+0x127c/0x1e98 net/ipv4/fib_semantics.c:1583 fib_table_insert+0xb0/0x13fc net/ipv4/fib_trie.c:1217 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1118 fib_add_ifaddr+0x114/0x500 net/ipv4/fib_frontend.c:1140 fib_inetaddr_event+0x12c/0x1f8 net/ipv4/fib_frontend.c:1454 notifier_call_chain kernel/notifier.c:87 [inline] blocking_notifier_call_chain+0xf4/0x19c kernel/notifier.c:382 __inet_insert_ifa+0x88c/0xa34 net/ipv4/devinet.c:568 inet_rtm_newaddr+0x8b4/0x15bc net/ipv4/devinet.c:970 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161