unregister_netdevice: waiting for syz_tun to become free. Usage count = 2
ref_tracker: netdev@ffff88805fafc6e8 has 1/1 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4485 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4497 [inline]
     netdev_get_by_index+0x79/0xb0 net/core/dev.c:1027
     fib6_nh_init+0x285/0x1e60 net/ipv6/route.c:3610
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3909
     ip6_route_add+0x6e/0x1d0 net/ipv6/route.c:3961
     addrconf_prefix_route+0x3a2/0x480 net/ipv6/addrconf.c:2488
     addrconf_add_linklocal+0x262/0x4a0 net/ipv6/addrconf.c:3313
     addrconf_addr_gen+0x2f8/0x360 net/ipv6/addrconf.c:3447
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3752
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345

balance for syz_tun@dst_entry is unknown
Call trace for syz_tun[1] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     rx_queue_add_kobject net/core/net-sysfs.c:1242 [inline]
     net_rx_queue_update_kobjects+0x148/0x750 net/core/net-sysfs.c:1307
     register_queue_kobjects net/core/net-sysfs.c:2099 [inline]
     netdev_register_kobject+0x21f/0x310 net/core/net-sysfs.c:2347
     register_netdevice+0x14b6/0x1f10 net/core/dev.c:11421
     tun_set_iff+0x847/0xf00 drivers/net/tun.c:2809
     __tun_chr_ioctl+0x7cb/0x1e30 drivers/net/tun.c:3090
     vfs_ioctl fs/ioctl.c:51 [inline]
     __do_sys_ioctl fs/ioctl.c:597 [inline]
     __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[2] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     netdev_queue_add_kobject net/core/net-sysfs.c:1979 [inline]
     netdev_queue_update_kobjects+0x16d/0x6c0 net/core/net-sysfs.c:2041
     register_queue_kobjects net/core/net-sysfs.c:2104 [inline]
     netdev_register_kobject+0x258/0x310 net/core/net-sysfs.c:2347
     register_netdevice+0x14b6/0x1f10 net/core/dev.c:11421
     tun_set_iff+0x847/0xf00 drivers/net/tun.c:2809
     __tun_chr_ioctl+0x7cb/0x1e30 drivers/net/tun.c:3090
     vfs_ioctl fs/ioctl.c:51 [inline]
     __do_sys_ioctl fs/ioctl.c:597 [inline]
     __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[3] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold+0x27/0xc0 include/linux/netdevice.h:4513
     register_netdevice+0x17b3/0x1f10 net/core/dev.c:11445
     tun_set_iff+0x847/0xf00 drivers/net/tun.c:2809
     __tun_chr_ioctl+0x7cb/0x1e30 drivers/net/tun.c:3090
     vfs_ioctl fs/ioctl.c:51 [inline]
     __do_sys_ioctl fs/ioctl.c:597 [inline]
     __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[4] +3 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:674 [inline]
     netdevice_event+0x505/0x900 drivers/infiniband/core/roce_gid_mgmt.c:822
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     register_netdevice+0x1919/0x1f10 net/core/dev.c:11459
     tun_set_iff+0x847/0xf00 drivers/net/tun.c:2809
     __tun_chr_ioctl+0x7cb/0x1e30 drivers/net/tun.c:3090
     vfs_ioctl fs/ioctl.c:51 [inline]
     __do_sys_ioctl fs/ioctl.c:597 [inline]
     __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[5] +3 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:675 [inline]
     netdevice_event+0x5af/0x900 drivers/infiniband/core/roce_gid_mgmt.c:822
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     register_netdevice+0x1919/0x1f10 net/core/dev.c:11459
     tun_set_iff+0x847/0xf00 drivers/net/tun.c:2809
     __tun_chr_ioctl+0x7cb/0x1e30 drivers/net/tun.c:3090
     vfs_ioctl fs/ioctl.c:51 [inline]
     __do_sys_ioctl fs/ioctl.c:597 [inline]
     __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[6] -10 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     dev_put include/linux/netdevice.h:4548 [inline]
     netdevice_event_work_handler+0x12c/0x260 drivers/infiniband/core/roce_gid_mgmt.c:652
     process_one_work+0x98b/0x1630 kernel/workqueue.c:3306
Call trace for syz_tun[7] -10 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     dev_put include/linux/netdevice.h:4548 [inline]
     netdevice_event_work_handler+0x1b2/0x260 drivers/infiniband/core/roce_gid_mgmt.c:653
     process_one_work+0x98b/0x1630 kernel/workqueue.c:3306
Call trace for syz_tun[8] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     neigh_parms_alloc+0x192/0x550 net/core/neighbour.c:1778
     inetdev_init+0x118/0x4f0 net/ipv4/devinet.c:280
     inetdev_event+0x30d/0x1610 net/ipv4/devinet.c:1590
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     register_netdevice+0x1919/0x1f10 net/core/dev.c:11459
     tun_set_iff+0x847/0xf00 drivers/net/tun.c:2809
     __tun_chr_ioctl+0x7cb/0x1e30 drivers/net/tun.c:3090
     vfs_ioctl fs/ioctl.c:51 [inline]
     __do_sys_ioctl fs/ioctl.c:597 [inline]
     __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[9] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     inetdev_init+0x19f/0x4f0 net/ipv4/devinet.c:286
     inetdev_event+0x30d/0x1610 net/ipv4/devinet.c:1590
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     register_netdevice+0x1919/0x1f10 net/core/dev.c:11459
     tun_set_iff+0x847/0xf00 drivers/net/tun.c:2809
     __tun_chr_ioctl+0x7cb/0x1e30 drivers/net/tun.c:3090
     vfs_ioctl fs/ioctl.c:51 [inline]
     __do_sys_ioctl fs/ioctl.c:597 [inline]
     __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[10] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     neigh_parms_alloc+0x192/0x550 net/core/neighbour.c:1778
     ipv6_add_dev+0x44b/0x1410 net/ipv6/addrconf.c:403
     addrconf_notify+0x771/0x1050 net/ipv6/addrconf.c:3662
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     register_netdevice+0x1919/0x1f10 net/core/dev.c:11459
     tun_set_iff+0x847/0xf00 drivers/net/tun.c:2809
     __tun_chr_ioctl+0x7cb/0x1e30 drivers/net/tun.c:3090
     vfs_ioctl fs/ioctl.c:51 [inline]
     __do_sys_ioctl fs/ioctl.c:597 [inline]
     __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[11] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     ipv6_add_dev+0x4ec/0x1410 net/ipv6/addrconf.c:411
     addrconf_notify+0x771/0x1050 net/ipv6/addrconf.c:3662
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     register_netdevice+0x1919/0x1f10 net/core/dev.c:11459
     tun_set_iff+0x847/0xf00 drivers/net/tun.c:2809
     __tun_chr_ioctl+0x7cb/0x1e30 drivers/net/tun.c:3090
     vfs_ioctl fs/ioctl.c:51 [inline]
     __do_sys_ioctl fs/ioctl.c:597 [inline]
     __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[12] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     batadv_hardif_add_interface net/batman-adv/hard-interface.c:878 [inline]
     batadv_hard_if_event+0xb47/0x1240 net/batman-adv/hard-interface.c:958
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     register_netdevice+0x1919/0x1f10 net/core/dev.c:11459
     tun_set_iff+0x847/0xf00 drivers/net/tun.c:2809
     __tun_chr_ioctl+0x7cb/0x1e30 drivers/net/tun.c:3090
     vfs_ioctl fs/ioctl.c:51 [inline]
     __do_sys_ioctl fs/ioctl.c:597 [inline]
     __se_sys_ioctl+0xff/0x170 fs/ioctl.c:583
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[13] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     addr_event+0x302/0x480 drivers/infiniband/core/roce_gid_mgmt.c:870
     inetaddr_event+0xef/0x150 drivers/infiniband/core/roce_gid_mgmt.c:889
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     blocking_notifier_call_chain+0x6a/0x90 kernel/notifier.c:380
     __inet_insert_ifa+0x9e9/0xbc0 net/ipv4/devinet.c:566
     inet_rtm_newaddr+0x10d8/0x1ad0 net/ipv4/devinet.c:1001
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[14] -6 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     dev_put include/linux/netdevice.h:4548 [inline]
     update_gid_event_work_handler+0x84/0xf0 drivers/infiniband/core/roce_gid_mgmt.c:834
     process_one_work+0x98b/0x1630 kernel/workqueue.c:3306
Call trace for syz_tun[15] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     dev_get_by_index+0x1b3/0x2f0 net/core/dev.c:1002
     fib_create_info+0x229d/0x31f0 net/ipv4/fib_semantics.c:1491
     fib_table_insert+0xc8/0x1b50 net/ipv4/fib_trie.c:1212
     fib_magic+0x434/0x510 net/ipv4/fib_frontend.c:1134
     fib_add_ifaddr+0x144/0x5f0 net/ipv4/fib_frontend.c:1156
     fib_inetaddr_event+0x12e/0x190 net/ipv4/fib_frontend.c:1470
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     blocking_notifier_call_chain+0x6a/0x90 kernel/notifier.c:380
     __inet_insert_ifa+0x9e9/0xbc0 net/ipv4/devinet.c:566
     inet_rtm_newaddr+0x10d8/0x1ad0 net/ipv4/devinet.c:1001
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[16] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     dev_get_by_index+0x1b3/0x2f0 net/core/dev.c:1002
     netdev_get_by_index+0x25/0xb0 net/core/dev.c:1025
     fib6_nh_init+0x285/0x1e60 net/ipv6/route.c:3610
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3909
     ip6_route_add+0x6e/0x1d0 net/ipv6/route.c:3961
     addrconf_add_mroute+0x2d1/0x370 net/ipv6/addrconf.c:2552
     addrconf_add_dev net/ipv6/addrconf.c:2570 [inline]
     inet6_addr_add+0x2e4/0xbd0 net/ipv6/addrconf.c:3032
     inet6_rtm_newaddr+0xa17/0xe30 net/ipv6/addrconf.c:5071
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[17] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     fib6_nh_init+0x175b/0x1e60 net/ipv6/route.c:3711
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3909
     ip6_route_add+0x6e/0x1d0 net/ipv6/route.c:3961
     addrconf_add_mroute+0x2d1/0x370 net/ipv6/addrconf.c:2552
     addrconf_add_dev net/ipv6/addrconf.c:2570 [inline]
     inet6_addr_add+0x2e4/0xbd0 net/ipv6/addrconf.c:3032
     inet6_rtm_newaddr+0xa17/0xe30 net/ipv6/addrconf.c:5071
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[18] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     dev_get_by_index+0x1b3/0x2f0 net/core/dev.c:1002
     netdev_get_by_index+0x25/0xb0 net/core/dev.c:1025
     fib6_nh_init+0x285/0x1e60 net/ipv6/route.c:3610
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3909
     addrconf_f6i_alloc+0x3b7/0x630 net/ipv6/route.c:4701
     ipv6_add_addr+0x59c/0x1190 net/ipv6/addrconf.c:1126
     inet6_addr_add+0x494/0xbd0 net/ipv6/addrconf.c:3050
     inet6_rtm_newaddr+0xa17/0xe30 net/ipv6/addrconf.c:5071
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[19] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     addr_event+0x302/0x480 drivers/infiniband/core/roce_gid_mgmt.c:870
     inet6addr_event+0x9f/0xd0 drivers/infiniband/core/roce_gid_mgmt.c:903
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     atomic_notifier_call_chain+0xda/0x180 kernel/notifier.c:223
     ipv6_add_addr+0xe96/0x1190 net/ipv6/addrconf.c:1186
     inet6_addr_add+0x494/0xbd0 net/ipv6/addrconf.c:3050
     inet6_rtm_newaddr+0xa17/0xe30 net/ipv6/addrconf.c:5071
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[20] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     dev_get_by_index+0x1b3/0x2f0 net/core/dev.c:1002
     netdev_get_by_index+0x25/0xb0 net/core/dev.c:1025
     fib6_nh_init+0x285/0x1e60 net/ipv6/route.c:3610
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3909
     ip6_route_add+0x6e/0x1d0 net/ipv6/route.c:3961
     addrconf_prefix_route+0x3a2/0x480 net/ipv6/addrconf.c:2488
     inet6_addr_add+0x551/0xbd0 net/ipv6/addrconf.c:3053
     inet6_rtm_newaddr+0xa17/0xe30 net/ipv6/addrconf.c:5071
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[21] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     fib6_nh_init+0x175b/0x1e60 net/ipv6/route.c:3711
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3909
     ip6_route_add+0x6e/0x1d0 net/ipv6/route.c:3961
     addrconf_prefix_route+0x3a2/0x480 net/ipv6/addrconf.c:2488
     inet6_addr_add+0x551/0xbd0 net/ipv6/addrconf.c:3053
     inet6_rtm_newaddr+0xa17/0xe30 net/ipv6/addrconf.c:5071
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[22] +2 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     ___neigh_create+0xcb3/0x2360 net/core/neighbour.c:664
     neigh_add+0xc51/0xf70 net/core/neighbour.c:2136
     rtnetlink_rcv_msg+0x77e/0xbe0 net/core/rtnetlink.c:7005
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[23] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dst_init+0x6f/0x490 net/core/dst.c:128
     dst_alloc+0x12a/0x170 net/core/dst.c:171
     ip6_dst_alloc net/ipv6/route.c:342 [inline]
     icmp6_dst_alloc+0x75/0x480 net/ipv6/route.c:3341
     mld_sendpack+0x6ba/0xe40 net/ipv6/mcast.c:1831
     ipv6_mc_dad_complete+0x88/0x540 net/ipv6/mcast.c:2266
     addrconf_dad_completed+0x622/0xe60 net/ipv6/addrconf.c:4352
     addrconf_dad_work+0xdc4/0x1680 include/linux/rwlock_rt.h:-1
     process_one_work+0x98b/0x1630 kernel/workqueue.c:3306
Call trace for syz_tun[24] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     ___neigh_create+0xcb3/0x2360 net/core/neighbour.c:664
     ip6_finish_output2+0x729/0x1430 net/ipv6/ip6_output.c:128
     NF_HOOK_COND include/linux/netfilter.h:307 [inline]
     ip6_output+0x340/0x550 net/ipv6/ip6_output.c:246
     dst_output include/net/dst.h:488 [inline]
     NF_HOOK+0x177/0x4f0 include/linux/netfilter.h:318
     mld_sendpack+0x8b4/0xe40 net/ipv6/mcast.c:1842
     ipv6_mc_dad_complete+0x88/0x540 net/ipv6/mcast.c:2266
     addrconf_dad_completed+0x622/0xe60 net/ipv6/addrconf.c:4352
     addrconf_dad_work+0xdc4/0x1680 include/linux/rwlock_rt.h:-1
     process_one_work+0x98b/0x1630 kernel/workqueue.c:3306
Call trace for syz_tun[25] +3 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:674 [inline]
     netdevice_event+0x505/0x900 drivers/infiniband/core/roce_gid_mgmt.c:822
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     netif_set_mac_address+0x39f/0x4e0 net/core/dev.c:9997
     do_setlink+0x9bb/0x45a0 net/core/rtnetlink.c:3133
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[26] +3 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:675 [inline]
     netdevice_event+0x5af/0x900 drivers/infiniband/core/roce_gid_mgmt.c:822
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     netif_set_mac_address+0x39f/0x4e0 net/core/dev.c:9997
     do_setlink+0x9bb/0x45a0 net/core/rtnetlink.c:3133
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[27] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     neigh_destroy+0x364/0x5d0 net/core/neighbour.c:940
     neigh_flush_dev net/core/neighbour.c:433 [inline]
     neigh_changeaddr+0xf6/0x150 net/core/neighbour.c:457
     arp_netdev_event+0x6b/0x330 net/ipv4/arp.c:1333
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     netif_set_mac_address+0x39f/0x4e0 net/core/dev.c:9997
     do_setlink+0x9bb/0x45a0 net/core/rtnetlink.c:3133
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
     __sock_sendmsg net/socket.c:812 [inline]
     __sys_sendto+0x402/0x590 net/socket.c:2280
     __do_sys_sendto net/socket.c:2287 [inline]
     __se_sys_sendto net/socket.c:2283 [inline]
     __x64_sys_sendto+0xde/0x100 net/socket.c:2283
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[28] -2 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     neigh_destroy+0x364/0x5d0 net/core/neighbour.c:940
     neigh_flush_dev net/core/neighbour.c:433 [inline]
     neigh_changeaddr+0xf6/0x150 net/core/neighbour.c:457
     ndisc_netdev_event+0x18f/0x4d0 net/ipv6/ndisc.c:1866
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     netif_set_mac_address+0x39f/0x4e0 net/core/dev.c:9997
     do_setlink+0x9bb/0x45a0 net/core/rtnetlink.c:3133
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
     __sock_sendmsg net/socket.c:812 [inline]
     __sys_sendto+0x402/0x590 net/socket.c:2280
     __do_sys_sendto net/socket.c:2287 [inline]
     __se_sys_sendto net/socket.c:2283 [inline]
     __x64_sys_sendto+0xde/0x100 net/socket.c:2283
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[29] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     qdisc_alloc+0x688/0xa00 net/sched/sch_generic.c:1008
     qdisc_create_dflt+0x8e/0x4e0 net/sched/sch_generic.c:1031
     attach_one_default_qdisc net/sched/sch_generic.c:1197 [inline]
     netdev_for_each_tx_queue include/linux/netdevice.h:2711 [inline]
     attach_default_qdiscs net/sched/sch_generic.c:1215 [inline]
     dev_activate+0x378/0x1150 net/sched/sch_generic.c:1274
     __dev_open+0x67a/0x830 net/core/dev.c:1711
     __dev_change_flags+0x2fa/0x7e0 net/core/dev.c:9756
     netif_change_flags+0x88/0x1a0 net/core/dev.c:9819
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[30] +3 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:674 [inline]
     netdevice_event+0x505/0x900 drivers/infiniband/core/roce_gid_mgmt.c:822
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[31] +3 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:675 [inline]
     netdevice_event+0x5af/0x900 drivers/infiniband/core/roce_gid_mgmt.c:822
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[32] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     dev_get_by_index+0x1b3/0x2f0 net/core/dev.c:1002
     fib_create_info+0x229d/0x31f0 net/ipv4/fib_semantics.c:1491
     fib_table_insert+0xc8/0x1b50 net/ipv4/fib_trie.c:1212
     fib_magic+0x434/0x510 net/ipv4/fib_frontend.c:1134
     fib_add_ifaddr+0x144/0x5f0 net/ipv4/fib_frontend.c:1156
     fib_netdev_event+0x382/0x490 net/ipv4/fib_frontend.c:1516
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[33] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     fib_check_nh_nongw net/ipv4/fib_semantics.c:1261 [inline]
     fib_check_nh+0xca3/0x1b00 net/ipv4/fib_semantics.c:1281
     fib_create_info+0x208c/0x31f0 net/ipv4/fib_semantics.c:1501
     fib_table_insert+0xc8/0x1b50 net/ipv4/fib_trie.c:1212
     fib_magic+0x434/0x510 net/ipv4/fib_frontend.c:1134
     fib_add_ifaddr+0x38d/0x5f0 net/ipv4/fib_frontend.c:1171
     fib_netdev_event+0x382/0x490 net/ipv4/fib_frontend.c:1516
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[34] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     fib_check_nh_nongw net/ipv4/fib_semantics.c:1261 [inline]
     fib_check_nh+0xca3/0x1b00 net/ipv4/fib_semantics.c:1281
     fib_create_info+0x208c/0x31f0 net/ipv4/fib_semantics.c:1501
     fib_table_insert+0xc8/0x1b50 net/ipv4/fib_trie.c:1212
     fib_magic+0x434/0x510 net/ipv4/fib_frontend.c:1134
     fib_add_ifaddr+0x3fb/0x5f0 net/ipv4/fib_frontend.c:1178
     fib_netdev_event+0x382/0x490 net/ipv4/fib_frontend.c:1516
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[35] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     dev_get_by_index+0x1b3/0x2f0 net/core/dev.c:1002
     netdev_get_by_index+0x25/0xb0 net/core/dev.c:1025
     fib6_nh_init+0x285/0x1e60 net/ipv6/route.c:3610
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3909
     ip6_route_add+0x6e/0x1d0 net/ipv6/route.c:3961
     addrconf_prefix_route+0x3a2/0x480 net/ipv6/addrconf.c:2488
     fixup_permanent_addr net/ipv6/addrconf.c:3603 [inline]
     addrconf_permanent_addr+0x723/0xa30 net/ipv6/addrconf.c:3639
     addrconf_notify+0x864/0x1050 net/ipv6/addrconf.c:3706
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[36] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     dev_get_by_index+0x1b3/0x2f0 net/core/dev.c:1002
     netdev_get_by_index+0x25/0xb0 net/core/dev.c:1025
     fib6_nh_init+0x285/0x1e60 net/ipv6/route.c:3610
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3909
     ip6_route_add+0x6e/0x1d0 net/ipv6/route.c:3961
     addrconf_add_mroute+0x2d1/0x370 net/ipv6/addrconf.c:2552
     addrconf_add_dev net/ipv6/addrconf.c:2570 [inline]
     addrconf_dev_config net/ipv6/addrconf.c:3484 [inline]
     addrconf_init_auto_addrs+0x4d7/0xa50 net/ipv6/addrconf.c:3572
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3752
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[37] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     dev_get_by_index+0x1b3/0x2f0 net/core/dev.c:1002
     netdev_get_by_index+0x25/0xb0 net/core/dev.c:1025
     fib6_nh_init+0x285/0x1e60 net/ipv6/route.c:3610
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3909
     addrconf_f6i_alloc+0x3b7/0x630 net/ipv6/route.c:4701
     ipv6_add_addr+0x59c/0x1190 net/ipv6/addrconf.c:1126
     addrconf_add_linklocal+0x209/0x4a0 net/ipv6/addrconf.c:3311
     addrconf_addr_gen+0x2f8/0x360 net/ipv6/addrconf.c:3447
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3752
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[38] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     addr_event+0x302/0x480 drivers/infiniband/core/roce_gid_mgmt.c:870
     inet6addr_event+0x9f/0xd0 drivers/infiniband/core/roce_gid_mgmt.c:903
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     atomic_notifier_call_chain+0xda/0x180 kernel/notifier.c:223
     ipv6_add_addr+0xe96/0x1190 net/ipv6/addrconf.c:1186
     addrconf_add_linklocal+0x209/0x4a0 net/ipv6/addrconf.c:3311
     addrconf_addr_gen+0x2f8/0x360 net/ipv6/addrconf.c:3447
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3752
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[39] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     dev_get_by_index+0x1b3/0x2f0 net/core/dev.c:1002
     netdev_get_by_index+0x25/0xb0 net/core/dev.c:1025
     fib6_nh_init+0x285/0x1e60 net/ipv6/route.c:3610
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3909
     ip6_route_add+0x6e/0x1d0 net/ipv6/route.c:3961
     addrconf_prefix_route+0x3a2/0x480 net/ipv6/addrconf.c:2488
     addrconf_add_linklocal+0x262/0x4a0 net/ipv6/addrconf.c:3313
     addrconf_addr_gen+0x2f8/0x360 net/ipv6/addrconf.c:3447
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3752
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9795
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9824
     do_setlink+0xfa5/0x45a0 net/core/rtnetlink.c:3181
     rtnl_changelink net/core/rtnetlink.c:3800 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3973 [inline]
     rtnl_newlink+0x15ad/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[40] -7 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     dst_destroy+0x137/0x570 net/core/dst.c:192
     rcu_do_batch kernel/rcu/tree.c:2617 [inline]
     rcu_core kernel/rcu/tree.c:2869 [inline]
     rcu_cpu_kthread+0x99e/0x1470 kernel/rcu/tree.c:2957
     smpboot_thread_fn+0x541/0xa50 kernel/smpboot.c:160
     kthread+0x388/0x470 kernel/kthread.c:436
     ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
     ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Call trace for syz_tun[41] +4 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dst_init+0x6f/0x490 net/core/dst.c:128
     dst_alloc+0x12a/0x170 net/core/dst.c:171
     ip6_dst_alloc net/ipv6/route.c:342 [inline]
     icmp6_dst_alloc+0x75/0x480 net/ipv6/route.c:3341
     mld_sendpack+0x6ba/0xe40 net/ipv6/mcast.c:1831
     mld_send_cr net/ipv6/mcast.c:2141 [inline]
     mld_ifc_work+0x835/0xe70 net/ipv6/mcast.c:2680
     process_one_work+0x98b/0x1630 kernel/workqueue.c:3306
Call trace for syz_tun[42] +2 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     ___neigh_create+0xcb3/0x2360 net/core/neighbour.c:664
     ip6_finish_output2+0x729/0x1430 net/ipv6/ip6_output.c:128
     NF_HOOK_COND include/linux/netfilter.h:307 [inline]
     ip6_output+0x340/0x550 net/ipv6/ip6_output.c:246
     dst_output include/net/dst.h:488 [inline]
     NF_HOOK+0x177/0x4f0 include/linux/netfilter.h:318
     mld_sendpack+0x8b4/0xe40 net/ipv6/mcast.c:1842
     mld_send_cr net/ipv6/mcast.c:2141 [inline]
     mld_ifc_work+0x835/0xe70 net/ipv6/mcast.c:2680
     process_one_work+0x98b/0x1630 kernel/workqueue.c:3306
Call trace for syz_tun[43] -4 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     fib_nh_common_release+0x5c/0x430 net/ipv4/fib_semantics.c:204
     fib_nh_release net/ipv4/fib_semantics.c:218 [inline]
     free_fib_info_rcu+0xdf/0x310 net/ipv4/fib_semantics.c:230
     rcu_do_batch kernel/rcu/tree.c:2617 [inline]
     rcu_core kernel/rcu/tree.c:2869 [inline]
     rcu_cpu_kthread+0x99e/0x1470 kernel/rcu/tree.c:2957
     smpboot_thread_fn+0x541/0xa50 kernel/smpboot.c:160
     kthread+0x388/0x470 kernel/kthread.c:436
     ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
     ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Call trace for syz_tun[44] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dst_init+0x6f/0x490 net/core/dst.c:128
     dst_alloc+0x12a/0x170 net/core/dst.c:171
     ip6_dst_alloc net/ipv6/route.c:342 [inline]
     icmp6_dst_alloc+0x75/0x480 net/ipv6/route.c:3341
     mld_sendpack+0x6ba/0xe40 net/ipv6/mcast.c:1831
     mld_dad_work+0x45/0x5b0 net/ipv6/mcast.c:2281
     process_one_work+0x98b/0x1630 kernel/workqueue.c:3306
Call trace for syz_tun[45] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dst_init+0x6f/0x490 net/core/dst.c:128
     dst_alloc+0x12a/0x170 net/core/dst.c:171
     rt_dst_alloc net/ipv4/route.c:1651 [inline]
     __mkroute_output net/ipv4/route.c:2655 [inline]
     ip_route_output_key_hash_rcu+0x14d0/0x25e0 net/ipv4/route.c:2875
     ip_route_output_key_hash+0x18d/0x2a0 net/ipv4/route.c:2705
     __ip_route_output_key include/net/route.h:169 [inline]
     ip_route_output_flow+0x2a/0x150 net/ipv4/route.c:2932
     ip_route_output_key include/net/route.h:179 [inline]
     geneve_link_config+0x1a5/0x660 drivers/net/geneve.c:2105
     geneve_newlink+0x1ed/0x260 drivers/net/geneve.c:2163
     rtnl_newlink_create+0x329/0xb70 net/core/rtnetlink.c:3864
     __rtnl_newlink net/core/rtnetlink.c:3995 [inline]
     rtnl_newlink+0x166a/0x1bb0 net/core/rtnetlink.c:4110
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6996
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2551
     netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
     netlink_unicast+0x780/0x920 net/netlink/af_netlink.c:1345
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1895
     sock_sendmsg_nosec+0x112/0x150 net/socket.c:797
Call trace for syz_tun[46] +29 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     tun_get+0x157/0x2f0 drivers/net/tun.c:792
     tun_chr_read_iter+0x66/0x270 drivers/net/tun.c:2200
     new_sync_read fs/read_write.c:493 [inline]
     vfs_read+0x58b/0xa80 fs/read_write.c:574
     ksys_read+0x156/0x270 fs/read_write.c:717
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[47] -29 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     dev_put include/linux/netdevice.h:4548 [inline]
     tun_put drivers/net/tun.c:800 [inline]
     tun_chr_read_iter+0x1c0/0x270 drivers/net/tun.c:2214
     new_sync_read fs/read_write.c:493 [inline]
     vfs_read+0x58b/0xa80 fs/read_write.c:574
     ksys_read+0x156/0x270 fs/read_write.c:717
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[48] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     neigh_destroy+0x364/0x5d0 net/core/neighbour.c:940
     neigh_remove_one+0x46d/0x4c0 net/core/neighbour.c:249
     neigh_forced_gc net/core/neighbour.c:280 [inline]
     neigh_alloc net/core/neighbour.c:512 [inline]
     ___neigh_create+0x4ad/0x2360 net/core/neighbour.c:655
     ip6_finish_output2+0x729/0x1430 net/ipv6/ip6_output.c:128
     NF_HOOK_COND include/linux/netfilter.h:307 [inline]
     ip6_output+0x340/0x550 net/ipv6/ip6_output.c:246
     dst_output include/net/dst.h:488 [inline]
     NF_HOOK include/linux/netfilter.h:318 [inline]
     ndisc_send_skb+0xd0b/0x1670 net/ipv6/ndisc.c:512
     addrconf_dad_completed+0x6e3/0xe60 net/ipv6/addrconf.c:4372
     addrconf_dad_work+0xdc4/0x1680 include/linux/rwlock_rt.h:-1
     process_one_work+0x98b/0x1630 kernel/workqueue.c:3306
     process_scheduled_works kernel/workqueue.c:3389 [inline]
     worker_thread+0xb49/0x1140 kernel/workqueue.c:3470
     kthread+0x388/0x470 kernel/kthread.c:436
     ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
     ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Call trace for syz_tun[49] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     tun_get+0x157/0x2f0 drivers/net/tun.c:792
     tun_chr_write_iter+0x63/0x210 drivers/net/tun.c:1991
     new_sync_write fs/read_write.c:595 [inline]
     vfs_write+0x629/0xba0 fs/read_write.c:688
     ksys_write+0x156/0x270 fs/read_write.c:740
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[50] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     dev_put include/linux/netdevice.h:4548 [inline]
     tun_put drivers/net/tun.c:800 [inline]
     tun_chr_write_iter+0x165/0x210 drivers/net/tun.c:2003
     new_sync_write fs/read_write.c:595 [inline]
     vfs_write+0x629/0xba0 fs/read_write.c:688
     ksys_write+0x156/0x270 fs/read_write.c:740
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[51] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dst_init+0x6f/0x490 net/core/dst.c:128
     dst_alloc+0x12a/0x170 net/core/dst.c:171
     rt_dst_alloc net/ipv4/route.c:1651 [inline]
     __mkroute_output net/ipv4/route.c:2655 [inline]
     ip_route_output_key_hash_rcu+0x14d0/0x25e0 net/ipv4/route.c:2875
     ip_route_output_key_hash+0x18d/0x2a0 net/ipv4/route.c:2705
     __ip_route_output_key include/net/route.h:169 [inline]
     ip_route_output_flow+0x2a/0x150 net/ipv4/route.c:2932
     ip_route_connect include/net/route.h:355 [inline]
     __ip4_datagram_connect+0x9a5/0x1270 net/ipv4/datagram.c:49
     udp_connect+0x33/0x1f0 net/ipv4/udp.c:2144
     __sys_connect_file net/socket.c:2163 [inline]
     __sys_connect+0x315/0x450 net/socket.c:2182
     __do_sys_connect net/socket.c:2188 [inline]
     __se_sys_connect net/socket.c:2185 [inline]
     __x64_sys_connect+0x7a/0x90 net/socket.c:2185
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[52] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     linkwatch_add_event net/core/link_watch.c:131 [inline]
     linkwatch_fire_event+0x157/0x210 net/core/link_watch.c:324
     __tun_detach+0xdc7/0x1600 drivers/net/tun.c:617
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[53] +2 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     addr_event+0x302/0x480 drivers/infiniband/core/roce_gid_mgmt.c:870
     inet6addr_event+0x9f/0xd0 drivers/infiniband/core/roce_gid_mgmt.c:903
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     atomic_notifier_call_chain+0xda/0x180 kernel/notifier.c:223
     addrconf_ifdown+0xffe/0x1aa0 net/ipv6/addrconf.c:3990
     addrconf_notify+0x1bc/0x1050 net/ipv6/addrconf.c:-1
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     netif_close_many+0x2ae/0x420 net/core/dev.c:1805
     unregister_netdevice_many_notify+0xb50/0x22b0 net/core/dev.c:12407
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[54] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_ref_replace include/linux/netdevice.h:4562 [inline]
     dst_dev_put+0x1fd/0x2d0 net/core/dst.c:236
     rt_fibinfo_free_cpus net/ipv4/fib_semantics.c:195 [inline]
     fib_nh_common_release+0x201/0x430 net/ipv4/fib_semantics.c:206
     fib_nh_release net/ipv4/fib_semantics.c:218 [inline]
     free_fib_info_rcu+0xdf/0x310 net/ipv4/fib_semantics.c:230
     rcu_do_batch kernel/rcu/tree.c:2617 [inline]
     rcu_core kernel/rcu/tree.c:2869 [inline]
     rcu_cpu_kthread+0x99e/0x1470 kernel/rcu/tree.c:2957
     smpboot_thread_fn+0x541/0xa50 kernel/smpboot.c:160
     kthread+0x388/0x470 kernel/kthread.c:436
     ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
     ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Call trace for syz_tun[55] -4 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     fib_nh_common_release+0x5c/0x430 net/ipv4/fib_semantics.c:204
     fib6_info_destroy_rcu+0xca/0x1c0 net/ipv6/ip6_fib.c:177
     rcu_do_batch kernel/rcu/tree.c:2617 [inline]
     rcu_core kernel/rcu/tree.c:2869 [inline]
     rcu_cpu_kthread+0x99e/0x1470 kernel/rcu/tree.c:2957
     smpboot_thread_fn+0x541/0xa50 kernel/smpboot.c:160
     kthread+0x388/0x470 kernel/kthread.c:436
     ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
     ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Call trace for syz_tun[56] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     neigh_destroy+0x364/0x5d0 net/core/neighbour.c:940
     neigh_flush_dev net/core/neighbour.c:433 [inline]
     __neigh_ifdown+0x201/0x8f0 net/core/neighbour.c:467
     neigh_ifdown+0x1f/0x30 net/core/neighbour.c:491
     ndisc_netdev_event+0xc8/0x4d0 net/ipv6/ndisc.c:1895
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     netif_close_many+0x2ae/0x420 net/core/dev.c:1805
     unregister_netdevice_many_notify+0xb50/0x22b0 net/core/dev.c:12407
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[57] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     __qdisc_destroy+0x20e/0x480 net/sched/sch_generic.c:1104
     qdisc_put net/sched/sch_generic.c:1128 [inline]
     dev_shutdown+0x34c/0x440 net/sched/sch_generic.c:1493
     unregister_netdevice_many_notify+0x11b2/0x22b0 net/core/dev.c:12425
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[58] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:674 [inline]
     netdevice_event+0x505/0x900 drivers/infiniband/core/roce_gid_mgmt.c:822
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     unregister_netdevice_many_notify+0x17a5/0x22b0 net/core/dev.c:12437
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[59] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     netdevice_queue_work drivers/infiniband/core/roce_gid_mgmt.c:675 [inline]
     netdevice_event+0x5af/0x900 drivers/infiniband/core/roce_gid_mgmt.c:822
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     unregister_netdevice_many_notify+0x17a5/0x22b0 net/core/dev.c:12437
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[60] +1 at
     __dev_hold include/linux/netdevice.h:4470 [inline]
     netdev_hold include/linux/netdevice.h:4513 [inline]
     dev_hold include/linux/netdevice.h:4536 [inline]
     addr_event+0x302/0x480 drivers/infiniband/core/roce_gid_mgmt.c:870
     inetaddr_event+0xef/0x150 drivers/infiniband/core/roce_gid_mgmt.c:889
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     blocking_notifier_call_chain+0x6a/0x90 kernel/notifier.c:380
     __inet_del_ifa+0x840/0xfe0 net/ipv4/devinet.c:450
     inet_del_ifa net/ipv4/devinet.c:487 [inline]
     inetdev_destroy net/ipv4/devinet.c:328 [inline]
     inetdev_event+0x647/0x1610 net/ipv4/devinet.c:1655
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     unregister_netdevice_many_notify+0x17a5/0x22b0 net/core/dev.c:12437
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[61] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     neigh_parms_release+0x1ae/0x240 net/core/neighbour.c:1817
     inetdev_destroy net/ipv4/devinet.c:335 [inline]
     inetdev_event+0x7f4/0x1610 net/ipv4/devinet.c:1655
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     unregister_netdevice_many_notify+0x17a5/0x22b0 net/core/dev.c:12437
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[62] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     in_dev_finish_destroy+0xa7/0x1a0 net/ipv4/devinet.c:258
     in_dev_put include/linux/inetdevice.h:290 [inline]
     inet_rcu_free_ifa+0x72/0xb0 net/ipv4/devinet.c:228
     rcu_do_batch kernel/rcu/tree.c:2617 [inline]
     rcu_core kernel/rcu/tree.c:2869 [inline]
     rcu_cpu_kthread+0x99e/0x1470 kernel/rcu/tree.c:2957
     smpboot_thread_fn+0x541/0xa50 kernel/smpboot.c:160
     kthread+0x388/0x470 kernel/kthread.c:436
     ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
     ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Call trace for syz_tun[63] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     neigh_parms_release+0x1ae/0x240 net/core/neighbour.c:1817
     addrconf_ifdown+0x17d0/0x1aa0 net/ipv6/addrconf.c:4019
     addrconf_notify+0x1bc/0x1050 net/ipv6/addrconf.c:-1
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     unregister_netdevice_many_notify+0x17a5/0x22b0 net/core/dev.c:12437
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[64] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     in6_dev_finish_destroy+0xdd/0x1e0 net/ipv6/addrconf_core.c:182
     in6_dev_put include/net/addrconf.h:423 [inline]
     addrconf_ifdown+0x1825/0x1aa0 net/ipv6/addrconf.c:4021
     addrconf_notify+0x1bc/0x1050 net/ipv6/addrconf.c:-1
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     unregister_netdevice_many_notify+0x17a5/0x22b0 net/core/dev.c:12437
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[65] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     batadv_hardif_release net/batman-adv/hard-interface.c:55 [inline]
     kref_put include/linux/kref.h:65 [inline]
     batadv_hardif_put+0x8f/0x140 net/batman-adv/hard-interface.h:95
     batadv_hard_if_event+0x624/0x1240 net/batman-adv/hard-interface.c:1008
     notifier_call_chain+0x1ad/0x3d0 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2288 [inline]
     call_netdevice_notifiers net/core/dev.c:2302 [inline]
     unregister_netdevice_many_notify+0x17a5/0x22b0 net/core/dev.c:12437
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[66] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     rx_queue_release+0x11d/0x190 net/core/net-sysfs.c:1166
     kobject_cleanup lib/kobject.c:689 [inline]
     kobject_release lib/kobject.c:720 [inline]
     kref_put include/linux/kref.h:65 [inline]
     kobject_put+0x228/0x560 lib/kobject.c:737
     net_rx_queue_update_kobjects+0x6a6/0x750 net/core/net-sysfs.c:1323
     remove_queue_kobjects net/core/net-sysfs.c:2154 [inline]
     netdev_unregister_kobject+0x113/0x450 net/core/net-sysfs.c:2310
     unregister_netdevice_many_notify+0x1d4b/0x22b0 net/core/dev.c:12472
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[67] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     netdev_queue_release+0x6a/0xd0 net/core/net-sysfs.c:1916
     kobject_cleanup lib/kobject.c:689 [inline]
     kobject_release lib/kobject.c:720 [inline]
     kref_put include/linux/kref.h:65 [inline]
     kobject_put+0x228/0x560 lib/kobject.c:737
     netdev_queue_update_kobjects+0x5e3/0x6c0 net/core/net-sysfs.c:2058
     remove_queue_kobjects net/core/net-sysfs.c:2155 [inline]
     netdev_unregister_kobject+0x11f/0x450 net/core/net-sysfs.c:2310
     unregister_netdevice_many_notify+0x1d4b/0x22b0 net/core/dev.c:12472
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[68] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     netdev_put include/linux/netdevice.h:4523 [inline]
     unregister_netdevice_many_notify+0x1f9b/0x22b0 net/core/dev.c:12482
     unregister_netdevice_many net/core/dev.c:12500 [inline]
     unregister_netdevice_queue+0x31f/0x360 net/core/dev.c:12310
     unregister_netdevice include/linux/netdevice.h:3449 [inline]
     __tun_detach+0xe4d/0x1600 drivers/net/tun.c:621
     tun_detach drivers/net/tun.c:637 [inline]
     tun_chr_close+0x10d/0x1c0 drivers/net/tun.c:3438
     __fput+0x461/0xa70 fs/file_table.c:510
     task_work_run+0x1d9/0x270 kernel/task_work.c:233
     exit_task_work include/linux/task_work.h:40 [inline]
     do_exit+0x70f/0x22c0 kernel/exit.c:975
     do_group_exit+0x21b/0x2d0 kernel/exit.c:1117
     __do_sys_exit_group kernel/exit.c:1128 [inline]
     __se_sys_exit_group kernel/exit.c:1126 [inline]
     __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1126
     x64_sys_call+0x221a/0x2240 arch/x86/include/generated/asm/syscalls_64.h:232
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
     entry_SYSCALL_64_after_hwframe+0x77/0x7f
Call trace for syz_tun[69] -1 at
     __dev_put include/linux/netdevice.h:4456 [inline]
     __linkwatch_run_queue+0x648/0x850 net/core/link_watch.c:246
     linkwatch_event+0x4c/0x60 net/core/link_watch.c:314
     process_one_work+0x98b/0x1630 kernel/workqueue.c:3306
balance as of syz_tun[69] is 1