Extracting prog: 10m52.41996256s
Minimizing prog: 1h45m59.751373106s
Simplifying prog options: 19m53.393858002s
Extracting C: 5m12.520230218s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program did not crash
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program crashed: lost connection to test machine
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

program did not crash
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program did not crash
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program did not crash
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program did not crash
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program did not crash
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{0x0, 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program did not crash
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program did not crash
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program did not crash
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program did not crash
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)

program did not crash
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=8m18.482812464s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
a never seen crash title: unregister_netdevice: waiting for DEV to become free, ignore
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
a never seen crash title: unregister_netdevice: waiting for DEV to become free, ignore
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
a never seen crash title: unregister_netdevice: waiting for DEV to become free, ignore
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
validation run: crashed=true
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
validation run: crashed=false
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
validation run: crashed=true
testing program (duration=8m18.482812464s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$netlink-socket$netlink-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

program crashed: unregister_netdevice: waiting for DEV to become free
validation run: crashed=true
reproducing took 2h50m17.003914329s
repro crashed as (corrupted=false):
unregister_netdevice: waiting for syz_tun to become free. Usage count = 1393
ref_tracker: netdev@ffff88807749c620 has 346/1392 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4435 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4447 [inline]
     netdev_get_by_index+0x79/0xb0 net/core/dev.c:1027
     fib6_nh_init+0x202/0x1f90 net/ipv6/route.c:3600
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3899
     ip6_route_add+0x6e/0x1b0 net/ipv6/route.c:3951
     addrconf_prefix_route+0x3a2/0x480 net/ipv6/addrconf.c:2487
     addrconf_add_linklocal+0x266/0x460 net/ipv6/addrconf.c:3312
     addrconf_addr_gen+0x2f8/0x360 net/ipv6/addrconf.c:3446
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3744
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
     call_netdevice_notifiers net/core/dev.c:2301 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9803
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9832
     do_setlink+0xf82/0x4590 net/core/rtnetlink.c:3158
     rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
     rtnl_newlink+0x147a/0x1be0 net/core/rtnetlink.c:4072
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344

ref_tracker: netdev@ffff88807749c620 has 346/1392 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4435 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4447 [inline]
     netdev_get_by_index+0x79/0xb0 net/core/dev.c:1027
     fib6_nh_init+0x202/0x1f90 net/ipv6/route.c:3600
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3899
     ip6_route_add+0x6e/0x1b0 net/ipv6/route.c:3951
     addrconf_add_mroute+0x2d1/0x370 net/ipv6/addrconf.c:2551
     addrconf_add_dev net/ipv6/addrconf.c:2569 [inline]
     addrconf_dev_config net/ipv6/addrconf.c:3483 [inline]
     addrconf_init_auto_addrs+0x4d7/0xa50 net/ipv6/addrconf.c:3571
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3744
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
     call_netdevice_notifiers net/core/dev.c:2301 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9803
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9832
     do_setlink+0xf82/0x4590 net/core/rtnetlink.c:3158
     rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
     rtnl_newlink+0x147a/0x1be0 net/core/rtnetlink.c:4072
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894

ref_tracker: netdev@ffff88807749c620 has 346/1392 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4435 [inline]
     netdev_hold include/linux/netdevice.h:4464 [inline]
     fib_check_nh_nongw net/ipv4/fib_semantics.c:1262 [inline]
     fib_check_nh+0xd64/0x1b40 net/ipv4/fib_semantics.c:1282
     fib_create_info+0x208c/0x31f0 net/ipv4/fib_semantics.c:1502
     fib_table_insert+0xc8/0x1b50 net/ipv4/fib_trie.c:1212
     fib_magic+0x434/0x510 net/ipv4/fib_frontend.c:1134
     fib_add_ifaddr+0x3fb/0x5f0 net/ipv4/fib_frontend.c:1178
     fib_netdev_event+0x382/0x490 net/ipv4/fib_frontend.c:1516
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
     call_netdevice_notifiers net/core/dev.c:2301 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9803
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9832
     do_setlink+0xf82/0x4590 net/core/rtnetlink.c:3158
     rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
     rtnl_newlink+0x147a/0x1be0 net/core/rtnetlink.c:4072
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894
     sock_sendmsg_nosec net/socket.c:727 [inline]
     __sock_sendmsg net/socket.c:742 [inline]
     ____sys_sendmsg+0x972/0x9f0 net/socket.c:2592

ref_tracker: netdev@ffff88807749c620 has 346/1392 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4435 [inline]
     netdev_hold include/linux/netdevice.h:4464 [inline]
     fib_check_nh_nongw net/ipv4/fib_semantics.c:1262 [inline]
     fib_check_nh+0xd64/0x1b40 net/ipv4/fib_semantics.c:1282
     fib_create_info+0x208c/0x31f0 net/ipv4/fib_semantics.c:1502
     fib_table_insert+0xc8/0x1b50 net/ipv4/fib_trie.c:1212
     fib_magic+0x434/0x510 net/ipv4/fib_frontend.c:1134
     fib_add_ifaddr+0x38d/0x5f0 net/ipv4/fib_frontend.c:1171
     fib_netdev_event+0x382/0x490 net/ipv4/fib_frontend.c:1516
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
     call_netdevice_notifiers net/core/dev.c:2301 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9803
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9832
     do_setlink+0xf82/0x4590 net/core/rtnetlink.c:3158
     rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
     rtnl_newlink+0x147a/0x1be0 net/core/rtnetlink.c:4072
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894
     sock_sendmsg_nosec net/socket.c:727 [inline]
     __sock_sendmsg net/socket.c:742 [inline]
     ____sys_sendmsg+0x972/0x9f0 net/socket.c:2592

ref_tracker: netdev@ffff88807749c620 has 7/1392 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4435 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4447 [inline]
     netdev_get_by_index+0x79/0xb0 net/core/dev.c:1027
     fib6_nh_init+0x202/0x1f90 net/ipv6/route.c:3600
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3899
     addrconf_f6i_alloc+0x3b7/0x630 net/ipv6/route.c:4691
     ipv6_add_addr+0x59c/0x1100 net/ipv6/addrconf.c:1125
     addrconf_add_linklocal+0x20c/0x460 net/ipv6/addrconf.c:3310
     addrconf_addr_gen+0x2f8/0x360 net/ipv6/addrconf.c:3446
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3744
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
     call_netdevice_notifiers net/core/dev.c:2301 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9803
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9832
     do_setlink+0xf82/0x4590 net/core/rtnetlink.c:3158
     rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
     rtnl_newlink+0x147a/0x1be0 net/core/rtnetlink.c:4072
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344

ref_tracker: netdev@ffff88807749c620 has 1/1392 users at
     fib_create_info+0x22e0/0x31f0 net/ipv4/fib_semantics.c:1496
     fib_table_insert+0xc8/0x1b50 net/ipv4/fib_trie.c:1212
     fib_magic+0x434/0x510 net/ipv4/fib_frontend.c:1134
     fib_add_ifaddr+0x144/0x5f0 net/ipv4/fib_frontend.c:1156
     fib_inetaddr_event+0x12e/0x190 net/ipv4/fib_frontend.c:1470
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     blocking_notifier_call_chain+0x6a/0x90 kernel/notifier.c:380
     __inet_insert_ifa+0x9e9/0xbc0 net/ipv4/devinet.c:566
     inet_rtm_newaddr+0x10d8/0x1ad0 net/ipv4/devinet.c:1001
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894
     sock_sendmsg_nosec net/socket.c:727 [inline]
     __sock_sendmsg net/socket.c:742 [inline]
     __sys_sendto+0x672/0x710 net/socket.c:2206
     __do_sys_sendto net/socket.c:2213 [inline]
     __se_sys_sendto net/socket.c:2209 [inline]
     __x64_sys_sendto+0xde/0x100 net/socket.c:2209
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94


final repro crashed as (corrupted=false):
unregister_netdevice: waiting for syz_tun to become free. Usage count = 1393
ref_tracker: netdev@ffff88807749c620 has 346/1392 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4435 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4447 [inline]
     netdev_get_by_index+0x79/0xb0 net/core/dev.c:1027
     fib6_nh_init+0x202/0x1f90 net/ipv6/route.c:3600
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3899
     ip6_route_add+0x6e/0x1b0 net/ipv6/route.c:3951
     addrconf_prefix_route+0x3a2/0x480 net/ipv6/addrconf.c:2487
     addrconf_add_linklocal+0x266/0x460 net/ipv6/addrconf.c:3312
     addrconf_addr_gen+0x2f8/0x360 net/ipv6/addrconf.c:3446
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3744
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
     call_netdevice_notifiers net/core/dev.c:2301 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9803
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9832
     do_setlink+0xf82/0x4590 net/core/rtnetlink.c:3158
     rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
     rtnl_newlink+0x147a/0x1be0 net/core/rtnetlink.c:4072
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344

ref_tracker: netdev@ffff88807749c620 has 346/1392 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4435 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4447 [inline]
     netdev_get_by_index+0x79/0xb0 net/core/dev.c:1027
     fib6_nh_init+0x202/0x1f90 net/ipv6/route.c:3600
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3899
     ip6_route_add+0x6e/0x1b0 net/ipv6/route.c:3951
     addrconf_add_mroute+0x2d1/0x370 net/ipv6/addrconf.c:2551
     addrconf_add_dev net/ipv6/addrconf.c:2569 [inline]
     addrconf_dev_config net/ipv6/addrconf.c:3483 [inline]
     addrconf_init_auto_addrs+0x4d7/0xa50 net/ipv6/addrconf.c:3571
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3744
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
     call_netdevice_notifiers net/core/dev.c:2301 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9803
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9832
     do_setlink+0xf82/0x4590 net/core/rtnetlink.c:3158
     rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
     rtnl_newlink+0x147a/0x1be0 net/core/rtnetlink.c:4072
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894

ref_tracker: netdev@ffff88807749c620 has 346/1392 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4435 [inline]
     netdev_hold include/linux/netdevice.h:4464 [inline]
     fib_check_nh_nongw net/ipv4/fib_semantics.c:1262 [inline]
     fib_check_nh+0xd64/0x1b40 net/ipv4/fib_semantics.c:1282
     fib_create_info+0x208c/0x31f0 net/ipv4/fib_semantics.c:1502
     fib_table_insert+0xc8/0x1b50 net/ipv4/fib_trie.c:1212
     fib_magic+0x434/0x510 net/ipv4/fib_frontend.c:1134
     fib_add_ifaddr+0x3fb/0x5f0 net/ipv4/fib_frontend.c:1178
     fib_netdev_event+0x382/0x490 net/ipv4/fib_frontend.c:1516
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
     call_netdevice_notifiers net/core/dev.c:2301 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9803
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9832
     do_setlink+0xf82/0x4590 net/core/rtnetlink.c:3158
     rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
     rtnl_newlink+0x147a/0x1be0 net/core/rtnetlink.c:4072
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894
     sock_sendmsg_nosec net/socket.c:727 [inline]
     __sock_sendmsg net/socket.c:742 [inline]
     ____sys_sendmsg+0x972/0x9f0 net/socket.c:2592

ref_tracker: netdev@ffff88807749c620 has 346/1392 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4435 [inline]
     netdev_hold include/linux/netdevice.h:4464 [inline]
     fib_check_nh_nongw net/ipv4/fib_semantics.c:1262 [inline]
     fib_check_nh+0xd64/0x1b40 net/ipv4/fib_semantics.c:1282
     fib_create_info+0x208c/0x31f0 net/ipv4/fib_semantics.c:1502
     fib_table_insert+0xc8/0x1b50 net/ipv4/fib_trie.c:1212
     fib_magic+0x434/0x510 net/ipv4/fib_frontend.c:1134
     fib_add_ifaddr+0x38d/0x5f0 net/ipv4/fib_frontend.c:1171
     fib_netdev_event+0x382/0x490 net/ipv4/fib_frontend.c:1516
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
     call_netdevice_notifiers net/core/dev.c:2301 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9803
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9832
     do_setlink+0xf82/0x4590 net/core/rtnetlink.c:3158
     rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
     rtnl_newlink+0x147a/0x1be0 net/core/rtnetlink.c:4072
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894
     sock_sendmsg_nosec net/socket.c:727 [inline]
     __sock_sendmsg net/socket.c:742 [inline]
     ____sys_sendmsg+0x972/0x9f0 net/socket.c:2592

ref_tracker: netdev@ffff88807749c620 has 7/1392 users at
     __netdev_tracker_alloc include/linux/netdevice.h:4435 [inline]
     netdev_tracker_alloc include/linux/netdevice.h:4447 [inline]
     netdev_get_by_index+0x79/0xb0 net/core/dev.c:1027
     fib6_nh_init+0x202/0x1f90 net/ipv6/route.c:3600
     ip6_route_info_create_nh+0x16a/0xad0 net/ipv6/route.c:3899
     addrconf_f6i_alloc+0x3b7/0x630 net/ipv6/route.c:4691
     ipv6_add_addr+0x59c/0x1100 net/ipv6/addrconf.c:1125
     addrconf_add_linklocal+0x20c/0x460 net/ipv6/addrconf.c:3310
     addrconf_addr_gen+0x2f8/0x360 net/ipv6/addrconf.c:3446
     addrconf_notify+0xb1e/0x1050 net/ipv6/addrconf.c:3744
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     call_netdevice_notifiers_extack net/core/dev.c:2287 [inline]
     call_netdevice_notifiers net/core/dev.c:2301 [inline]
     __dev_notify_flags+0x1a9/0x310 net/core/dev.c:9803
     netif_change_flags+0xe8/0x1a0 net/core/dev.c:9832
     do_setlink+0xf82/0x4590 net/core/rtnetlink.c:3158
     rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
     __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
     rtnl_newlink+0x147a/0x1be0 net/core/rtnetlink.c:4072
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344

ref_tracker: netdev@ffff88807749c620 has 1/1392 users at
     fib_create_info+0x22e0/0x31f0 net/ipv4/fib_semantics.c:1496
     fib_table_insert+0xc8/0x1b50 net/ipv4/fib_trie.c:1212
     fib_magic+0x434/0x510 net/ipv4/fib_frontend.c:1134
     fib_add_ifaddr+0x144/0x5f0 net/ipv4/fib_frontend.c:1156
     fib_inetaddr_event+0x12e/0x190 net/ipv4/fib_frontend.c:1470
     notifier_call_chain+0x1be/0x400 kernel/notifier.c:85
     blocking_notifier_call_chain+0x6a/0x90 kernel/notifier.c:380
     __inet_insert_ifa+0x9e9/0xbc0 net/ipv4/devinet.c:566
     inet_rtm_newaddr+0x10d8/0x1ad0 net/ipv4/devinet.c:1001
     rtnetlink_rcv_msg+0x7d5/0xbe0 net/core/rtnetlink.c:6958
     netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
     netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
     netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344
     netlink_sendmsg+0x813/0xb40 net/netlink/af_netlink.c:1894
     sock_sendmsg_nosec net/socket.c:727 [inline]
     __sock_sendmsg net/socket.c:742 [inline]
     __sys_sendto+0x672/0x710 net/socket.c:2206
     __do_sys_sendto net/socket.c:2213 [inline]
     __se_sys_sendto net/socket.c:2209 [inline]
     __x64_sys_sendto+0xde/0x100 net/socket.c:2209
     do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
     do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94