Extracting prog: 56.187488668s
Minimizing prog: 20m22.074592058s
Simplifying prog options: 0s
Extracting C: 33.725013734s
Simplifying C: 2m36.786216921s


extracting reproducer from 20 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 45s
testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-listen-socket$inet6_tcp-connect$inet6-close-mount$cgroup-ioctl$NS_GET_NSTYPE-syz_extract_tcp_res$synack-write$tun-unshare-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, <r3=>0x41424344}, 0x3ff, 0x1) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r4, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c) (async)
close(0x3) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, <r6=>0x41424344}, 0x1, 0x0)
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0300d16c0300040006004e8e00740064000001069078e00000017f0000018323d364010100ac1414aaac1414bbac14143e00000000ffffffffffffffffe0000001014e224e20", @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="7040febe90580009fe06e2d4c3d900009b75c9633506990a67da5f619ca3e199740bed4423353bacb63423591d4767b9f5886401be1d1b55615cbb94788bde7b580a1f0dadd854bc13bce706596c08a59123f020af298abc3b89d03c89e60a0f97"], 0x7e) (async)
unshare(0x40000d00) (async)
syz_emit_ethernet(0x46, &(0x7f0000000dc0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @local, {[@fragment={0x3b, 0x0, 0x4, 0x1, 0x0, 0x8, 0x68}], {0x0, 0x0, 0x8}}}}}}, 0x0)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
single: successfully extracted reproducer
found reproducer with 20 syscalls
minimizing guilty program
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-listen-socket$inet6_tcp-connect$inet6-close-mount$cgroup-ioctl$NS_GET_NSTYPE-syz_extract_tcp_res$synack-write$tun-unshare
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20026000180c200000086dd60081f2000703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff001f000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000004000001260004007af7c7a7c6c05edf233e4d5611517f65abbb394ea9a69187bfb2dd054531b21773d522d06b36abb6ece804bc76376946ecebacf07e2d32c96064dd57410ccd78775d11a7b8d0579c2f6e9a554d71b5c4f9268bf806858fa684eaae7dcbb3067d0ec351ce2d9278b04a32af45aa802c611fa6fe72fd116cb1ed45da916c57508b30c89ffd7f52ef40bcca02918941"], 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, <r3=>0x41424344}, 0x3ff, 0x1) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r4, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c) (async)
close(0x3) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, <r6=>0x41424344}, 0x1, 0x0)
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0300d16c0300040006004e8e00740064000001069078e00000017f0000018323d364010100ac1414aaac1414bbac14143e00000000ffffffffffffffffe0000001014e224e20", @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="7040febe90580009fe06e2d4c3d900009b75c9633506990a67da5f619ca3e199740bed4423353bacb63423591d4767b9f5886401be1d1b55615cbb94788bde7b580a1f0dadd854bc13bce706596c08a59123f020af298abc3b89d03c89e60a0f97"], 0x7e) (async)
unshare(0x40000d00) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-listen-socket$inet6_tcp-connect$inet6-close-mount$cgroup-ioctl$NS_GET_NSTYPE-syz_extract_tcp_res$synack-write$tun
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, <r3=>0x41424344}, 0x3ff, 0x1) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r4, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c) (async)
close(0x3) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, <r6=>0x41424344}, 0x1, 0x0)
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0300d16c0300040006004e8e00740064000001069078e00000017f0000018323d364010100ac1414aaac1414bbac14143e00000000ffffffffffffffffe0000001014e224e20", @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="7040febe90580009fe06e2d4c3d900009b75c9633506990a67da5f619ca3e199740bed4423353bacb63423591d4767b9f5886401be1d1b55615cbb94788bde7b580a1f0dadd854bc13bce706596c08a59123f020af298abc3b89d03c89e60a0f97"], 0x7e) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-listen-socket$inet6_tcp-connect$inet6-close-mount$cgroup-ioctl$NS_GET_NSTYPE-syz_extract_tcp_res$synack
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20026000180c200000086dd60081f2000703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff001f000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000004000001260004007af7c7a7c6c05edf233e4d5611517f65abbb394ea9a69187bfb2dd054531b21773d522d06b36abb6ece804bc76376946ecebacf07e2d32c96064dd57410ccd78775d11a7b8d0579c2f6e9a554d71b5c4f9268bf806858fa684eaae7dcbb3067d0ec351ce2d9278b04a32af45aa802c611fa6fe72fd116cb1ed45da916c57508b30c89ffd7f52ef40bcca02918941"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100), 0x3ff, 0x1) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r2, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c) (async)
close(0x3) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async)
syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-listen-socket$inet6_tcp-connect$inet6-close-mount$cgroup-ioctl$NS_GET_NSTYPE
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100), 0x3ff, 0x1) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r2, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c) (async)
close(0x3) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-listen-socket$inet6_tcp-connect$inet6-close-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100), 0x3ff, 0x1) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c) (async)
close(0x3) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-listen-socket$inet6_tcp-connect$inet6-close
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100), 0x3ff, 0x1) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c) (async)
close(0x3) (async)

program did not crash
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-listen-socket$inet6_tcp-connect$inet6-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20026000180c200000086dd60081f2000703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff001f000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000004000001260004007af7c7a7c6c05edf233e4d5611517f65abbb394ea9a69187bfb2dd054531b21773d522d06b36abb6ece804bc76376946ecebacf07e2d32c96064dd57410ccd78775d11a7b8d0579c2f6e9a554d71b5c4f9268bf806858fa684eaae7dcbb3067d0ec351ce2d9278b04a32af45aa802c611fa6fe72fd116cb1ed45da916c57508b30c89ffd7f52ef40bcca02918941"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100), 0x3ff, 0x1) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-listen-socket$inet6_tcp-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100), 0x3ff, 0x1) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-listen-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20026000180c200000086dd60081f2000703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff001f000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000004000001260004007af7c7a7c6c05edf233e4d5611517f65abbb394ea9a69187bfb2dd054531b21773d522d06b36abb6ece804bc76376946ecebacf07e2d32c96064dd57410ccd78775d11a7b8d0579c2f6e9a554d71b5c4f9268bf806858fa684eaae7dcbb3067d0ec351ce2d9278b04a32af45aa802c611fa6fe72fd116cb1ed45da916c57508b30c89ffd7f52ef40bcca02918941"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100), 0x3ff, 0x1) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r1, 0x0) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-bind$inet6-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100), 0x3ff, 0x1) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-socket$inet6_tcp-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100), 0x3ff, 0x1) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-syz_extract_tcp_res-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
syz_extract_tcp_res(&(0x7f0000000100), 0x3ff, 0x1) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-openat$tun-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-syz_emit_ethernet-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20026000180c200000086dd60081f2000703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff001f000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000004000001260004007af7c7a7c6c05edf233e4d5611517f65abbb394ea9a69187bfb2dd054531b21773d522d06b36abb6ece804bc76376946ecebacf07e2d32c96064dd57410ccd78775d11a7b8d0579c2f6e9a554d71b5c4f9268bf806858fa684eaae7dcbb3067d0ec351ce2d9278b04a32af45aa802c611fa6fe72fd116cb1ed45da916c57508b30c89ffd7f52ef40bcca02918941"], 0x0) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-unshare-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
unshare(0x22020600)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-syz_open_procfs$namespace-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-mount$cgroup
detailed listing:
executing program 0:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program did not crash
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fchdir-mount$cgroup
detailed listing:
executing program 0:
fchdir(0xffffffffffffffff) (async)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) (async)

program did not crash
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]})

program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x484b1e3341a13be1, 0x0)
fchdir(r0)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]})

program did not crash
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0)
mount$cgroup(0x0, 0x0, &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]})

program did not crash
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', 0x0, 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]})

program did not crash
testing program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
detailed listing:
executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0)
fchdir(r0)
mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m3.556692039s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
simplifying C reproducer
testing compiled C program (duration=1m3.556692039s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m3.556692039s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m3.556692039s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m3.556692039s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
testing compiled C program (duration=1m3.556692039s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$pidfd-fchdir-mount$cgroup
program crashed: panic: running on goroutine NUM (task goroutine for kernel.Task ADDR is NUM)
reproducing took 24m28.77333867s
repro crashed as (corrupted=false):
panic: running on goroutine 260 (task goroutine for kernel.Task 0xc000b8e588 is 0)

goroutine 260 gp=0xc000785c00 m=5 mp=0xc000180008 [running]:
panic({0x1beb780?, 0xc000484c70?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc000f61558 sp=0xc000f614a8 pc=0x478628
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc000b8e588)
	pkg/sentry/kernel/task_run.go:368 +0x14e fp=0xc000f615d8 sp=0xc000f61558 pc=0xfdbdee
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Value(0xc000b8e588, {0x1bed040, 0x2045f88})
	pkg/sentry/kernel/task_context.go:59 +0x57 fp=0xc000f61618 sp=0xc000f615d8 pc=0xfbce37
gvisor.dev/gvisor/pkg/sentry/kernel.KernelFromContext({0x2073ac0, 0xc000b8e588})
	pkg/sentry/kernel/context.go:55 +0x5b fp=0xc000f61650 sp=0xc000f61618 pc=0xf63c7b
gvisor.dev/gvisor/pkg/sentry/fsimpl/cgroupfs.(*filesystem).Release(0xc000230a00, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/fsimpl/cgroupfs/cgroupfs.go:468 +0x4b fp=0xc000f616b0 sp=0xc000f61650 pc=0x171d0ab
gvisor.dev/gvisor/pkg/sentry/vfs.(*Filesystem).DecRef.func1()
	pkg/sentry/vfs/filesystem.go:81 +0x11f fp=0xc000f61708 sp=0xc000f616b0 pc=0xb16c5f
gvisor.dev/gvisor/pkg/sentry/vfs.(*FilesystemRefs).DecRef(0xc000230a00, 0xc000f61790)
	bazel-out/k8-fastbuild/bin/pkg/sentry/vfs/filesystem_refs.go:133 +0xb4 fp=0xc000f61780 sp=0xc000f61708 pc=0xb17774
gvisor.dev/gvisor/pkg/sentry/vfs.(*Filesystem).DecRef(0xc000230a00, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/vfs/filesystem.go:77 +0xa5 fp=0xc000f617c0 sp=0xc000f61780 pc=0xb16b05
gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).unlockMounts(0xc0002471e0, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/vfs/vfs.go:1050 +0x2b0 fp=0xc000f61890 sp=0xc000f617c0 pc=0xb4aa70
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).destroy.deferwrap1()
	pkg/sentry/vfs/mount.go:949 +0x50 fp=0xc000f618d0 sp=0xc000f61890 pc=0xb27a50
runtime.deferreturn()
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:605 +0x5e fp=0xc000f61960 sp=0xc000f618d0 pc=0x43b97e
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).destroy(0xc0008c2fd0, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/vfs/mount.go:979 +0x8cc fp=0xc000f61ad8 sp=0xc000f61960 pc=0xb2796c
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).DecRef(0xc0008c2fd0, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/vfs/mount.go:943 +0xca fp=0xc000f61b08 sp=0xc000f61ad8 pc=0xb2706a
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Filesystem).processDeferredDecRefs.deferwrap1()
	pkg/sentry/fsimpl/kernfs/kernfs.go:182 +0x62 fp=0xc000f61b50 sp=0xc000f61b08 pc=0xc94e22
runtime.deferreturn()
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:605 +0x5e fp=0xc000f61be0 sp=0xc000f61b50 pc=0x43b97e
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Filesystem).processDeferredDecRefs(0xc00094c000, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/fsimpl/kernfs/kernfs.go:186 +0x205 fp=0xc000f61c40 sp=0xc000f61be0 pc=0xc94d85
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Dentry).Invalidate.deferwrap1()
	pkg/sentry/fsimpl/kernfs/kernfs.go:323 +0x50 fp=0xc000f61c80 sp=0xc000f61c40 pc=0xc95a70
runtime.deferreturn()
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:605 +0x5e fp=0xc000f61d10 sp=0xc000f61c80 pc=0x43b97e
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Dentry).Invalidate(0xc00032ac60, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/fsimpl/kernfs/kernfs.go:339 +0x42d fp=0xc000f61e30 sp=0xc000f61d10 pc=0xc9592d
gvisor.dev/gvisor/pkg/sentry/fsimpl/proc.(*taskInode).TaskDestroyAction(0xc000b7f408, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/fsimpl/proc/task.go:130 +0x18d fp=0xc000f61ee0 sp=0xc000f61e30 pc=0x13ce52d
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).execOnDestroyActions.func1()
	pkg/sentry/kernel/task_exit.go:807 +0x1ad fp=0xc000f61fe0 sp=0xc000f61ee0 pc=0xfc736d
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000f61fe8 sp=0xc000f61fe0 pc=0x4819a1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).execOnDestroyActions in goroutine 291
	pkg/sentry/kernel/task_exit.go:804 +0x1f1

final repro crashed as (corrupted=false):
panic: running on goroutine 260 (task goroutine for kernel.Task 0xc000b8e588 is 0)

goroutine 260 gp=0xc000785c00 m=5 mp=0xc000180008 [running]:
panic({0x1beb780?, 0xc000484c70?})
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:804 +0x168 fp=0xc000f61558 sp=0xc000f614a8 pc=0x478628
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).assertTaskGoroutine(0xc000b8e588)
	pkg/sentry/kernel/task_run.go:368 +0x14e fp=0xc000f615d8 sp=0xc000f61558 pc=0xfdbdee
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).Value(0xc000b8e588, {0x1bed040, 0x2045f88})
	pkg/sentry/kernel/task_context.go:59 +0x57 fp=0xc000f61618 sp=0xc000f615d8 pc=0xfbce37
gvisor.dev/gvisor/pkg/sentry/kernel.KernelFromContext({0x2073ac0, 0xc000b8e588})
	pkg/sentry/kernel/context.go:55 +0x5b fp=0xc000f61650 sp=0xc000f61618 pc=0xf63c7b
gvisor.dev/gvisor/pkg/sentry/fsimpl/cgroupfs.(*filesystem).Release(0xc000230a00, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/fsimpl/cgroupfs/cgroupfs.go:468 +0x4b fp=0xc000f616b0 sp=0xc000f61650 pc=0x171d0ab
gvisor.dev/gvisor/pkg/sentry/vfs.(*Filesystem).DecRef.func1()
	pkg/sentry/vfs/filesystem.go:81 +0x11f fp=0xc000f61708 sp=0xc000f616b0 pc=0xb16c5f
gvisor.dev/gvisor/pkg/sentry/vfs.(*FilesystemRefs).DecRef(0xc000230a00, 0xc000f61790)
	bazel-out/k8-fastbuild/bin/pkg/sentry/vfs/filesystem_refs.go:133 +0xb4 fp=0xc000f61780 sp=0xc000f61708 pc=0xb17774
gvisor.dev/gvisor/pkg/sentry/vfs.(*Filesystem).DecRef(0xc000230a00, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/vfs/filesystem.go:77 +0xa5 fp=0xc000f617c0 sp=0xc000f61780 pc=0xb16b05
gvisor.dev/gvisor/pkg/sentry/vfs.(*VirtualFilesystem).unlockMounts(0xc0002471e0, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/vfs/vfs.go:1050 +0x2b0 fp=0xc000f61890 sp=0xc000f617c0 pc=0xb4aa70
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).destroy.deferwrap1()
	pkg/sentry/vfs/mount.go:949 +0x50 fp=0xc000f618d0 sp=0xc000f61890 pc=0xb27a50
runtime.deferreturn()
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:605 +0x5e fp=0xc000f61960 sp=0xc000f618d0 pc=0x43b97e
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).destroy(0xc0008c2fd0, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/vfs/mount.go:979 +0x8cc fp=0xc000f61ad8 sp=0xc000f61960 pc=0xb2796c
gvisor.dev/gvisor/pkg/sentry/vfs.(*Mount).DecRef(0xc0008c2fd0, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/vfs/mount.go:943 +0xca fp=0xc000f61b08 sp=0xc000f61ad8 pc=0xb2706a
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Filesystem).processDeferredDecRefs.deferwrap1()
	pkg/sentry/fsimpl/kernfs/kernfs.go:182 +0x62 fp=0xc000f61b50 sp=0xc000f61b08 pc=0xc94e22
runtime.deferreturn()
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:605 +0x5e fp=0xc000f61be0 sp=0xc000f61b50 pc=0x43b97e
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Filesystem).processDeferredDecRefs(0xc00094c000, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/fsimpl/kernfs/kernfs.go:186 +0x205 fp=0xc000f61c40 sp=0xc000f61be0 pc=0xc94d85
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Dentry).Invalidate.deferwrap1()
	pkg/sentry/fsimpl/kernfs/kernfs.go:323 +0x50 fp=0xc000f61c80 sp=0xc000f61c40 pc=0xc95a70
runtime.deferreturn()
	bazel-out/k8-fastbuild/bin/external/io_bazel_rules_go/stdlib_/src/runtime/panic.go:605 +0x5e fp=0xc000f61d10 sp=0xc000f61c80 pc=0x43b97e
gvisor.dev/gvisor/pkg/sentry/fsimpl/kernfs.(*Dentry).Invalidate(0xc00032ac60, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/fsimpl/kernfs/kernfs.go:339 +0x42d fp=0xc000f61e30 sp=0xc000f61d10 pc=0xc9592d
gvisor.dev/gvisor/pkg/sentry/fsimpl/proc.(*taskInode).TaskDestroyAction(0xc000b7f408, {0x2073ac0, 0xc000b8e588})
	pkg/sentry/fsimpl/proc/task.go:130 +0x18d fp=0xc000f61ee0 sp=0xc000f61e30 pc=0x13ce52d
gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).execOnDestroyActions.func1()
	pkg/sentry/kernel/task_exit.go:807 +0x1ad fp=0xc000f61fe0 sp=0xc000f61ee0 pc=0xfc736d
runtime.goexit({})
	src/runtime/asm_amd64.s:1700 +0x1 fp=0xc000f61fe8 sp=0xc000f61fe0 pc=0x4819a1
created by gvisor.dev/gvisor/pkg/sentry/kernel.(*Task).execOnDestroyActions in goroutine 291
	pkg/sentry/kernel/task_exit.go:804 +0x1f1