Extracting prog: 31.3512598s
Minimizing prog: 18m5.311348091s
Simplifying prog options: 0s
Extracting C: 2m3.907227847s
Simplifying C: 10m6.373772061s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program crashed: Internal error in __receive_fd
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)

program did not crash
testing program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4}, 0x24040884)
recvmsg(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program did not crash
testing program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program did not crash
testing program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program did not crash
testing program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program did not crash
testing program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, 0x0, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program did not crash
testing program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program did not crash
testing program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program did not crash
testing program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(r0, 0x0, 0x302)

program did not crash
testing program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(r0, &(0x7f0000003000)={0x0, 0x0, 0x0}, 0x302)

program did not crash
extracting C reproducer
testing compiled C program (duration=40.004263704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
program crashed: Internal error in __receive_fd
simplifying C reproducer
testing compiled C program (duration=40.004263704s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
program crashed: Internal error in __receive_fd
testing compiled C program (duration=40.004263704s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
program crashed: Internal error in __receive_fd
testing compiled C program (duration=40.004263704s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
program crashed: Internal error in __receive_fd
testing compiled C program (duration=40.004263704s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
program crashed: Internal error in __receive_fd
testing compiled C program (duration=40.004263704s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
program crashed: Internal error in __receive_fd
testing compiled C program (duration=40.004263704s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
program crashed: Internal error in __receive_fd
testing compiled C program (duration=40.004263704s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
program crashed: Internal error in __receive_fd
testing program (duration=40.004263704s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program crashed: Internal error in __receive_fd
validation run: crashed=true
testing program (duration=40.004263704s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program crashed: Internal error in __receive_fd
validation run: crashed=true
testing program (duration=40.004263704s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socketpair$unix-sendmsg$unix-mmap-recvmsg
detailed listing:
executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4}, 0x24040884)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
recvmsg(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=""/105, 0x69}, 0x302)

program crashed: Internal error in __receive_fd
validation run: crashed=true
reproducing took 35m21.797911338s
repro crashed as (corrupted=false):
Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4182 Comm: syz.0.17 Not tainted 5.15.189-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
pc : __receive_fd+0x18c/0x28c fs/file.c:1196
lr : __receive_fd+0x168/0x28c fs/file.c:1195
sp : ffff80001fd57500
x29: ffff80001fd57500 x28: dfff800000000000 x27: 0000000000000000
x26: 0000000000000000 x25: 00000020002f9000 x24: dfff800000000000
x23: 00000000fffffff2 x22: 0000000020002f90 x21: ffff0000d69bb680
x20: 0000000000000005 x19: ffff0000ceaec000 x18: 0000000000000000
x17: ffff800016d04000 x16: ffff800008952294 x15: ffff8000167e4500
x14: ffff0000d69bc080 x13: 1ffff0000282e06b x12: 0000000000ff0100
x11: 0000000000000000 x10: 0000000020002f90 x9 : 0000ffffffffffff
x8 : 0000000020002f90 x7 : ffff800008750ed4 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
Call trace:
 __receive_fd+0x18c/0x28c fs/file.c:1195
 receive_fd_user include/linux/file.h:105 [inline]
 scm_detach_fds+0x188/0x7f8 net/core/scm.c:324
 scm_recv+0x348/0x460 include/net/scm.h:151
 __unix_dgram_recvmsg+0x7d8/0xb28 net/unix/af_unix.c:2392
 unix_dgram_recvmsg+0xd4/0xec net/unix/af_unix.c:2413
 ____sys_recvmsg+0x254/0x794 net/socket.c:-1
 ___sys_recvmsg+0x1ac/0x220 net/socket.c:2697
 __sys_recvmsg net/socket.c:2727 [inline]
 __do_sys_recvmsg net/socket.c:2737 [inline]
 __se_sys_recvmsg net/socket.c:2734 [inline]
 __arm64_sys_recvmsg+0x1a4/0x250 net/socket.c:2734
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: d503229f 2a1f03f7 2a1f03e0 b8000954 (2a1703e1) 
---[ end trace f34a1244306b5af9 ]---
----------------
Code disassembly (best guess):
   0:	d503229f 	csdb
   4:	2a1f03f7 	mov	w23, wzr
   8:	2a1f03e0 	mov	w0, wzr
   c:	b8000954 	sttr	w20, [x10]
* 10:	2a1703e1 	mov	w1, w23 <-- trapping instruction

final repro crashed as (corrupted=false):
Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4182 Comm: syz.0.17 Not tainted 5.15.189-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
pc : __receive_fd+0x18c/0x28c fs/file.c:1196
lr : __receive_fd+0x168/0x28c fs/file.c:1195
sp : ffff80001fd57500
x29: ffff80001fd57500 x28: dfff800000000000 x27: 0000000000000000
x26: 0000000000000000 x25: 00000020002f9000 x24: dfff800000000000
x23: 00000000fffffff2 x22: 0000000020002f90 x21: ffff0000d69bb680
x20: 0000000000000005 x19: ffff0000ceaec000 x18: 0000000000000000
x17: ffff800016d04000 x16: ffff800008952294 x15: ffff8000167e4500
x14: ffff0000d69bc080 x13: 1ffff0000282e06b x12: 0000000000ff0100
x11: 0000000000000000 x10: 0000000020002f90 x9 : 0000ffffffffffff
x8 : 0000000020002f90 x7 : ffff800008750ed4 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
Call trace:
 __receive_fd+0x18c/0x28c fs/file.c:1195
 receive_fd_user include/linux/file.h:105 [inline]
 scm_detach_fds+0x188/0x7f8 net/core/scm.c:324
 scm_recv+0x348/0x460 include/net/scm.h:151
 __unix_dgram_recvmsg+0x7d8/0xb28 net/unix/af_unix.c:2392
 unix_dgram_recvmsg+0xd4/0xec net/unix/af_unix.c:2413
 ____sys_recvmsg+0x254/0x794 net/socket.c:-1
 ___sys_recvmsg+0x1ac/0x220 net/socket.c:2697
 __sys_recvmsg net/socket.c:2727 [inline]
 __do_sys_recvmsg net/socket.c:2737 [inline]
 __se_sys_recvmsg net/socket.c:2734 [inline]
 __arm64_sys_recvmsg+0x1a4/0x250 net/socket.c:2734
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: d503229f 2a1f03f7 2a1f03e0 b8000954 (2a1703e1) 
---[ end trace f34a1244306b5af9 ]---
----------------
Code disassembly (best guess):
   0:	d503229f 	csdb
   4:	2a1f03f7 	mov	w23, wzr
   8:	2a1f03e0 	mov	w0, wzr
   c:	b8000954 	sttr	w20, [x10]
* 10:	2a1703e1 	mov	w1, w23 <-- trapping instruction