Extracting prog: 1m5.590241267s
Minimizing prog: 31m10.987343903s
Simplifying prog options: 0s
Extracting C: 2m39.07203547s
Simplifying C: 12m20.899086445s
extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-connect$netrom-openat$ppp-poll-bind$inet6-openat$cgroup_root-openat$cgroup_ro-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp-syz_emit_ethernet
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
poll(&(0x7f0000000600)=[{r2, 0x48}], 0x1, 0x400)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4)
syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6004c2ad00101100fc0100000000000001ff0200000000000000000000000000014e210e22001090780200"/70], 0x0)
program crashed: WARNING in nla_get_range_unsigned
single: successfully extracted reproducer
found reproducer with 15 syscalls
minimizing guilty program
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-connect$netrom-openat$ppp-poll-bind$inet6-openat$cgroup_root-openat$cgroup_ro-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
poll(&(0x7f0000000600)=[{r2, 0x48}], 0x1, 0x400)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-connect$netrom-openat$ppp-poll-bind$inet6-openat$cgroup_root-openat$cgroup_ro-socket$nl_generic-sendmsg$nl_generic
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
poll(&(0x7f0000000600)=[{r2, 0x48}], 0x1, 0x400)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
program did not crash
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-connect$netrom-openat$ppp-poll-bind$inet6-openat$cgroup_root-openat$cgroup_ro-socket$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
poll(&(0x7f0000000600)=[{r2, 0x48}], 0x1, 0x400)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4)
program did not crash
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-connect$netrom-openat$ppp-poll-bind$inet6-openat$cgroup_root-openat$cgroup_ro-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
poll(&(0x7f0000000600)=[{r2, 0x48}], 0x1, 0x400)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
program did not crash
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-connect$netrom-openat$ppp-poll-bind$inet6-openat$cgroup_root-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
poll(&(0x7f0000000600)=[{r2, 0x48}], 0x1, 0x400)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-connect$netrom-openat$ppp-poll-bind$inet6-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
poll(&(0x7f0000000600)=[{r2, 0x48}], 0x1, 0x400)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-connect$netrom-openat$ppp-poll-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
poll(&(0x7f0000000600)=[{r2, 0x48}], 0x1, 0x400)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-connect$netrom-openat$ppp-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-connect$netrom-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-syz_init_net_socket$netrom-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-setsockopt$inet6_MCAST_JOIN_GROUP-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$inet6-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "c606", 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x40, 0x7, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x200}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_udp-socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
program crashed: WARNING in nla_get_range_unsigned
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
program did not crash
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
program did not crash
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
program did not crash
testing program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, r0)
program did not crash
extracting C reproducer
testing compiled C program (duration=53.211039409s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
program crashed: WARNING in nla_get_range_unsigned
simplifying C reproducer
testing compiled C program (duration=53.211039409s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.211039409s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.211039409s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.211039409s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.211039409s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.211039409s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
program crashed: WARNING in nla_get_range_unsigned
testing compiled C program (duration=53.211039409s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-sendmsg$nl_generic-syz_genetlink_get_family_id$mptcp
program crashed: WARNING in nla_get_range_unsigned
reproducing took 47m16.548743112s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5820 at lib/nlattr.c:123 nla_get_range_unsigned+0xc8/0x4b0 lib/nlattr.c:122
Modules linked in:
CPU: 1 UID: 0 PID: 5820 Comm: syz-executor219 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 lib/nlattr.c:122
Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 4e a8 d3 fc 66 85 ed 0f 88 df 02 00 00 e8 a0 a4 d3 fc eb 09 e8 99 a4 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8
RSP: 0018:ffffc900040df3d0 EFLAGS: 00010293
RAX: ffffffff84ec1e8f RBX: ffffffff8c808eb0 RCX: ffff88802de58000
RDX: 0000000000000000 RSI: 0000000000008a3e RDI: 0000000000000000
RBP: 0000000000008a3e R08: ffff88802de58000 R09: 0000000000000004
R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8c808eba
R13: ffffc900040df5b0 R14: dffffc0000000000 R15: 1ffffffff19011d6
FS: 000055557ac4a380(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055f0490ff608 CR3: 0000000052eb6000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__netlink_policy_dump_write_attr+0x565/0xdc0 net/netlink/policy.c:316
netlink_policy_dump_write+0x1e1/0x6e0 net/netlink/policy.c:447
ctrl_dumppolicy+0x6f4/0xb90 net/netlink/genetlink.c:1743
genl_dumpit+0x108/0x1b0 net/netlink/genetlink.c:1027
netlink_dump+0x64e/0xe70 net/netlink/af_netlink.c:2309
netlink_recvmsg+0x67b/0xe00 net/netlink/af_netlink.c:1965
sock_recvmsg_nosec net/socket.c:1017 [inline]
sock_recvmsg+0x229/0x270 net/socket.c:1039
__sys_recvfrom+0x1f6/0x340 net/socket.c:2230
__do_sys_recvfrom net/socket.c:2245 [inline]
__se_sys_recvfrom net/socket.c:2241 [inline]
__x64_sys_recvfrom+0xde/0x100 net/socket.c:2241
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f48805969b9
Code: ff e8 cb 01 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d d1 56 07 00 00 41 89 ca 74 1c 45 31 c9 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 67 c3 66 0f 1f 44 00 00 55 48 83 ec 20 48 89
RSP: 002b:00007ffd52769878 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
RAX: ffffffffffffffda RBX: 00007ffd52769904 RCX: 00007f48805969b9
RDX: 0000000000001000 RSI: 00007ffd527698f0 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd527698f0
R13: 0000000000000010 R14: 0000200000000048 R15: 0000000000000001
final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5820 at lib/nlattr.c:123 nla_get_range_unsigned+0xc8/0x4b0 lib/nlattr.c:122
Modules linked in:
CPU: 1 UID: 0 PID: 5820 Comm: syz-executor219 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 lib/nlattr.c:122
Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 4e a8 d3 fc 66 85 ed 0f 88 df 02 00 00 e8 a0 a4 d3 fc eb 09 e8 99 a4 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8
RSP: 0018:ffffc900040df3d0 EFLAGS: 00010293
RAX: ffffffff84ec1e8f RBX: ffffffff8c808eb0 RCX: ffff88802de58000
RDX: 0000000000000000 RSI: 0000000000008a3e RDI: 0000000000000000
RBP: 0000000000008a3e R08: ffff88802de58000 R09: 0000000000000004
R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8c808eba
R13: ffffc900040df5b0 R14: dffffc0000000000 R15: 1ffffffff19011d6
FS: 000055557ac4a380(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055f0490ff608 CR3: 0000000052eb6000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__netlink_policy_dump_write_attr+0x565/0xdc0 net/netlink/policy.c:316
netlink_policy_dump_write+0x1e1/0x6e0 net/netlink/policy.c:447
ctrl_dumppolicy+0x6f4/0xb90 net/netlink/genetlink.c:1743
genl_dumpit+0x108/0x1b0 net/netlink/genetlink.c:1027
netlink_dump+0x64e/0xe70 net/netlink/af_netlink.c:2309
netlink_recvmsg+0x67b/0xe00 net/netlink/af_netlink.c:1965
sock_recvmsg_nosec net/socket.c:1017 [inline]
sock_recvmsg+0x229/0x270 net/socket.c:1039
__sys_recvfrom+0x1f6/0x340 net/socket.c:2230
__do_sys_recvfrom net/socket.c:2245 [inline]
__se_sys_recvfrom net/socket.c:2241 [inline]
__x64_sys_recvfrom+0xde/0x100 net/socket.c:2241
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f48805969b9
Code: ff e8 cb 01 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d d1 56 07 00 00 41 89 ca 74 1c 45 31 c9 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 67 c3 66 0f 1f 44 00 00 55 48 83 ec 20 48 89
RSP: 002b:00007ffd52769878 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
RAX: ffffffffffffffda RBX: 00007ffd52769904 RCX: 00007f48805969b9
RDX: 0000000000001000 RSI: 00007ffd527698f0 RDI: 0000000000000003
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd527698f0
R13: 0000000000000010 R14: 0000200000000048 R15: 0000000000000001