Extracting prog: 1m35.439544538s Minimizing prog: 20m47.346654983s Simplifying prog options: 2m7.313120739s Extracting C: 41.207620349s Simplifying C: 0s extracting reproducer from 268 programs testing a last program of every proc single: executing 218 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept$packet-accept4$packet-sendto$packet-listen-getsockopt$SO_TIMESTAMPING-syz_emit_ethernet-setsockopt$sock_linger-socket$inet_icmp-setsockopt$EBT_SO_SET_ENTRIES-ioctl$BTRFS_IOC_SNAP_CREATE-socket$inet_udp-setsockopt$inet_opts-syz_open_dev$tty1-ioctl$VT_ACTIVATE-setsockopt$packet_rx_ring-fdatasync-pipe2$watch_queue-ioctl$SECCOMP_IOCTL_NOTIF_SEND-ioctl$FITHAW-ioctl$F2FS_IOC_GARBAGE_COLLECT-socket$inet_udp-fcntl$getownex-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-setsockopt$inet6_tcp_TLS_RX-ioctl$sock_inet6_tcp_SIOCOUTQ-fcntl$setlease-recvmsg-fdatasync-ioctl$PIO_FONT-setsockopt$packet_rx_ring detailed listing: executing program 0: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) accept4$packet(r0, 0x0, &(0x7f0000000080), 0x80000) sendto$packet(r0, &(0x7f00000000c0)="41eeeb400648b2173bb5c7a827d077bb94370bdeda0009cbaa7d942dbb215e536630d59b0d917295a1a065302eef722b4526b7b649d484fcf1ab05c8174b60c26f0b7a5e8aa5a1e81018ef7d205dd9118de1a83f6a79339535a26deaeb68d4c69ce685f310bb5d9c0432d9229067b06f394fd2572d69e5eea378d71ccc7cc241ec926b12073504db73a6dd9b4d32ea65f379b0b91b3b22c8903ce7d79f9cba8789872256596d86d61d6e215b55b2bed2566033f30b09f36104a7339933a08d12ee98d33b9ca7d9863df891a5", 0xcc, 0x8001, 0x0, 0x0) listen(r0, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_emit_ethernet(0x56, &(0x7f0000000240)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x39, 0x1, 0x0, 0x0, "4c76bfbaeab6c0ff6ea7e69b5a7a0176f12138af10fc31943e9954575d7dbc3682d53c45b456c7a3bd00f14132118e83d59bf7d0da8ffb5b7a2d02f707f231d4"}}}}, &(0x7f00000002c0)={0x1, 0x1, [0x625, 0x809, 0xbe6, 0x53c]}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x9}, 0x8) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x2, 0x56c, [0x0, 0x20000380, 0x200003b0, 0x200008bc], 0x0, &(0x7f0000000340), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x1, 0x806, 'vlan0\x00', 'batadv_slave_0\x00', 'pimreg0\x00', 'vlan1\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xf6, 0x16e, 0x19e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x5}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@remote}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7, 0x9, {0xff}}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}, {0x9, 0x10, 0x60, 'pimreg0\x00', 'vcan0\x00', 'bond_slave_0\x00', 'batadv_slave_0\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x7f, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0xde, 0x20e, 0x33e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x97, {0xdb, 0x7, 0x891, @multicast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xafe0fdc8ec48343f], 0x7, 0x9, 0x1, 0x2, @local, [0x0, 0xff, 0xff, 0xff, 0xff], 0x4e24, 0x4e22, 0x5, 0x8, 0x5, 0x0, 0x4, 0x8, 0x7, 0x9}, 0x8, 0x18}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:locale_t:s0\x00'}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:var_log_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x5e4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000980)={{r1}, "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"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000001980)="b6ad0ca084d90198211e3b5c7d4f7b370848a230f67eb24cf366220dfef99ca8aea33eef911a35ad072f06ff045214632d3173d3cb045b55b8f4056f9d00ca90d3a4f6fca0a951138c1b9adfd421eb157722c423a5882399cec0898d6626cb569332c20e1fb9153beabf331e7e70eaee37799e165f4996e5484b1bf5493a35462766013b69ae69d043054969ac742f5946cf72d4da715f2872db40defb76bfe3acbfb499a649bc210c8a4520f79d1f2e85856b3c52f7675e27bc3c8099f2", 0xbe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001a40)=@req={0x8, 0x2, 0x3, 0x7fff}, 0x10) fdatasync(r3) pipe2$watch_queue(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000001ac0)={0x0, 0x8, 0x7fff}) ioctl$FITHAW(r1, 0xc0045878) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000001b00)=0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000001b40)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001f00)={{r3, &(0x7f0000001b80)='\x00', 0x1c000, &(0x7f0000001bc0)={@align=0xe2d, {0x0, 0xe66d, 0x7c80000, 0x81}}, 0x1, &(0x7f0000001c00)={@_ha_fsid}, &(0x7f0000001c40)=0x1ff}, 0x3, &(0x7f0000001e80)=[{0x3, 0x5, &(0x7f0000001c80)='-(,!)\x00', &(0x7f0000001cc0)="ee7f7b14eac98aebd14dc24611fd39950d587c22ba0e5760c90fddaf1d38f73993760d8d9be9a0090ddc6dd02a2c3496e463b56e7d811ec216bc291e31a3a8a10ce61809f058992d5a6ed9ea707d", 0x4e}, {0x2, 0x2, &(0x7f0000001d40)='batadv_slave_0\x00', &(0x7f0000001d80)="fc8365b9fdc40d6dfed9c74a332de7ed41809e69178b7601", 0x18, 0x2}, {0x2, 0x32c0, &(0x7f0000001dc0)='pimreg0\x00', &(0x7f0000001e00)="b94ed91745e8de9d664fcc626e97bfd1ee485a7fbf3cfb1a9ea98605d4b6f18e3b71dc85079312696b9ed02e22d7b1b9e695a80b8949fcdee2cbaa67292a97dc642e1f3b304af934a86fd7862cb86fe6e9a7f605c0eecd75a45a7c1ab130cdff17e71db323b0dc6c111c820d650bd974dc5451e9abcc9ccd8bbb", 0x7a, 0x18}]}) setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000001f80)=@gcm_256={{0x303}, "be5917e463605d3b", "f66c2da5527689e1ff84720309b83e27cda6f3fa02f4b7a0de144f6856a68d61", '$sze', "02889ebdd3af007a"}, 0x38) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001fc0)) fcntl$setlease(r4, 0x400, 0x2) recvmsg(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002000)=""/143, 0x8f}, {&(0x7f00000020c0)=""/108, 0x6c}, {&(0x7f0000002140)=""/146, 0x92}, {&(0x7f0000002200)=""/226, 0xe2}, {&(0x7f0000002300)=""/186, 0xba}, {&(0x7f00000023c0)=""/59, 0x3b}], 0x6}, 0x20) fdatasync(r4) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000024c0)="007997511c5b172f7ee7d57272771f2d5627aa7a08e64ddd383b8f6ff457f341a83ffcf31f6682b4333f68752e00285791a02268534a2b412f94792eef52771fde0c7355915f9d58c3ec17a46ee01ec0efc322b6d74f3e25682b4ff1238c5a7af94836310818ccea33f83c272fc7231c53072074e575") setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000002540)=@req3={0x100, 0x8, 0x6bc, 0x4, 0x4, 0x5, 0x101}, 0x1c) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-ioctl$sock_inet_SIOCSIFBRDADDR-socket$unix-ioctl$FS_IOC_FIEMAP-accept4$inet6-setsockopt-setsockopt$sock_linger-syz_open_procfs-ioctl$sock_inet_SIOCSIFPFLAGS-writev-getsockopt-inotify_init1-ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE-recvmmsg-socket$nl_route-getpeername$packet-sendmsg$nl_route_sched_retired-ioctl$AUTOFS_IOC_CATATONIC-ioctl-recvmsg$inet_nvme-ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL-personality-ioctl$sock_inet_udp_SIOCINQ-ioctl$AUTOFS_IOC_SETTIMEOUT-getsockname-setsockopt$netlink_NETLINK_CAP_ACK-openat$tun-ioctl$TUNGETVNETLE-ioctl$sock_inet6_tcp_SIOCOUTQ detailed listing: executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs$userns(r0, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000000c0)={0xc69d, 0x8, 0x4, 0x6, 0x4, 0x0, [{0x8, 0x200, 0x1}, {0x8, 0x5, 0x1c0, '\x00', 0xf}, {0x1396, 0x9, 0x3cf, '\x00', 0x80}, {0x2, 0xffffffffffffffff, 0x3, '\x00', 0x1000}]}) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100800) setsockopt(r3, 0x10000, 0x4, &(0x7f0000000200)="1b303d36303bd0576f024a475675c787d509e4ae4436f8877c92c17c72a72e70c001b21da9a565428961adb7cb879112f9d4c219b176f6d7663db0d7c01c34cbdb202c43dae33d413dd27d027cb2ade35c2f2c5af14911fbae1972191d2923108d908108222368018dba4311ea4010eaa1626448c292d9d4be6c08bef5c1ac421095bb93489708cce736894d112a8fa68aec8755c135632e7a224beb2f6d9a8d61609f4e7fd993a74f16617cd8a686dd800dee0eb3262fe47be799d8b048ec5923f64b6dfd6356004c355fb8f869a29bcf354e53a5a7ee589003938369cd27fc5d3d", 0xe2) (async) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x2}, 0x8) (async) r4 = syz_open_procfs(r0, &(0x7f0000000340)='net/vlan/vlan1\x00') (async) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000380)={'ip6gre0\x00', 0x7}) (async, rerun: 64) writev(r3, &(0x7f00000004c0)=[{&(0x7f00000003c0)="27fa6e86cc107cb2ad46d94d2cd2f2fc175ef260d7962ac47649d47e3e437d323a0404fcee84fa4cf43f3e3cae44810ea6906afa99307e58cc035ef3671a5e269a1179f520b90717d4145989329cedee3c3f0902cdffd6c32c779c6751b9bc0cc55c0986d7281c6938ad99b8acb8058a8e58e69f67e1daf42f92b7886be7e2ac421d4263a87798a393f737fe07ad6031348e823fedc5ddc9c26e009b1503dbec14dc49073cb80ef7748dfa27c31d5c708978cdf43a41a9418517ca797f939d7771e4a06efc960ae0c2a42c5763cca4924e8ed0b1", 0xd4}], 0x1) (async, rerun: 64) getsockopt(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000500)=""/68, &(0x7f0000000580)=0x44) r5 = inotify_init1(0x1800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000b80)={{r3, &(0x7f00000005c0)='veth1_to_hsr\x00', 0x80, &(0x7f0000000600)={@_ha_fsid={[0xfff, 0x4e]}, {0x75d, 0x2, 0x7, 0x1}}, 0x8, &(0x7f0000000640), &(0x7f0000000680)}, 0x5, &(0x7f0000000ac0)=[{0x3, 0x4, &(0x7f00000006c0)='#*\x00', &(0x7f0000000700)="2f7d0913c33d772fce9eaa1d3e3776d2e675b9d1cb7f3fa70433ec784e84fb5e214e4ebeb73da3b0ae7b32825cd15e2efc62f596967727fd0ec00ab3e4cc46cb20ee80f0bf6624294686ef266358f8f6712de3a8f4", 0x55, 0x28}, {0x3, 0x70, &(0x7f0000000780)='veth1_to_hsr\x00', &(0x7f00000007c0)="85b0364448e5d6b32f02558495ad850dc72aa644581a2abb0dc09a874c91b4ad250108c0c8b11c9d28dfaec1764761a3863a978f1fd0f6fa93ebeadac6d694cc9adc2ff9b3b9c000ec4baebe40e22063709e48b5e2aa6c68d1859137249b1103a05391bbc8cdea04754e3ea3cc00f34f", 0x70, 0x8}, {0x1, 0x6, &(0x7f0000000840)='ns/user\x00', &(0x7f0000000880)="126c1e3a1d1c0305d7240d044d96e8987c37b8151160abcb076b7c29ec90e0d3ba29dc1578f74a102a73e9446819a862aa041d4d076bb692012d9925534aac3c38efa4edba6e30a1536cd48cccf02fc7f580c9121efd1afe2a6c6531677610796d3bfe5ae07858ff46e633b036e575f32fce1b7876b7513b6044eca0f7286eb5359031cc7cce9c16750f3f8f2be84cb78e2432e83b1e186df0736dc386bcc2a154b05491bf4b98610d57369642079ee17bf2a21dc2125d657e734f74d9260cae088a5f77d5ed99b2290b66a8c6a8f301aa2ed0c688ba62b300", 0xd9, 0x30}, {0x1, 0x1, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="18aa63246521075452569aef9d23b884e9ce49b2d98ac5f744b10ba0f71994b79c778a0a0f128f3ef78cba8112fd6f0487188c1ed8c15b586e6aa346806d9c61eb6198a0914554173be7712158bec4ba05247187de2e075fe3c217", 0x5b, 0x20}, {0x2, 0x5, &(0x7f0000000a40)='%+{[\x00', &(0x7f0000000a80)="daa8781eb0cfd22c5cec810264b59b340108f1c43b4c9982933b5faf661265e40b634ed9a0fa4571723525c16073b49ce53c9b20ea5e391061edb446", 0x3c, 0x22}]}) recvmmsg(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000c00)=@caif=@util, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/98, 0x62}], 0x3, &(0x7f0000000e00)=""/141, 0x8d}, 0x6}], 0x1, 0x2042, &(0x7f0000000f00)={0x77359400}) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) getpeername$packet(r4, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000fc0)=0x14) (rerun: 32) sendmsg$nl_route_sched_retired(r7, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)=@delqdisc={0x54, 0x25, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0xfff2}, {0x2, 0xb}, {0x8, 0x7}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000024}, 0x4008001) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl(r4, 0x3, &(0x7f0000001100)="558956f37eae033ab61f15cb9e41c963c5c08f23c9f517bc1023e9778a2fbbfeb42a9077ec") (async, rerun: 64) recvmsg$inet_nvme(r4, &(0x7f00000014c0)={&(0x7f0000001140)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001380)=[{&(0x7f00000011c0)=""/46, 0x2e}, {&(0x7f0000001200)=""/122, 0x7a}, {&(0x7f0000001280)=""/84, 0x54}, {&(0x7f0000001300)=""/54, 0x36}, {&(0x7f0000001340)}], 0x5, &(0x7f0000001400)=""/156, 0x9c}, 0x100) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001540)={'gretap0\x00', &(0x7f0000001500)={'gretap0\x00', r8, 0x700, 0x7801, 0x7, 0x5, {{0x7, 0x4, 0x1, 0x7, 0x1c, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@lsrr={0x83, 0x7, 0xf5, [@broadcast]}]}}}}}) personality(0x4100001) (async) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000001580)) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f00000015c0)=0x1) (async) getsockname(r3, &(0x7f0000001600)=@nfc_llcp, &(0x7f0000001680)=0x80) (async) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000016c0)=0x6, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x40, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000001740)) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001780)) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD-ioctl$TIOCGPGRP-ioctl$sock_SIOCBRDELBR-ioctl$sock_SIOCBRDELBR-perf_event_open-socket$unix-socket$unix-recvmsg$unix-ioctl$FS_IOC_MEASURE_VERITY-sendmmsg-sendmmsg detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r7, 0x5451, 0x0) fcntl$setsig(r6, 0xa, 0x40000002e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r9, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r9, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r9, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r9, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r8, 0x5450, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xa, 0x81, 0x1, 0x84, 0x0, 0x0, 0xa0489, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x9}, 0x16120, 0xeffffffffffffdfc, 0x4, 0x1, 0xffffffffffffff7c, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x55, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r11, 0xc0046686, 0x0) sendmmsg(r5, 0x0, 0x0, 0x8000000) (async) sendmmsg(r5, 0x0, 0x0, 0x8000000) program crashed: panic: runtime error: invalid memory address or nil pointer dereference single: successfully extracted reproducer found reproducer with 37 syscalls minimizing guilty program testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD-ioctl$TIOCGPGRP-ioctl$sock_SIOCBRDELBR-ioctl$sock_SIOCBRDELBR-perf_event_open-socket$unix-socket$unix-recvmsg$unix-ioctl$FS_IOC_MEASURE_VERITY-sendmmsg detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r7, 0x5451, 0x0) fcntl$setsig(r6, 0xa, 0x40000002e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r9, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r9, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r9, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r9, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r8, 0x5450, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xa, 0x81, 0x1, 0x84, 0x0, 0x0, 0xa0489, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x9}, 0x16120, 0xeffffffffffffdfc, 0x4, 0x1, 0xffffffffffffff7c, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x55, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r11, 0xc0046686, 0x0) sendmmsg(r5, 0x0, 0x0, 0x8000000) (async) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD-ioctl$TIOCGPGRP-ioctl$sock_SIOCBRDELBR-ioctl$sock_SIOCBRDELBR-perf_event_open-socket$unix-socket$unix-recvmsg$unix-ioctl$FS_IOC_MEASURE_VERITY detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r7, 0x5450, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xa, 0x81, 0x1, 0x84, 0x0, 0x0, 0xa0489, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x9}, 0x16120, 0xeffffffffffffdfc, 0x4, 0x1, 0xffffffffffffff7c, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x55, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r10, 0xc0046686, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD-ioctl$TIOCGPGRP-ioctl$sock_SIOCBRDELBR-ioctl$sock_SIOCBRDELBR-perf_event_open-socket$unix-socket$unix-recvmsg$unix detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r7, 0x5450, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xa, 0x81, 0x1, 0x84, 0x0, 0x0, 0xa0489, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x9}, 0x16120, 0xeffffffffffffdfc, 0x4, 0x1, 0xffffffffffffff7c, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x55, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x1) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD-ioctl$TIOCGPGRP-ioctl$sock_SIOCBRDELBR-ioctl$sock_SIOCBRDELBR-perf_event_open-socket$unix-socket$unix detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r7, 0x5450, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xa, 0x81, 0x1, 0x84, 0x0, 0x0, 0xa0489, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x9}, 0x16120, 0xeffffffffffffdfc, 0x4, 0x1, 0xffffffffffffff7c, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD-ioctl$TIOCGPGRP-ioctl$sock_SIOCBRDELBR-ioctl$sock_SIOCBRDELBR-perf_event_open-socket$unix detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r7, 0x5450, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xa, 0x81, 0x1, 0x84, 0x0, 0x0, 0xa0489, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x9}, 0x16120, 0xeffffffffffffdfc, 0x4, 0x1, 0xffffffffffffff7c, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) (async) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD-ioctl$TIOCGPGRP-ioctl$sock_SIOCBRDELBR-ioctl$sock_SIOCBRDELBR-perf_event_open detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r7, 0x5450, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xa, 0x81, 0x1, 0x84, 0x0, 0x0, 0xa0489, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x9}, 0x16120, 0xeffffffffffffdfc, 0x4, 0x1, 0xffffffffffffff7c, 0x8, 0x7, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD-ioctl$TIOCGPGRP-ioctl$sock_SIOCBRDELBR-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r7, 0x5450, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD-ioctl$TIOCGPGRP-ioctl$sock_SIOCBRDELBR detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r7, 0x5450, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000001c0)='veth1\x00') (async) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD-ioctl$TIOCGPGRP detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r7, 0x5450, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD-waitid$P_PIDFD detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) (async) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD-waitid$P_PIDFD detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x2, 0x0) (async) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal-waitid$P_PIDFD detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0x40000004, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-syz_clone3 detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) program did not crash testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) program did not crash testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-ioctl$sock_inet6_udp_SIOCOUTQ-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r8, 0x21, 0x0, 0x0) program did not crash testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-openat$cgroup_ro-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-fcntl$setsig-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r6, 0x5451, 0x0) fcntl$setsig(r5, 0xa, 0x40000002e) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-ioctl$sock_netdev_private-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_netdev_private(r5, 0x5451, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-socket-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-socket-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) socket(0x10, 0x2, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-openat$urandom-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-socket$nl_route-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-ioctl$sock_inet6_SIOCSIFADDR-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000180)={@loopback, 0x11, r4}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-getsockopt$IPT_SO_GET_REVISION_TARGET-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r4, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-getsockopt$IPT_SO_GET_REVISION_TARGET-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r4, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-getsockname$packet-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r4, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-ioctl$TIOCSSOFTCAR-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x1) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r4, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-setsockopt$inet6_MCAST_MSFILTER-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r0, r1, 0x0) (async) r2 = dup3(r0, r1, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r3, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-ioctl$NILFS_IOCTL_GET_SUSTAT-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r0, r1, 0x0) (async) r2 = dup3(r0, r1, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000100)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r3, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-dup3-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r0, r1, 0x0) (async) dup3(r0, r1, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-dup3-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) dup3(r0, r1, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-openat$null-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xda081, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-socket$inet6_tcp-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_open_procfs-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program did not crash testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(0x0, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program did not crash testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program did not crash testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) program did not crash testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal program did not crash simplifying guilty program options testing program (duration=40.199484157s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program did not crash testing program (duration=40.199484157s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference extracting C reproducer testing compiled C program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal program did not crash testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference validation run: crashed=true testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference validation run: crashed=true testing program (duration=40.199484157s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_clone3-syz_clone3-pidfd_send_signal detailed listing: executing program 0: syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) program crashed: panic: runtime error: invalid memory address or nil pointer dereference validation run: crashed=true reproducing took 26m36.415863966s repro crashed as (corrupted=false): panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xe00b50] goroutine 3535 gp=0xc0004b61e0 m=26 mp=0xc00090c008 [running]: panic({0x18a5ca0?, 0x2ac12e0?}) GOROOT/src/runtime/panic.go:879 +0x15c fp=0xc000ccb170 sp=0xc000ccb0c0 pc=0x48a7dc runtime.panicmem(...) GOROOT/src/runtime/panic.go:336 runtime.sigpanic() GOROOT/src/runtime/signal_unix.go:931 +0x2f0 fp=0xc000ccb1d0 sp=0xc000ccb170 pc=0x48d7d0 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Debugf(0xc0008f0008, {0x1aec4ea, 0x15}, {0xc00083abd0, 0x1, 0x1}) pkg/sentry/kernel/task_log.go:54 +0x60 fp=0xc000ccb230 sp=0xc000ccb1e0 pc=0xe00b50 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).sendSignalTimerLocked(0xc0008f0008, 0xc000c77f00, 0x1, 0x0) pkg/sentry/kernel/task_signals.go:464 +0x5b8 fp=0xc000ccb330 sp=0xc000ccb230 pc=0xe0ad48 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).sendSignalLocked(...) pkg/sentry/kernel/task_signals.go:400 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).SendGroupSignal(0xc0008f0008, 0xc000c77f00) pkg/sentry/kernel/task_signals.go:385 +0x9c fp=0xc000ccb3d0 sp=0xc000ccb330 pc=0xe0a46c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).PIDFDSendSignal(0xc000a6b908, 0xc000d82680, 0x21, 0x0, 0x0) pkg/sentry/kernel/pidfd.go:390 +0x618 fp=0xc000ccb510 sp=0xc000ccb3d0 pc=0xdc7218 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.PIDFDSendSignal(0xc000a6b908, 0x495f58?, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}}) pkg/sentry/syscalls/linux/sys_signal.go:567 +0x174 fp=0xc000ccb600 sp=0xc000ccb510 pc=0x1049c14 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000a6b908, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:143 +0x6d0 fp=0xc000ccb950 sp=0xc000ccb600 pc=0xe14b60 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000a6b908, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:323 +0x50 fp=0xc000ccba00 sp=0xc000ccb950 pc=0xe16230 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000a6b908, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:283 +0x78 fp=0xc000ccba70 sp=0xc000ccba00 pc=0xe15d58 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000a6b908) pkg/sentry/kernel/task_syscall.go:258 +0x3bc fp=0xc000ccbba0 sp=0xc000ccba70 pc=0xe159fc gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000a6b908?, 0xc000a6b908) pkg/sentry/kernel/task_run.go:258 +0x1554 fp=0xc000ccbe50 sp=0xc000ccbba0 pc=0xe05394 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000a6b908, 0x3a1) pkg/sentry/kernel/task_run.go:89 +0x358 fp=0xc000ccbfa0 sp=0xc000ccbe50 pc=0xe03808 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() pkg/sentry/kernel/task_start.go:479 +0x38 fp=0xc000ccbfd0 sp=0xc000ccbfa0 pc=0xe13108 runtime.goexit({}) src/runtime/asm_arm64.s:1447 +0x4 fp=0xc000ccbfd0 sp=0xc000ccbfd0 pc=0x4935a4 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 3625 pkg/sentry/kernel/task_start.go:479 +0x138 final repro crashed as (corrupted=false): panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xe00b50] goroutine 3535 gp=0xc0004b61e0 m=26 mp=0xc00090c008 [running]: panic({0x18a5ca0?, 0x2ac12e0?}) GOROOT/src/runtime/panic.go:879 +0x15c fp=0xc000ccb170 sp=0xc000ccb0c0 pc=0x48a7dc runtime.panicmem(...) GOROOT/src/runtime/panic.go:336 runtime.sigpanic() GOROOT/src/runtime/signal_unix.go:931 +0x2f0 fp=0xc000ccb1d0 sp=0xc000ccb170 pc=0x48d7d0 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Debugf(0xc0008f0008, {0x1aec4ea, 0x15}, {0xc00083abd0, 0x1, 0x1}) pkg/sentry/kernel/task_log.go:54 +0x60 fp=0xc000ccb230 sp=0xc000ccb1e0 pc=0xe00b50 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).sendSignalTimerLocked(0xc0008f0008, 0xc000c77f00, 0x1, 0x0) pkg/sentry/kernel/task_signals.go:464 +0x5b8 fp=0xc000ccb330 sp=0xc000ccb230 pc=0xe0ad48 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).sendSignalLocked(...) pkg/sentry/kernel/task_signals.go:400 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).SendGroupSignal(0xc0008f0008, 0xc000c77f00) pkg/sentry/kernel/task_signals.go:385 +0x9c fp=0xc000ccb3d0 sp=0xc000ccb330 pc=0xe0a46c gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).PIDFDSendSignal(0xc000a6b908, 0xc000d82680, 0x21, 0x0, 0x0) pkg/sentry/kernel/pidfd.go:390 +0x618 fp=0xc000ccb510 sp=0xc000ccb3d0 pc=0xdc7218 gvisor.dev/gvisor/pkg/sentry/syscalls/linux.PIDFDSendSignal(0xc000a6b908, 0x495f58?, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}}) pkg/sentry/syscalls/linux/sys_signal.go:567 +0x174 fp=0xc000ccb600 sp=0xc000ccb510 pc=0x1049c14 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).executeSyscall(0xc000a6b908, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:143 +0x6d0 fp=0xc000ccb950 sp=0xc000ccb600 pc=0xe14b60 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallInvoke(0xc000a6b908, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:323 +0x50 fp=0xc000ccba00 sp=0xc000ccb950 pc=0xe16230 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscallEnter(0xc000a6b908, 0x1a8, {{0x4}, {0x21}, {0x0}, {0x0}, {0x0}, {0x0}}) pkg/sentry/kernel/task_syscall.go:283 +0x78 fp=0xc000ccba70 sp=0xc000ccba00 pc=0xe15d58 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).doSyscall(0xc000a6b908) pkg/sentry/kernel/task_syscall.go:258 +0x3bc fp=0xc000ccbba0 sp=0xc000ccba70 pc=0xe159fc gvisor.dev/gvisor/pkg/sentry/kernel.(*runApp).execute(0xc000a6b908?, 0xc000a6b908) pkg/sentry/kernel/task_run.go:258 +0x1554 fp=0xc000ccbe50 sp=0xc000ccbba0 pc=0xe05394 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc000a6b908, 0x3a1) pkg/sentry/kernel/task_run.go:89 +0x358 fp=0xc000ccbfa0 sp=0xc000ccbe50 pc=0xe03808 gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1() pkg/sentry/kernel/task_start.go:479 +0x38 fp=0xc000ccbfd0 sp=0xc000ccbfa0 pc=0xe13108 runtime.goexit({}) src/runtime/asm_arm64.s:1447 +0x4 fp=0xc000ccbfd0 sp=0xc000ccbfd0 pc=0x4935a4 created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 3625 pkg/sentry/kernel/task_start.go:479 +0x138