Extracting prog: 2m9.265129355s
Minimizing prog: 1h8m31.402464827s
Simplifying prog options: 0s
Extracting C: 33.831714988s
Simplifying C: 10m13.883838551s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf-socket$inet6_mptcp-bpf$BPF_PROG_WITH_BTFID_LOAD-close-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-sendmsg$IPCTNL_MSG_CT_NEW-sendto$inet6-socket$netlink-sendmsg$nl_route-sendmsg$RDMA_NLDEV_CMD_STAT_GET
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="54060000020601020000000000000c0000000c00078008001240000600000500010006000100050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000a987ec98a00673fbdd149891f959648cb5068ee42b940100000000000000fa4b1cbcd3e23b9ecfe9dd90bfc77c528163e2a273d685d8ce89772c6c310000b68941c3c079750905410cf9e4ae86d83d4df3556dbd9e14be2561e686330001b69a2c09d9ecab4e0f73794b659ace213e5c5a3a1f76bfb44875d907c956881b74d4b4409c5315032aba700a58b035c55a01a83a544b213ecd3f24ec7aa43f9752d34caa07f547c04508a6b3996a31fca5692808bf880fa75a1366e6db44b8df0f493737549a5993b80c1b30e8d7409b5e921abac444c5505c9ef77e74fec054d9a8"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="08210c000900000085000000400000007a4328ed0104000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x67, &(0x7f0000000780)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x5, 0x9}, 0x10, 0x4e83, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='D'], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x11)
sendto$inet6(r7, 0x0, 0x0, 0x20010004, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x44090}, 0x800)

program crashed: WARNING in nla_get_range_unsigned
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf-socket$inet6_mptcp-bpf$BPF_PROG_WITH_BTFID_LOAD-close-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-sendmsg$IPCTNL_MSG_CT_NEW-sendto$inet6-socket$netlink-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="08210c000900000085000000400000007a4328ed0104000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x67, &(0x7f0000000780)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x5, 0x9}, 0x10, 0x4e83, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='D'], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x11)
sendto$inet6(r7, 0x0, 0x0, 0x20010004, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf-socket$inet6_mptcp-bpf$BPF_PROG_WITH_BTFID_LOAD-close-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-sendmsg$IPCTNL_MSG_CT_NEW-sendto$inet6-socket$netlink
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="54060000020601020000000000000c0000000c00078008001240000600000500010006000100050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000a987ec98a00673fbdd149891f959648cb5068ee42b940100000000000000fa4b1cbcd3e23b9ecfe9dd90bfc77c528163e2a273d685d8ce89772c6c310000b68941c3c079750905410cf9e4ae86d83d4df3556dbd9e14be2561e686330001b69a2c09d9ecab4e0f73794b659ace213e5c5a3a1f76bfb44875d907c956881b74d4b4409c5315032aba700a58b035c55a01a83a544b213ecd3f24ec7aa43f9752d34caa07f547c04508a6b3996a31fca5692808bf880fa75a1366e6db44b8df0f493737549a5993b80c1b30e8d7409b5e921abac444c5505c9ef77e74fec054d9a8"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="08210c000900000085000000400000007a4328ed0104000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x67, &(0x7f0000000780)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x5, 0x9}, 0x10, 0x4e83, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='D'], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x11)
sendto$inet6(r7, 0x0, 0x0, 0x20010004, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf-socket$inet6_mptcp-bpf$BPF_PROG_WITH_BTFID_LOAD-close-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-sendmsg$IPCTNL_MSG_CT_NEW-sendto$inet6
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="54060000020601020000000000000c0000000c00078008001240000600000500010006000100050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000a987ec98a00673fbdd149891f959648cb5068ee42b940100000000000000fa4b1cbcd3e23b9ecfe9dd90bfc77c528163e2a273d685d8ce89772c6c310000b68941c3c079750905410cf9e4ae86d83d4df3556dbd9e14be2561e686330001b69a2c09d9ecab4e0f73794b659ace213e5c5a3a1f76bfb44875d907c956881b74d4b4409c5315032aba700a58b035c55a01a83a544b213ecd3f24ec7aa43f9752d34caa07f547c04508a6b3996a31fca5692808bf880fa75a1366e6db44b8df0f493737549a5993b80c1b30e8d7409b5e921abac444c5505c9ef77e74fec054d9a8"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="08210c000900000085000000400000007a4328ed0104000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x67, &(0x7f0000000780)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x5, 0x9}, 0x10, 0x4e83, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='D'], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x11)
sendto$inet6(r7, 0x0, 0x0, 0x20010004, 0x0, 0x0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf-socket$inet6_mptcp-bpf$BPF_PROG_WITH_BTFID_LOAD-close-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-sendmsg$IPCTNL_MSG_CT_NEW
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="08210c000900000085000000400000007a4328ed0104000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x67, &(0x7f0000000780)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x5, 0x9}, 0x10, 0x4e83, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='D'], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x11)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf-socket$inet6_mptcp-bpf$BPF_PROG_WITH_BTFID_LOAD-close-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="08210c000900000085000000400000007a4328ed0104000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x67, &(0x7f0000000780)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x5, 0x9}, 0x10, 0x4e83, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='D'], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf-socket$inet6_mptcp-bpf$BPF_PROG_WITH_BTFID_LOAD-close-bpf$PROG_LOAD
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="08210c000900000085000000400000007a4328ed0104000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x67, &(0x7f0000000780)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x5, 0x9}, 0x10, 0x4e83, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='D'], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf-socket$inet6_mptcp-bpf$BPF_PROG_WITH_BTFID_LOAD-close
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="08210c000900000085000000400000007a4328ed0104000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x67, &(0x7f0000000780)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x5, 0x9}, 0x10, 0x4e83, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
close(0x3)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf-socket$inet6_mptcp-bpf$BPF_PROG_WITH_BTFID_LOAD
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="08210c000900000085000000400000007a4328ed0104000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x67, &(0x7f0000000780)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x5, 0x9}, 0x10, 0x4e83, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf-socket$inet6_mptcp
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="54060000020601020000000000000c0000000c00078008001240000600000500010006000100050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000a987ec98a00673fbdd149891f959648cb5068ee42b940100000000000000fa4b1cbcd3e23b9ecfe9dd90bfc77c528163e2a273d685d8ce89772c6c310000b68941c3c079750905410cf9e4ae86d83d4df3556dbd9e14be2561e686330001b69a2c09d9ecab4e0f73794b659ace213e5c5a3a1f76bfb44875d907c956881b74d4b4409c5315032aba700a58b035c55a01a83a544b213ecd3f24ec7aa43f9752d34caa07f547c04508a6b3996a31fca5692808bf880fa75a1366e6db44b8df0f493737549a5993b80c1b30e8d7409b5e921abac444c5505c9ef77e74fec054d9a8"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare-setsockopt$sock_attach_bpf
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices-unshare
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
unshare(0x36000080)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS-write$cgroup_devices
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_DEL_TX_TS
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r5, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-write$cgroup_devices
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa)

program did not crash
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_devices-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-openat$cgroup_root-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-mkdirat$cgroup_root-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-setsockopt$sock_int-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="54060000020601020000000000000c0000000c00078008001240000600000500010006000100050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000a987ec98a00673fbdd149891f959648cb5068ee42b940100000000000000fa4b1cbcd3e23b9ecfe9dd90bfc77c528163e2a273d685d8ce89772c6c310000b68941c3c079750905410cf9e4ae86d83d4df3556dbd9e14be2561e686330001b69a2c09d9ecab4e0f73794b659ace213e5c5a3a1f76bfb44875d907c956881b74d4b4409c5315032aba700a58b035c55a01a83a544b213ecd3f24ec7aa43f9752d34caa07f547c04508a6b3996a31fca5692808bf880fa75a1366e6db44b8df0f493737549a5993b80c1b30e8d7409b5e921abac444c5505c9ef77e74fec054d9a8"], 0x54}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-shutdown-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r2, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-sendmmsg$inet6-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, 0x0, 0x0, 0x931766f6319eed40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-socket$inet6_sctp-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-socket$inet_tcp-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-socket$nl_netfilter-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_init_net_socket$ax25-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)

program did not crash
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program did not crash
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program did not crash
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)

program did not crash
testing program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)

program did not crash
extracting C reproducer
testing compiled C program (duration=53.394568498s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
program crashed: WARNING in nla_get_range_unsigned
simplifying C reproducer
testing compiled C program (duration=53.394568498s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.394568498s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.394568498s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.394568498s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.394568498s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.394568498s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.394568498s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$nl80211
program crashed: WARNING in nla_get_range_unsigned
reproducing took 1h21m28.383192136s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5823 at lib/nlattr.c:123 nla_get_range_unsigned+0xc8/0x4b0 lib/nlattr.c:122
Modules linked in:
CPU: 1 UID: 0 PID: 5823 Comm: syz-executor370 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 lib/nlattr.c:122
Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 4e a8 d3 fc 66 85 ed 0f 88 df 02 00 00 e8 a0 a4 d3 fc eb 09 e8 99 a4 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8
RSP: 0018:ffffc9000418f3d0 EFLAGS: 00010293
RAX: ffffffff84ec1e8f RBX: ffffffff8c808eb0 RCX: ffff888078b55a00
RDX: 0000000000000000 RSI: 0000000000008a3e RDI: 0000000000000000
RBP: 0000000000008a3e R08: ffff888078b55a00 R09: 0000000000000004
R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8c808eba
R13: ffffc9000418f5b0 R14: dffffc0000000000 R15: 1ffffffff19011d6
FS:  000055556047a380(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000000 CR3: 0000000079e68000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __netlink_policy_dump_write_attr+0x565/0xdc0 net/netlink/policy.c:316
 netlink_policy_dump_write+0x1e1/0x6e0 net/netlink/policy.c:447
 ctrl_dumppolicy+0x6f4/0xb90 net/netlink/genetlink.c:1743
 genl_dumpit+0x108/0x1b0 net/netlink/genetlink.c:1027
 netlink_dump+0x64e/0xe70 net/netlink/af_netlink.c:2309
 netlink_recvmsg+0x67b/0xe00 net/netlink/af_netlink.c:1965
 sock_recvmsg_nosec net/socket.c:1017 [inline]
 sock_recvmsg+0x229/0x270 net/socket.c:1039
 __sys_recvfrom+0x1f6/0x340 net/socket.c:2230
 __do_sys_recvfrom net/socket.c:2245 [inline]
 __se_sys_recvfrom net/socket.c:2241 [inline]
 __x64_sys_recvfrom+0xde/0x100 net/socket.c:2241
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9d8574b9b9
Code: ff e8 cb 01 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d d1 56 07 00 00 41 89 ca 74 1c 45 31 c9 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 67 c3 66 0f 1f 44 00 00 55 48 83 ec 20 48 89
RSP: 002b:00007ffcb686a1e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
RAX: ffffffffffffffda RBX: 00007ffcb686a274 RCX: 00007f9d8574b9b9
RDX: 0000000000001000 RSI: 00007ffcb686a260 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb686a260
R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000001
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5823 at lib/nlattr.c:123 nla_get_range_unsigned+0xc8/0x4b0 lib/nlattr.c:122
Modules linked in:
CPU: 1 UID: 0 PID: 5823 Comm: syz-executor370 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 lib/nlattr.c:122
Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 4e a8 d3 fc 66 85 ed 0f 88 df 02 00 00 e8 a0 a4 d3 fc eb 09 e8 99 a4 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8
RSP: 0018:ffffc9000418f3d0 EFLAGS: 00010293
RAX: ffffffff84ec1e8f RBX: ffffffff8c808eb0 RCX: ffff888078b55a00
RDX: 0000000000000000 RSI: 0000000000008a3e RDI: 0000000000000000
RBP: 0000000000008a3e R08: ffff888078b55a00 R09: 0000000000000004
R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8c808eba
R13: ffffc9000418f5b0 R14: dffffc0000000000 R15: 1ffffffff19011d6
FS:  000055556047a380(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000000 CR3: 0000000079e68000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __netlink_policy_dump_write_attr+0x565/0xdc0 net/netlink/policy.c:316
 netlink_policy_dump_write+0x1e1/0x6e0 net/netlink/policy.c:447
 ctrl_dumppolicy+0x6f4/0xb90 net/netlink/genetlink.c:1743
 genl_dumpit+0x108/0x1b0 net/netlink/genetlink.c:1027
 netlink_dump+0x64e/0xe70 net/netlink/af_netlink.c:2309
 netlink_recvmsg+0x67b/0xe00 net/netlink/af_netlink.c:1965
 sock_recvmsg_nosec net/socket.c:1017 [inline]
 sock_recvmsg+0x229/0x270 net/socket.c:1039
 __sys_recvfrom+0x1f6/0x340 net/socket.c:2230
 __do_sys_recvfrom net/socket.c:2245 [inline]
 __se_sys_recvfrom net/socket.c:2241 [inline]
 __x64_sys_recvfrom+0xde/0x100 net/socket.c:2241
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9d8574b9b9
Code: ff e8 cb 01 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d d1 56 07 00 00 41 89 ca 74 1c 45 31 c9 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 67 c3 66 0f 1f 44 00 00 55 48 83 ec 20 48 89
RSP: 002b:00007ffcb686a1e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
RAX: ffffffffffffffda RBX: 00007ffcb686a274 RCX: 00007f9d8574b9b9
RDX: 0000000000001000 RSI: 00007ffcb686a260 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb686a260
R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000001
 </TASK>