Extracting prog: 27m41.639681781s Minimizing prog: 15m44.798229012s Simplifying prog options: 6m44.070961571s Extracting C: 3m13.107312812s Simplifying C: 0s extracting reproducer from 38 programs testing a last program of every proc single: executing 8 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdirat-setxattr$system_posix_acl-syz_mount_image$ext4-syz_create_resource$binfmt-openat$binfmt detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@nodiscard}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) setxattr$system_posix_acl(&(0x7f0000000140)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001000700000000000400030000000000100005000000000020"], 0x24, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdirat-setxattr$system_posix_acl-syz_mount_image$ext4-syz_create_resource$binfmt-openat$binfmt detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@nodiscard}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) setxattr$system_posix_acl(&(0x7f0000000140)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001000700000000000400030000000000100005000000000020"], 0x24, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-syz_genetlink_get_family_id$l2tp-socket$nl_generic-sendmsg$L2TP_CMD_SESSION_DELETE detailed listing: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare-fsopen-fsconfig$FSCONFIG_CMD_CREATE-fsmount-openat$cgroup_pressure-read detailed listing: executing program 0: unshare(0x2a020400) r0 = fsopen(&(0x7f0000000940)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000980)='io.pressure\x00', 0x2, 0x0) read(r2, &(0x7f00000009c0)=""/252, 0xfc) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$netlink-socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR-syz_open_procfs-preadv detailed listing: executing program 0: bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000600)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x2, 0x3, 0xc, 0x0, 0x7}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/anycast6\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/56, 0x38}], 0x1, 0x9, 0xd) program crashed: unregister_netdevice: waiting for DEV to become free single: successfully extracted reproducer found reproducer with 6 syscalls minimizing guilty program testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$netlink-socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR-syz_open_procfs detailed listing: executing program 0: bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000600)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x2, 0x3, 0xc, 0x0, 0x7}, 0x20) syz_open_procfs(0x0, &(0x7f0000000640)='net/anycast6\x00') program crashed: unregister_netdevice: waiting for DEV to become free testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$netlink-socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000600)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x2, 0x3, 0xc, 0x0, 0x7}, 0x20) program crashed: unregister_netdevice: waiting for DEV to become free testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$netlink-socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) program did not crash testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$netlink-socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000600)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x2, 0x3, 0xc, 0x0, 0x7}, 0x20) program did not crash testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bind$netlink-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000600)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x2, 0x3, 0xc, 0x0, 0x7}, 0x20) program did not crash testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000600)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x2, 0x3, 0xc, 0x0, 0x7}, 0x20) program crashed: unregister_netdevice: waiting for DEV to become free testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000600)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x2, 0x3, 0xc, 0x0, 0x7}, 0x20) program did not crash testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free extracting C reproducer testing compiled C program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR program did not crash simplifying guilty program options testing program (duration=1m49.687412668s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) program did not crash testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free extracting C reproducer testing compiled C program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR program did not crash testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free validation run: crashed=true testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free validation run: crashed=true testing program (duration=1m49.687412668s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-setsockopt$inet6_IPV6_FLOWLABEL_MGR-setsockopt$inet6_IPV6_FLOWLABEL_MGR detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000005c0)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) program crashed: unregister_netdevice: waiting for DEV to become free validation run: crashed=true reproducing took 59m50.322071498s repro crashed as (corrupted=false): unregister_netdevice: waiting for syz_tun to become free. Usage count = 10 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_hold include/linux/netdevice.h:4078 [inline] dst_init+0xc0/0x3dc net/core/dst.c:52 dst_alloc+0x124/0x16c net/core/dst.c:92 rt_dst_alloc net/ipv4/route.c:1689 [inline] __mkroute_output net/ipv4/route.c:2655 [inline] ip_route_output_key_hash_rcu+0xfbc/0x1dfc net/ipv4/route.c:2877 ip_route_output_key_hash+0x1b0/0x2fc net/ipv4/route.c:2706 __ip_route_output_key include/net/route.h:137 [inline] ip_route_output_flow+0x3c/0x158 net/ipv4/route.c:2936 ip_route_output_key include/net/route.h:147 [inline] geneve_link_config+0x16c/0x544 drivers/net/geneve.c:1651 geneve_newlink+0x130/0x198 drivers/net/geneve.c:1704 rtnl_newlink_create net/core/rtnetlink.c:3436 [inline] __rtnl_newlink net/core/rtnetlink.c:3656 [inline] rtnl_newlink+0x10b4/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc include/linux/netdevice.h:4061 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3671 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3852 ip6_route_add+0x34/0x154 net/ipv6/route.c:3896 addrconf_prefix_route net/ipv6/addrconf.c:2450 [inline] addrconf_add_linklocal+0x3ac/0x60c net/ipv6/addrconf.c:3274 addrconf_addr_gen+0x3ec/0x500 net/ipv6/addrconf.c:3403 addrconf_init_auto_addrs+0x5a8/0x91c net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xc98 net/ipv6/addrconf.c:3700 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc include/linux/netdevice.h:4061 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3671 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3852 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4627 ipv6_add_addr+0x3d4/0xd74 net/ipv6/addrconf.c:1121 addrconf_add_linklocal+0x23c/0x60c net/ipv6/addrconf.c:3272 addrconf_addr_gen+0x3ec/0x500 net/ipv6/addrconf.c:3403 addrconf_init_auto_addrs+0x5a8/0x91c net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xc98 net/ipv6/addrconf.c:3700 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc include/linux/netdevice.h:4061 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3671 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3852 ip6_route_add+0x34/0x154 net/ipv6/route.c:3896 addrconf_add_mroute net/ipv6/addrconf.c:2514 [inline] addrconf_add_dev+0x228/0x328 net/ipv6/addrconf.c:2532 addrconf_dev_config net/ipv6/addrconf.c:3439 [inline] addrconf_init_auto_addrs+0x4d8/0x91c net/ipv6/addrconf.c:3527 addrconf_notify+0x8cc/0xc98 net/ipv6/addrconf.c:3700 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc include/linux/netdevice.h:4061 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3671 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3852 ip6_route_add+0x34/0x154 net/ipv6/route.c:3896 addrconf_prefix_route net/ipv6/addrconf.c:2450 [inline] fixup_permanent_addr net/ipv6/addrconf.c:3558 [inline] addrconf_permanent_addr+0x518/0x870 net/ipv6/addrconf.c:3582 addrconf_notify+0x7b8/0xc98 net/ipv6/addrconf.c:3654 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_hold include/linux/netdevice.h:4078 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1270 [inline] fib_check_nh+0x9d4/0x15c8 net/ipv4/fib_semantics.c:1290 fib_create_info+0x109c/0x1e98 net/ipv4/fib_semantics.c:1589 fib_table_insert+0xb0/0x13fc net/ipv4/fib_trie.c:1217 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1118 fib_add_ifaddr+0x330/0x500 net/ipv4/fib_frontend.c:1162 fib_netdev_event+0x360/0x4a0 net/ipv4/fib_frontend.c:1500 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_hold include/linux/netdevice.h:4078 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1270 [inline] fib_check_nh+0x9d4/0x15c8 net/ipv4/fib_semantics.c:1290 fib_create_info+0x109c/0x1e98 net/ipv4/fib_semantics.c:1589 fib_table_insert+0xb0/0x13fc net/ipv4/fib_trie.c:1217 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1118 fib_add_ifaddr+0x2e0/0x500 net/ipv4/fib_frontend.c:1155 fib_netdev_event+0x360/0x4a0 net/ipv4/fib_frontend.c:1500 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc include/linux/netdevice.h:4061 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3671 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3852 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4627 ipv6_add_addr+0x3d4/0xd74 net/ipv6/addrconf.c:1121 inet6_addr_add+0x388/0x844 net/ipv6/addrconf.c:3028 inet6_rtm_newaddr+0x558/0x780 net/ipv6/addrconf.c:4988 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4061 fib_create_info+0x127c/0x1e98 net/ipv4/fib_semantics.c:1583 fib_table_insert+0xb0/0x13fc net/ipv4/fib_trie.c:1217 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1118 fib_add_ifaddr+0x114/0x500 net/ipv4/fib_frontend.c:1140 fib_inetaddr_event+0x12c/0x1f8 net/ipv4/fib_frontend.c:1454 notifier_call_chain kernel/notifier.c:87 [inline] blocking_notifier_call_chain+0xf4/0x19c kernel/notifier.c:382 __inet_insert_ifa+0x88c/0xa34 net/ipv4/devinet.c:568 inet_rtm_newaddr+0x8b4/0x15bc net/ipv4/devinet.c:970 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161 final repro crashed as (corrupted=false): unregister_netdevice: waiting for syz_tun to become free. Usage count = 10 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_hold include/linux/netdevice.h:4078 [inline] dst_init+0xc0/0x3dc net/core/dst.c:52 dst_alloc+0x124/0x16c net/core/dst.c:92 rt_dst_alloc net/ipv4/route.c:1689 [inline] __mkroute_output net/ipv4/route.c:2655 [inline] ip_route_output_key_hash_rcu+0xfbc/0x1dfc net/ipv4/route.c:2877 ip_route_output_key_hash+0x1b0/0x2fc net/ipv4/route.c:2706 __ip_route_output_key include/net/route.h:137 [inline] ip_route_output_flow+0x3c/0x158 net/ipv4/route.c:2936 ip_route_output_key include/net/route.h:147 [inline] geneve_link_config+0x16c/0x544 drivers/net/geneve.c:1651 geneve_newlink+0x130/0x198 drivers/net/geneve.c:1704 rtnl_newlink_create net/core/rtnetlink.c:3436 [inline] __rtnl_newlink net/core/rtnetlink.c:3656 [inline] rtnl_newlink+0x10b4/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc include/linux/netdevice.h:4061 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3671 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3852 ip6_route_add+0x34/0x154 net/ipv6/route.c:3896 addrconf_prefix_route net/ipv6/addrconf.c:2450 [inline] addrconf_add_linklocal+0x3ac/0x60c net/ipv6/addrconf.c:3274 addrconf_addr_gen+0x3ec/0x500 net/ipv6/addrconf.c:3403 addrconf_init_auto_addrs+0x5a8/0x91c net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xc98 net/ipv6/addrconf.c:3700 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc include/linux/netdevice.h:4061 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3671 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3852 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4627 ipv6_add_addr+0x3d4/0xd74 net/ipv6/addrconf.c:1121 addrconf_add_linklocal+0x23c/0x60c net/ipv6/addrconf.c:3272 addrconf_addr_gen+0x3ec/0x500 net/ipv6/addrconf.c:3403 addrconf_init_auto_addrs+0x5a8/0x91c net/ipv6/addrconf.c:-1 addrconf_notify+0x8cc/0xc98 net/ipv6/addrconf.c:3700 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc include/linux/netdevice.h:4061 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3671 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3852 ip6_route_add+0x34/0x154 net/ipv6/route.c:3896 addrconf_add_mroute net/ipv6/addrconf.c:2514 [inline] addrconf_add_dev+0x228/0x328 net/ipv6/addrconf.c:2532 addrconf_dev_config net/ipv6/addrconf.c:3439 [inline] addrconf_init_auto_addrs+0x4d8/0x91c net/ipv6/addrconf.c:3527 addrconf_notify+0x8cc/0xc98 net/ipv6/addrconf.c:3700 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc include/linux/netdevice.h:4061 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3671 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3852 ip6_route_add+0x34/0x154 net/ipv6/route.c:3896 addrconf_prefix_route net/ipv6/addrconf.c:2450 [inline] fixup_permanent_addr net/ipv6/addrconf.c:3558 [inline] addrconf_permanent_addr+0x518/0x870 net/ipv6/addrconf.c:3582 addrconf_notify+0x7b8/0xc98 net/ipv6/addrconf.c:3654 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_hold include/linux/netdevice.h:4078 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1270 [inline] fib_check_nh+0x9d4/0x15c8 net/ipv4/fib_semantics.c:1290 fib_create_info+0x109c/0x1e98 net/ipv4/fib_semantics.c:1589 fib_table_insert+0xb0/0x13fc net/ipv4/fib_trie.c:1217 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1118 fib_add_ifaddr+0x330/0x500 net/ipv4/fib_frontend.c:1162 fib_netdev_event+0x360/0x4a0 net/ipv4/fib_frontend.c:1500 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_hold include/linux/netdevice.h:4078 [inline] fib_check_nh_nongw net/ipv4/fib_semantics.c:1270 [inline] fib_check_nh+0x9d4/0x15c8 net/ipv4/fib_semantics.c:1290 fib_create_info+0x109c/0x1e98 net/ipv4/fib_semantics.c:1589 fib_table_insert+0xb0/0x13fc net/ipv4/fib_trie.c:1217 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1118 fib_add_ifaddr+0x2e0/0x500 net/ipv4/fib_frontend.c:1155 fib_netdev_event+0x360/0x4a0 net/ipv4/fib_frontend.c:1500 notifier_call_chain kernel/notifier.c:87 [inline] raw_notifier_call_chain+0xd8/0x168 kernel/notifier.c:455 call_netdevice_notifiers_info net/core/dev.c:2014 [inline] call_netdevice_notifiers_extack net/core/dev.c:2052 [inline] call_netdevice_notifiers net/core/dev.c:2066 [inline] __dev_notify_flags+0x260/0x490 net/core/dev.c:8716 dev_change_flags+0xd0/0x15c net/core/dev.c:8754 do_setlink+0x9d0/0x2158 net/core/rtnetlink.c:2845 __rtnl_newlink net/core/rtnetlink.c:3622 [inline] rtnl_newlink+0x142c/0x1af0 net/core/rtnetlink.c:3669 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc include/linux/netdevice.h:4061 [inline] fib6_nh_init+0x604/0x1a08 net/ipv6/route.c:3671 ip6_route_info_create+0x7d0/0xf9c net/ipv6/route.c:3852 addrconf_f6i_alloc+0x1a8/0x36c net/ipv6/route.c:4627 ipv6_add_addr+0x3d4/0xd74 net/ipv6/addrconf.c:1121 inet6_addr_add+0x388/0x844 net/ipv6/addrconf.c:3028 inet6_rtm_newaddr+0x558/0x780 net/ipv6/addrconf.c:4988 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 leaked reference. __netdev_tracker_alloc include/linux/netdevice.h:4049 [inline] netdev_tracker_alloc+0x68/0xb4 include/linux/netdevice.h:4061 fib_create_info+0x127c/0x1e98 net/ipv4/fib_semantics.c:1583 fib_table_insert+0xb0/0x13fc net/ipv4/fib_trie.c:1217 fib_magic+0x26c/0x344 net/ipv4/fib_frontend.c:1118 fib_add_ifaddr+0x114/0x500 net/ipv4/fib_frontend.c:1140 fib_inetaddr_event+0x12c/0x1f8 net/ipv4/fib_frontend.c:1454 notifier_call_chain kernel/notifier.c:87 [inline] blocking_notifier_call_chain+0xf4/0x19c kernel/notifier.c:382 __inet_insert_ifa+0x88c/0xa34 net/ipv4/devinet.c:568 inet_rtm_newaddr+0x8b4/0x15bc net/ipv4/devinet.c:970 rtnetlink_rcv_msg+0x694/0xcc4 net/core/rtnetlink.c:6166 netlink_rcv_skb+0x220/0x3ec net/netlink/af_netlink.c:2516 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6184 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] __sys_sendto+0x324/0x440 net/socket.c:2153 __do_sys_sendto net/socket.c:2165 [inline] __se_sys_sendto net/socket.c:2161 [inline] __arm64_sys_sendto+0xe4/0x104 net/socket.c:2161