Extracting prog: 22m30.689441275s
Minimizing prog: 45m54.46125651s
Simplifying prog options: 0s
Extracting C: 30.703575659s
Simplifying C: 24m40.890832788s


extracting reproducer from 52 programs
testing a last program of every proc
single: executing 12 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$printer
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004086802901adbf0000000109021200018c7b4273787cac8dd8a0e0828b4b012d44f689780904000000a0122400681c1d642bbb23dabdc0b51c21f656e88aa5d6fb66fef1db6abcfe48461cff"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair-mprotect-socket$can_raw-socket$nl_netfilter-sendmsg$NFT_BATCH-bind$can_raw-ioctl$ifreq_SIOCGIFINDEX_vcan-syz_open_dev$video4linux-sendmsg$RDMA_NLDEV_CMD_GET-openat$vimc0-ioctl$DRM_IOCTL_SET_CLIENT_CAP-ioctl$VIDIOC_S_PRIORITY-ioctl$VIDIOC_ENCODER_CMD-openat$kvm-setsockopt$inet_mreqn-ioctl$KVM_CREATE_VM-sendmsg$TIPC_NL_KEY_SET-ioctl$KVM_CREATE_VCPU-socket$inet-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_NMI-bpf$PROG_LOAD-mmap-ioctl$sock_SIOCGIFCONF-ioctl$KVM_SET_REGS-sendmsg$NL80211_CMD_SET_KEY-ioctl$KVM_RUN-ioctl$KVM_SET_REGS-ioctl$KVM_RUN-sendmsg$can_raw
detailed listing:
executing program 0:
socketpair(0x3, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000317000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010013000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000780"], 0xe4}}, 0x0)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0xc080)
r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x20000000)
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x4, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @rand_addr=0x64010102}, 0xc)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
socket$inet(0x2, 0x6, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r6, 0xae9a)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2ec, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000500)=@buf={0x31, &(0x7f0000000200)="b463052cddf767e0908b626a583a6c6ebd9e7c30a01ce979a492f28359db9e3968b67ef985af581000b2b16bf947762b0b"})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="04002a00"], 0x20}, 0x1, 0x0, 0x0, 0x4004841}, 0x4810)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x4, 0x0, 0x1, 0x1}, 0x31, 0x1, 0x0, 0x0, "45c6ef8e1310c7901e238a57083da9e0614e3886e0137039bc93cce7ecac6dc02c0d3c5c7afdc100de9e629df8233ee70338b439a5efb26a40218af9b74bf22a"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4064084)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fcntl$notify-syz_open_procfs-socket$nl_generic-fcntl$notify-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-bpf$BPF_GET_MAP_INFO-socket$inet6-connect$inet6-ppoll-getsockname$packet-getsockopt$inet_pktinfo-sendmsg$MPTCP_PM_CMD_ADD_ADDR-pread64
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x29)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$notify(r0, 0x402, 0x80000028)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000040000000000000010000001c0001800600010002000000080003"], 0x30}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c)
ppoll(&(0x7f0000000080)=[{r5, 0x1002}], 0x1, &(0x7f0000000140), 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={<r7=>0x0, @multicast2, @dev}, &(0x7f0000000240)=0xc)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004)
pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF-unshare-mkdir-open_tree-move_mount-syz_mount_image$fuse-get_mempolicy-socket-connect$inet6-ioctl$TUNSETPERSIST-close_range
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r4 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r3, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
unshare(0x40000000)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x20a0820, &(0x7f0000000000)=ANY=[@ANYBLOB="2c326fba746d6f64653d"], 0x0, 0x0, 0x0)
get_mempolicy(0x0, &(0x7f0000000040), 0x2, &(0x7f0000fff000/0x1000)=nil, 0x3011d7e8533872b1)
r10 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x44}, 0x8000ca}, 0xd)
ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1)
close_range(r2, 0xffffffffffffffff, 0x0)

program crashed: WARNING in ip6mr_free_table
single: successfully extracted reproducer
found reproducer with 27 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF-unshare-mkdir-open_tree-move_mount-syz_mount_image$fuse-get_mempolicy-socket-connect$inet6-ioctl$TUNSETPERSIST
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
unshare(0x40000000)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x20a0820, &(0x7f0000000000)=ANY=[@ANYBLOB="2c326fba746d6f64653d"], 0x0, 0x0, 0x0)
get_mempolicy(0x0, &(0x7f0000000040), 0x2, &(0x7f0000fff000/0x1000)=nil, 0x3011d7e8533872b1)
r9 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x44}, 0x8000ca}, 0xd)
ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF-unshare-mkdir-open_tree-move_mount-syz_mount_image$fuse-get_mempolicy-socket-connect$inet6
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
unshare(0x40000000)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x20a0820, &(0x7f0000000000)=ANY=[@ANYBLOB="2c326fba746d6f64653d"], 0x0, 0x0, 0x0)
get_mempolicy(0x0, &(0x7f0000000040), 0x2, &(0x7f0000fff000/0x1000)=nil, 0x3011d7e8533872b1)
r9 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x44}, 0x8000ca}, 0xd)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF-unshare-mkdir-open_tree-move_mount-syz_mount_image$fuse-get_mempolicy-socket
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
unshare(0x40000000)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x20a0820, &(0x7f0000000000)=ANY=[@ANYBLOB="2c326fba746d6f64653d"], 0x0, 0x0, 0x0)
get_mempolicy(0x0, &(0x7f0000000040), 0x2, &(0x7f0000fff000/0x1000)=nil, 0x3011d7e8533872b1)
socket(0x40000000015, 0x5, 0x0)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF-unshare-mkdir-open_tree-move_mount-syz_mount_image$fuse-get_mempolicy
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
unshare(0x40000000)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x20a0820, &(0x7f0000000000)=ANY=[@ANYBLOB="2c326fba746d6f64653d"], 0x0, 0x0, 0x0)
get_mempolicy(0x0, &(0x7f0000000040), 0x2, &(0x7f0000fff000/0x1000)=nil, 0x3011d7e8533872b1)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF-unshare-mkdir-open_tree-move_mount-syz_mount_image$fuse
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
unshare(0x40000000)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x20a0820, &(0x7f0000000000)=ANY=[@ANYBLOB="2c326fba746d6f64653d"], 0x0, 0x0, 0x0)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF-unshare-mkdir-open_tree-move_mount
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
unshare(0x40000000)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF-unshare-mkdir-open_tree
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
unshare(0x40000000)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF-unshare-mkdir
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
unshare(0x40000000)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-ioctl$TUNSETIFF
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-openat$tun-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-ioctl$sock_SIOCETHTOOL-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x4a}})
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-socket$inet6-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x9)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-ppoll-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-syz_emit_ethernet-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x2})
syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-ioctl$DMA_HEAP_IOCTL_ALLOC-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r3 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x2})
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-openat$dma_heap-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r2 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-sendmsg$kcm-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
r2 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20048058)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-socket$kcm-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
socket$kcm(0x1e, 0x1, 0x0)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x8000400)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-openat$sw_sync-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-getsockname$packet-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
r1 = socket(0x11, 0xa, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-socket-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
socket(0x11, 0xa, 0x0)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED-unshare
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-unshare
detailed listing:
executing program 0:
socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
detailed listing:
executing program 0:
unshare(0x40000000)

program crashed: WARNING in ip6mr_free_table
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
program crashed: WARNING in ip6mr_free_table
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
program crashed: WARNING in ip6mr_free_table
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
program crashed: WARNING in ip6mr_free_table
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
program crashed: WARNING in ip6mr_free_table
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
program crashed: WARNING in ip6mr_free_table
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): unshare
program crashed: WARNING in ip6mr_free_table
reproducing took 1h33m36.74513506s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 0 PID: 6357 at net/ipv6/ip6mr.c:419 ip6mr_free_table+0xd8/0x100 net/ipv6/ip6mr.c:419
Modules linked in:
CPU: 0 UID: 0 PID: 6357 Comm: syz-executor341 Not tainted 6.12.0-syzkaller-12089-gcfd47302ac64 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:ip6mr_free_table+0xd8/0x100 net/ipv6/ip6mr.c:419
Code: e8 9d 2f ff ff 49 8d be 98 0e 00 00 31 f6 31 d2 e8 1d e2 45 fa 4c 89 f7 5b 41 5c 41 5e 41 5f e9 1e c7 79 f7 e8 f9 26 1b f7 90 <0f> 0b 90 eb c0 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 72 ff ff ff 48
RSP: 0018:ffffc9000482faf8 EFLAGS: 00010293
RAX: ffffffff8a844a97 RBX: 0000000000000001 RCX: ffff88802e859e00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffffff8a844a2a R09: 1ffff110068303f0
R10: dffffc0000000000 R11: ffffed10068303f1 R12: dffffc0000000000
R13: dead000000000122 R14: ffff8880123cc000 R15: ffff888034182d00
FS:  00007fc0ff2c16c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc0ff35c9f8 CR3: 0000000028d1a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ip6mr_rules_exit+0x18f/0x220 net/ipv6/ip6mr.c:283
 ip6mr_net_exit_batch+0x4a/0x90 net/ipv6/ip6mr.c:1388
 ops_exit_list net/core/net_namespace.c:177 [inline]
 setup_net+0x829/0x9e0 net/core/net_namespace.c:394
 copy_net_ns+0x33f/0x570 net/core/net_namespace.c:500
 create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228
 ksys_unshare+0x57d/0xa70 kernel/fork.c:3334
 __do_sys_unshare kernel/fork.c:3405 [inline]
 __se_sys_unshare kernel/fork.c:3403 [inline]
 __x64_sys_unshare+0x38/0x40 kernel/fork.c:3403
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc0ff306869
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc0ff2c1178 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fc0ff390308 RCX: 00007fc0ff306869
RDX: 00007fc0ff2e2e06 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fc0ff390300 R08: 00007ffd68492367 R09: 00007fc0ff2c16c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc0ff39030c
R13: 0000000000000000 R14: 00007ffd68492280 R15: 00007ffd68492368
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 0 PID: 6357 at net/ipv6/ip6mr.c:419 ip6mr_free_table+0xd8/0x100 net/ipv6/ip6mr.c:419
Modules linked in:
CPU: 0 UID: 0 PID: 6357 Comm: syz-executor341 Not tainted 6.12.0-syzkaller-12089-gcfd47302ac64 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:ip6mr_free_table+0xd8/0x100 net/ipv6/ip6mr.c:419
Code: e8 9d 2f ff ff 49 8d be 98 0e 00 00 31 f6 31 d2 e8 1d e2 45 fa 4c 89 f7 5b 41 5c 41 5e 41 5f e9 1e c7 79 f7 e8 f9 26 1b f7 90 <0f> 0b 90 eb c0 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 72 ff ff ff 48
RSP: 0018:ffffc9000482faf8 EFLAGS: 00010293
RAX: ffffffff8a844a97 RBX: 0000000000000001 RCX: ffff88802e859e00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffffff8a844a2a R09: 1ffff110068303f0
R10: dffffc0000000000 R11: ffffed10068303f1 R12: dffffc0000000000
R13: dead000000000122 R14: ffff8880123cc000 R15: ffff888034182d00
FS:  00007fc0ff2c16c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc0ff35c9f8 CR3: 0000000028d1a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 ip6mr_rules_exit+0x18f/0x220 net/ipv6/ip6mr.c:283
 ip6mr_net_exit_batch+0x4a/0x90 net/ipv6/ip6mr.c:1388
 ops_exit_list net/core/net_namespace.c:177 [inline]
 setup_net+0x829/0x9e0 net/core/net_namespace.c:394
 copy_net_ns+0x33f/0x570 net/core/net_namespace.c:500
 create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228
 ksys_unshare+0x57d/0xa70 kernel/fork.c:3334
 __do_sys_unshare kernel/fork.c:3405 [inline]
 __se_sys_unshare kernel/fork.c:3403 [inline]
 __x64_sys_unshare+0x38/0x40 kernel/fork.c:3403
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc0ff306869
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc0ff2c1178 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007fc0ff390308 RCX: 00007fc0ff306869
RDX: 00007fc0ff2e2e06 RSI: 0000000000000000 RDI: 0000000040000000
RBP: 00007fc0ff390300 R08: 00007ffd68492367 R09: 00007fc0ff2c16c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc0ff39030c
R13: 0000000000000000 R14: 00007ffd68492280 R15: 00007ffd68492368
 </TASK>