Extracting prog: 25.970713361s
Minimizing prog: 15m8.891035155s
Simplifying prog options: 0s
Extracting C: 1m14.783402182s
Simplifying C: 6m11.563841235s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_RINGS_SET-io_uring_setup-mmap-io_uring_register$IORING_REGISTER_ZCRX_IFQ-sendmsg$ETHTOOL_MSG_RINGS_SET
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10}]}, 0x3c}}, 0x0)
r2 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000800000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10}]}, 0x3c}}, 0x0)

program crashed: WARNING in netdev_queue_get_dma_dev
single: successfully extracted reproducer
found reproducer with 7 syscalls
minimizing guilty program
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_RINGS_SET-io_uring_setup-mmap-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10}]}, 0x3c}}, 0x0)
r2 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000800000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program crashed: WARNING in netdev_queue_get_dma_dev
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_RINGS_SET-io_uring_setup-mmap
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10}]}, 0x3c}}, 0x0)
io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000800000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_RINGS_SET-io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10}]}, 0x3c}}, 0x0)
r2 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program crashed: WARNING in netdev_queue_get_dma_dev
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-sendmsg$ETHTOOL_MSG_RINGS_SET-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10}]}, 0x3c}}, 0x0)
io_uring_register$IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program did not crash
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$ethtool-io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program crashed: WARNING in netdev_queue_get_dma_dev
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program crashed: WARNING in netdev_queue_get_dma_dev
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program crashed: WARNING in netdev_queue_get_dma_dev
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, 0x0)
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program did not crash
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, 0x0, 0x1)

program did not crash
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, 0x0, &(0x7f0000001800)={&(0x7f0000800000), 0x0, 0x1}, {}, 0x0, 0x1000}, 0x1)

program did not crash
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={0x0}, &(0x7f0000001800)={&(0x7f0000800000), 0x0, 0x1}, {}, 0x0, 0x1000}, 0x1)

program did not crash
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000)}, 0x0, {}, 0x0, 0x1000}, 0x1)

program did not crash
testing program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000)}, &(0x7f0000001800)={0x0, 0x0, 0x1}, {}, 0x0, 0x1000}, 0x1)

program did not crash
extracting C reproducer
testing compiled C program (duration=34.821093564s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
program crashed: WARNING in netdev_queue_get_dma_dev
simplifying C reproducer
testing compiled C program (duration=34.821093564s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
program crashed: WARNING in netdev_queue_get_dma_dev
testing compiled C program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
program crashed: WARNING in netdev_queue_get_dma_dev
testing compiled C program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
program crashed: WARNING in netdev_queue_get_dma_dev
testing compiled C program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
program crashed: WARNING in netdev_queue_get_dma_dev
testing compiled C program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
program crashed: WARNING in netdev_queue_get_dma_dev
testing compiled C program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
program crashed: WARNING in netdev_queue_get_dma_dev
testing compiled C program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
program crashed: WARNING in netdev_queue_get_dma_dev
testing program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program crashed: WARNING in netdev_queue_get_dma_dev
validation run: crashed=true
testing program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program did not crash
validation run: crashed=false
testing program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program did not crash
validation run: crashed=false
testing program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program crashed: WARNING in netdev_queue_get_dma_dev
validation run: crashed=true
testing program (duration=34.821093564s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): io_uring_setup-io_uring_register$IORING_REGISTER_ZCRX_IFQ
detailed listing:
executing program 0:
r0 = io_uring_setup(0x10, &(0x7f0000000300)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000400)={0x2, 0x0, 0x10, 0x0, &(0x7f0000001000)={&(0x7f0000800000), 0x10000}, &(0x7f0000001800)={&(0x7f0000800000), 0x10000, 0x1}, {}, 0x0, 0x1000}, 0x1)

program crashed: WARNING in netdev_queue_get_dma_dev
validation run: crashed=true
reproducing took 28m18.991217878s
repro crashed as (corrupted=false):
------------[ cut here ]------------
RTNL: assertion failed at ./include/net/netdev_lock.h (72)
WARNING: ./include/net/netdev_lock.h:72 at netdev_assert_locked_ops_compat include/net/netdev_lock.h:72 [inline], CPU#0: syz.0.17/4922
WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x480/0x4ac net/core/netdev_queues.c:43, CPU#0: syz.0.17/4922
Modules linked in:
CPU: 0 UID: 0 PID: 4922 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : netdev_assert_locked_ops_compat include/net/netdev_lock.h:72 [inline]
pc : netdev_queue_get_dma_dev+0x480/0x4ac net/core/netdev_queues.c:43
lr : netdev_assert_locked_ops_compat include/net/netdev_lock.h:72 [inline]
lr : netdev_queue_get_dma_dev+0x480/0x4ac net/core/netdev_queues.c:43
sp : ffff800093a87880
x29: ffff800093a87880 x28: 1fffe00019e3ee95 x27: dfff800000000000
x26: ffff700012750f1c x25: 0000000000000000 x24: 0000000000000000
x23: dfff800000000000 x22: ffff80008a158000 x21: 0000000000000000
x20: ffff0000ca0c4000 x19: 0000000000000000 x18: 00000000ffffffff
x17: ffff80008a791000 x16: 0000000000000003 x15: ffff80008a31ada0
x14: 0000000000000001 x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000000002 x9 : aaba3bba82391400
x8 : aaba3bba82391400 x7 : ffff80008048e080 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f8070
x2 : 0000000100000000 x1 : ffff0000c9421d40 x0 : 0000000000000000
Call trace:
 netdev_assert_locked_ops_compat include/net/netdev_lock.h:72 [inline] (P)
 netdev_queue_get_dma_dev+0x480/0x4ac net/core/netdev_queues.c:43 (P)
 zcrx_register_netdev+0x1b8/0x460 io_uring/zcrx.c:830
 io_register_zcrx+0x7ac/0xa00 io_uring/zcrx.c:982
 __io_uring_register io_uring/register.c:942 [inline]
 __do_sys_io_uring_register io_uring/register.c:1040 [inline]
 __se_sys_io_uring_register io_uring/register.c:1017 [inline]
 __arm64_sys_io_uring_register+0x810/0x1494 io_uring/register.c:1017
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736
 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594
irq event stamp: 960
hardirqs last  enabled at (959): [<ffff8000868ea26c>] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline]
hardirqs last  enabled at (959): [<ffff8000868ea26c>] arm64_exit_to_kernel_mode+0x80/0x94 arch/arm64/kernel/entry-common.c:62
hardirqs last disabled at (960): [<ffff8000868e6198>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:425
softirqs last  enabled at (790): [<ffff80008030ff44>] softirq_handle_end kernel/softirq.c:468 [inline]
softirqs last  enabled at (790): [<ffff80008030ff44>] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650
softirqs last disabled at (649): [<ffff8000800204c0>] __do_softirq+0x14/0x20 kernel/softirq.c:656
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
------------[ cut here ]------------
RTNL: assertion failed at ./include/net/netdev_lock.h (72)
WARNING: ./include/net/netdev_lock.h:72 at netdev_assert_locked_ops_compat include/net/netdev_lock.h:72 [inline], CPU#0: syz.0.17/4922
WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x480/0x4ac net/core/netdev_queues.c:43, CPU#0: syz.0.17/4922
Modules linked in:
CPU: 0 UID: 0 PID: 4922 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : netdev_assert_locked_ops_compat include/net/netdev_lock.h:72 [inline]
pc : netdev_queue_get_dma_dev+0x480/0x4ac net/core/netdev_queues.c:43
lr : netdev_assert_locked_ops_compat include/net/netdev_lock.h:72 [inline]
lr : netdev_queue_get_dma_dev+0x480/0x4ac net/core/netdev_queues.c:43
sp : ffff800093a87880
x29: ffff800093a87880 x28: 1fffe00019e3ee95 x27: dfff800000000000
x26: ffff700012750f1c x25: 0000000000000000 x24: 0000000000000000
x23: dfff800000000000 x22: ffff80008a158000 x21: 0000000000000000
x20: ffff0000ca0c4000 x19: 0000000000000000 x18: 00000000ffffffff
x17: ffff80008a791000 x16: 0000000000000003 x15: ffff80008a31ada0
x14: 0000000000000001 x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000000002 x9 : aaba3bba82391400
x8 : aaba3bba82391400 x7 : ffff80008048e080 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f8070
x2 : 0000000100000000 x1 : ffff0000c9421d40 x0 : 0000000000000000
Call trace:
 netdev_assert_locked_ops_compat include/net/netdev_lock.h:72 [inline] (P)
 netdev_queue_get_dma_dev+0x480/0x4ac net/core/netdev_queues.c:43 (P)
 zcrx_register_netdev+0x1b8/0x460 io_uring/zcrx.c:830
 io_register_zcrx+0x7ac/0xa00 io_uring/zcrx.c:982
 __io_uring_register io_uring/register.c:942 [inline]
 __do_sys_io_uring_register io_uring/register.c:1040 [inline]
 __se_sys_io_uring_register io_uring/register.c:1017 [inline]
 __arm64_sys_io_uring_register+0x810/0x1494 io_uring/register.c:1017
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736
 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594
irq event stamp: 960
hardirqs last  enabled at (959): [<ffff8000868ea26c>] irqentry_exit_to_kernel_mode_after_preempt include/linux/irq-entry-common.h:507 [inline]
hardirqs last  enabled at (959): [<ffff8000868ea26c>] arm64_exit_to_kernel_mode+0x80/0x94 arch/arm64/kernel/entry-common.c:62
hardirqs last disabled at (960): [<ffff8000868e6198>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:425
softirqs last  enabled at (790): [<ffff80008030ff44>] softirq_handle_end kernel/softirq.c:468 [inline]
softirqs last  enabled at (790): [<ffff80008030ff44>] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650
softirqs last disabled at (649): [<ffff8000800204c0>] __do_softirq+0x14/0x20 kernel/softirq.c:656
---[ end trace 0000000000000000 ]---