Extracting prog: 3m10.318939876s
Minimizing prog: 42m48.556817748s
Simplifying prog options: 9m31.294530645s
Extracting C: 5m12.929983412s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(0x0, 0x14927e, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program crashed: INFO: task hung in rtnl_lock
a never seen crash title: INFO: task hung in rtnl_lock, ignore
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bfs-prlimit64-sched_setscheduler-open
detailed listing:
executing program 0:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
validation run: crashed=true
reproducing took 1h6m57.292789996s
repro crashed as (corrupted=false):
unregister_netdevice: waiting for netdevsim3 to become free. Usage count = 2
leaked reference.
 __netdev_tracker_alloc include/linux/netdevice.h:4051 [inline]
 netdev_tracker_alloc include/linux/netdevice.h:4063 [inline]
 fib6_nh_init+0x620/0x19cc net/ipv6/route.c:3665
 ip6_route_info_create+0x7b0/0xf7c net/ipv6/route.c:3846
 addrconf_f6i_alloc+0x188/0x330 net/ipv6/route.c:4621
 ipv6_add_addr+0x3b4/0xccc net/ipv6/addrconf.c:1121
 addrconf_add_linklocal+0x22c/0x5d0 net/ipv6/addrconf.c:3257
 addrconf_addr_gen+0x3b4/0x4a8 net/ipv6/addrconf.c:3388
 addrconf_init_auto_addrs+0x5a4/0x918 net/ipv6/addrconf.c:-1
 addrconf_notify+0x8dc/0xca8 net/ipv6/addrconf.c:3685
 notifier_call_chain kernel/notifier.c:87 [inline]
 raw_notifier_call_chain+0xd4/0x164 kernel/notifier.c:455
 call_netdevice_notifiers_info net/core/dev.c:2001 [inline]
 call_netdevice_notifiers_extack net/core/dev.c:2039 [inline]
 call_netdevice_notifiers net/core/dev.c:2053 [inline]
 __dev_notify_flags+0x250/0x46c net/core/dev.c:-1
 dev_change_flags+0xc8/0x154 net/core/dev.c:8714
 do_setlink+0xa24/0x32c4 net/core/rtnetlink.c:2833
 __rtnl_newlink net/core/rtnetlink.c:3608 [inline]
 rtnl_newlink+0x12d0/0x1a1c net/core/rtnetlink.c:3655
 rtnetlink_rcv_msg+0x734/0xce4 net/core/rtnetlink.c:6150
 netlink_rcv_skb+0x208/0x3c4 net/netlink/af_netlink.c:2511
 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6168

final repro crashed as (corrupted=false):
unregister_netdevice: waiting for netdevsim3 to become free. Usage count = 2
leaked reference.
 __netdev_tracker_alloc include/linux/netdevice.h:4051 [inline]
 netdev_tracker_alloc include/linux/netdevice.h:4063 [inline]
 fib6_nh_init+0x620/0x19cc net/ipv6/route.c:3665
 ip6_route_info_create+0x7b0/0xf7c net/ipv6/route.c:3846
 addrconf_f6i_alloc+0x188/0x330 net/ipv6/route.c:4621
 ipv6_add_addr+0x3b4/0xccc net/ipv6/addrconf.c:1121
 addrconf_add_linklocal+0x22c/0x5d0 net/ipv6/addrconf.c:3257
 addrconf_addr_gen+0x3b4/0x4a8 net/ipv6/addrconf.c:3388
 addrconf_init_auto_addrs+0x5a4/0x918 net/ipv6/addrconf.c:-1
 addrconf_notify+0x8dc/0xca8 net/ipv6/addrconf.c:3685
 notifier_call_chain kernel/notifier.c:87 [inline]
 raw_notifier_call_chain+0xd4/0x164 kernel/notifier.c:455
 call_netdevice_notifiers_info net/core/dev.c:2001 [inline]
 call_netdevice_notifiers_extack net/core/dev.c:2039 [inline]
 call_netdevice_notifiers net/core/dev.c:2053 [inline]
 __dev_notify_flags+0x250/0x46c net/core/dev.c:-1
 dev_change_flags+0xc8/0x154 net/core/dev.c:8714
 do_setlink+0xa24/0x32c4 net/core/rtnetlink.c:2833
 __rtnl_newlink net/core/rtnetlink.c:3608 [inline]
 rtnl_newlink+0x12d0/0x1a1c net/core/rtnetlink.c:3655
 rtnetlink_rcv_msg+0x734/0xce4 net/core/rtnetlink.c:6150
 netlink_rcv_skb+0x208/0x3c4 net/netlink/af_netlink.c:2511
 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6168