Extracting prog: 27.12343538s
Minimizing prog: 5m36.024765738s
Simplifying prog options: 0s
Extracting C: 11.274215921s
Simplifying C: 1m4.135194599s


extracting reproducer from 88 programs
testing a last program of every proc
single: executing 38 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-bind$unix-syz_open_procfs$namespace-setns-syz_open_procfs-socket$inet6_icmp_raw-setsockopt$inet6_int-mkdirat-dup-read$FUSE-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
shutdown(r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty, r4}, 0x14)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x2)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setns(r5, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x11, 0x0, 0x0)
mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x4c)
r8 = dup(r1)
read$FUSE(r8, &(0x7f00000075c0)={0x2020}, 0x2020)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
single: successfully extracted reproducer
found reproducer with 20 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-bind$unix-syz_open_procfs$namespace-setns-syz_open_procfs-socket$inet6_icmp_raw-setsockopt$inet6_int-mkdirat-dup-read$FUSE
detailed listing:
executing program 0:
getegid()
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
shutdown(r2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', <r3=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@empty, r3}, 0x14)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x2)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setns(r4, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r6, 0x29, 0x11, 0x0, 0x0)
mkdirat(r5, &(0x7f00000000c0)='./file0\x00', 0x4c)
r7 = dup(r0)
read$FUSE(r7, &(0x7f00000075c0)={0x2020}, 0x2020)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-bind$unix-syz_open_procfs$namespace-setns-syz_open_procfs-socket$inet6_icmp_raw-setsockopt$inet6_int-mkdirat-dup-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
shutdown(r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty, r4}, 0x14)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x2)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setns(r5, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x11, 0x0, 0x0)
mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x4c)
dup(r1)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-bind$unix-syz_open_procfs$namespace-setns-syz_open_procfs-socket$inet6_icmp_raw-setsockopt$inet6_int-mkdirat-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
shutdown(r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty, r4}, 0x14)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x2)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setns(r5, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x11, 0x0, 0x0)
mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x4c)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-bind$unix-syz_open_procfs$namespace-setns-syz_open_procfs-socket$inet6_icmp_raw-setsockopt$inet6_int-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
shutdown(r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty, r4}, 0x14)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x2)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setns(r5, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r6, 0x29, 0x11, 0x0, 0x0)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-bind$unix-syz_open_procfs$namespace-setns-syz_open_procfs-socket$inet6_icmp_raw-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
shutdown(r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty, r4}, 0x14)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x2)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setns(r5, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-bind$unix-syz_open_procfs$namespace-setns-syz_open_procfs-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
shutdown(r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty, r4}, 0x14)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x2)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setns(r5, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-bind$unix-syz_open_procfs$namespace-setns-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
shutdown(r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty, r4}, 0x14)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x2)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setns(r5, 0x0)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-bind$unix-syz_open_procfs$namespace-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
shutdown(r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty, r4}, 0x14)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-bind$unix-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
shutdown(r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty, r4}, 0x14)
bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x2)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setsockopt$inet6_IPV6_PKTINFO-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$unix(0x1, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
shutdown(r2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', <r3=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@empty, r3}, 0x14)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-ioctl$ifreq_SIOCGIFINDEX_wireguard-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$unix(0x1, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
shutdown(r2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'})
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-shutdown-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$unix(0x1, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
shutdown(r2, 0x0)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-socket-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$unix(0x1, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-socket$unix-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$unix(0x1, 0x2, 0x0)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-perf_event_open-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x1b}, 0x1112, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-connect$inet6-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-socket$inet6_tcp-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-syz_open_procfs$namespace-setns
detailed listing:
executing program 0:
getegid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getegid-setns
detailed listing:
executing program 0:
getegid()
setns(0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, 0x0)
setns(r0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
program crashed: panic: runtime error: invalid memory address or nil pointer dereference
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
program crashed: panic: runtime error: invalid memory address or nil pointer dereference
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-setns
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)

program crashed: panic: runtime error: invalid memory address or nil pointer dereference
validation run: crashed=true
reproducing took 7m59.031229848s
repro crashed as (corrupted=false):
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xe07e2f]

goroutine 1025 gp=0xc001272fc0 m=0 mp=0x2cc75e0 [running]:
panic({0x194c0c0?, 0x2c93390?})
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/go/src/runtime/panic.go:802 +0x168 fp=0xc001555dd0 sp=0xc001555d20 pc=0x480428
runtime.panicmem(...)
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/go/src/runtime/panic.go:262
runtime.sigpanic()
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/go/src/runtime/signal_unix.go:925 +0x359 fp=0xc001555e30 sp=0xc001555dd0 pc=0x482fd9
gvisor.dev/gvisor/pkg/sentry/kernel.(*FSContext).DecRef(...)
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/fs_context.go:88
gvisor.dev/gvisor/pkg/sentry/kernel.(*runExitMain).execute(0xc0011be090?, 0xc001141908)
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_exit.go:300 +0x7cf fp=0xc001555f30 sp=0xc001555e30 pc=0xe07e2f
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc001141908, 0x5d)
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x3de fp=0xc001555fc0 sp=0xc001555f30 pc=0xe1b73e
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:416 +0x25 fp=0xc001555fe0 sp=0xc001555fc0 pc=0xe2de25
runtime.goexit({})
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/go/src/runtime/asm_amd64.s:1693 +0x1 fp=0xc001555fe8 sp=0xc001555fe0 pc=0x4896c1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 977
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:416 +0x110

final repro crashed as (corrupted=false):
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0xe07e2f]

goroutine 1025 gp=0xc001272fc0 m=0 mp=0x2cc75e0 [running]:
panic({0x194c0c0?, 0x2c93390?})
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/go/src/runtime/panic.go:802 +0x168 fp=0xc001555dd0 sp=0xc001555d20 pc=0x480428
runtime.panicmem(...)
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/go/src/runtime/panic.go:262
runtime.sigpanic()
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/go/src/runtime/signal_unix.go:925 +0x359 fp=0xc001555e30 sp=0xc001555dd0 pc=0x482fd9
gvisor.dev/gvisor/pkg/sentry/kernel.(*FSContext).DecRef(...)
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/fs_context.go:88
gvisor.dev/gvisor/pkg/sentry/kernel.(*runExitMain).execute(0xc0011be090?, 0xc001141908)
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_exit.go:300 +0x7cf fp=0xc001555f30 sp=0xc001555e30 pc=0xe07e2f
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).run(0xc001141908, 0x5d)
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_run.go:89 +0x3de fp=0xc001555fc0 sp=0xc001555f30 pc=0xe1b73e
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start.gowrap1()
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:416 +0x25 fp=0xc001555fe0 sp=0xc001555fc0 pc=0xe2de25
runtime.goexit({})
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/go/src/runtime/asm_amd64.s:1693 +0x1 fp=0xc001555fe8 sp=0xc001555fe0 pc=0x4896c1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Start in goroutine 977
	/syzkaller/.cache/bazel/_bazel_root/e46b623d9124efeebe6def9c4e64353e/sandbox/linux-sandbox/23/execroot/_main/gopath/src/gvisor.dev/gvisor/pkg/sentry/kernel/task_start.go:416 +0x110