Extracting prog: 33.581618834s
Minimizing prog: 21m46.422529715s
Simplifying prog options: 0s
Extracting C: 21.142462545s
Simplifying C: 3m56.346624479s


extracting reproducer from 45 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp-socket$netlink-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-close-socket$nl_route-write$binfmt_misc-splice-connect$inet-sendmsg$MPTCP_PM_CMD_DEL_ADDR
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}) (async)
r10 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r11 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r12=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r12, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r12, @ANYBLOB="08000300", @ANYRES32=r13], 0x44}}, 0x0) (async)
close(r10) (async)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) (async)
splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300c11414aa"], 0x28}}, 0x0)

program crashed: kernel BUG in __open_session
single: successfully extracted reproducer
found reproducer with 29 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp-socket$netlink-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-close-socket$nl_route-write$binfmt_misc-splice-connect$inet
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="74000000150a010800000000000000000b00000508000340000000033f0008005e599c61ae8914c429455f6fc30f212378fa486f345ee9bf75d7f74d6c7d1d041e149ff31e933bee5b30f530e6dc3739b94465e5673015fc2207dd000900010073797a31000000000900010073797a31000000005e0a85c0ffdaaf765579434a3815ddad065c729127a1e5f5948274e47a3de96a2a65f1ea80fbd657ddcd5908abf8b509029fa57428f55cdb6af40b96e9a12c3755a2de7b4f31b1aa5fac87b304a0529c4a73b6ffec17855317c9385bc5d0a56b41574486bbfc4919684e540e60e517a96e45938fc5d5c00ae28d30cea8f16fc93c069c25d198995b553b1395069752f39774ee5dacca18391dcad8a6a296cf389182c822a0c7456e408c09e1dea303ca937240759c36f42d3c5f5a01a95fb4b1fafac83a1747832d63068f32fc78a1fa07d59ab8919bfa7fef2e2d343a77e60ad7c82be97a1fc6"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r10=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11], 0x44}}, 0x0) (async)
close(r8) (async)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) (async)
splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)

program crashed: kernel BUG in __open_session
program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp-socket$netlink-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-close-socket$nl_route-write$binfmt_misc-splice
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="74000000150a010800000000000000000b00000508000340000000033f0008005e599c61ae8914c429455f6fc30f212378fa486f345ee9bf75d7f74d6c7d1d041e149ff31e933bee5b30f530e6dc3739b94465e5673015fc2207dd000900010073797a31000000000900010073797a31000000005e0a85c0ffdaaf765579434a3815ddad065c729127a1e5f5948274e47a3de96a2a65f1ea80fbd657ddcd5908abf8b509029fa57428f55cdb6af40b96e9a12c3755a2de7b4f31b1aa5fac87b304a0529c4a73b6ffec17855317c9385bc5d0a56b41574486bbfc4919684e540e60e517a96e45938fc5d5c00ae28d30cea8f16fc93c069c25d198995b553b1395069752f39774ee5dacca18391dcad8a6a296cf389182c822a0c7456e408c09e1dea303ca937240759c36f42d3c5f5a01a95fb4b1fafac83a1747832d63068f32fc78a1fa07d59ab8919bfa7fef2e2d343a77e60ad7c82be97a1fc6"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r9=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10], 0x44}}, 0x0) (async)
close(r7) (async)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) (async)
splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp-socket$netlink-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-close-socket$nl_route-write$binfmt_misc
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="74000000150a010800000000000000000b00000508000340000000033f0008005e599c61ae8914c429455f6fc30f212378fa486f345ee9bf75d7f74d6c7d1d041e149ff31e933bee5b30f530e6dc3739b94465e5673015fc2207dd000900010073797a31000000000900010073797a31000000005e0a85c0ffdaaf765579434a3815ddad065c729127a1e5f5948274e47a3de96a2a65f1ea80fbd657ddcd5908abf8b509029fa57428f55cdb6af40b96e9a12c3755a2de7b4f31b1aa5fac87b304a0529c4a73b6ffec17855317c9385bc5d0a56b41574486bbfc4919684e540e60e517a96e45938fc5d5c00ae28d30cea8f16fc93c069c25d198995b553b1395069752f39774ee5dacca18391dcad8a6a296cf389182c822a0c7456e408c09e1dea303ca937240759c36f42d3c5f5a01a95fb4b1fafac83a1747832d63068f32fc78a1fa07d59ab8919bfa7fef2e2d343a77e60ad7c82be97a1fc6"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r8=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r9], 0x44}}, 0x0) (async)
close(r6) (async)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp-socket$netlink-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-close-socket$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8], 0x44}}, 0x0) (async)
close(r5) (async)
socket$nl_route(0x10, 0x3, 0x0)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp-socket$netlink-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-close
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8], 0x44}}, 0x0) (async)
close(r5) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp-socket$netlink-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r7], 0x44}}, 0x0) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp-socket$netlink-ioctl$sock_SIOCGIFINDEX-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00'})

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp-socket$netlink-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp-socket$netlink
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="74000000150a010800000000000000000b00000508000340000000033f0008005e599c61ae8914c429455f6fc30f212378fa486f345ee9bf75d7f74d6c7d1d041e149ff31e933bee5b30f530e6dc3739b94465e5673015fc2207dd000900010073797a31000000000900010073797a31000000005e0a85c0ffdaaf765579434a3815ddad065c729127a1e5f5948274e47a3de96a2a65f1ea80fbd657ddcd5908abf8b509029fa57428f55cdb6af40b96e9a12c3755a2de7b4f31b1aa5fac87b304a0529c4a73b6ffec17855317c9385bc5d0a56b41574486bbfc4919684e540e60e517a96e45938fc5d5c00ae28d30cea8f16fc93c069c25d198995b553b1395069752f39774ee5dacca18391dcad8a6a296cf389182c822a0c7456e408c09e1dea303ca937240759c36f42d3c5f5a01a95fb4b1fafac83a1747832d63068f32fc78a1fa07d59ab8919bfa7fef2e2d343a77e60ad7c82be97a1fc6"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe-socket$inet_udp
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp-pipe
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000300)) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp-socket$inet_mptcp
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic-syz_genetlink_get_family_id$mptcp
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen-socket$nl_generic
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="74000000150a010800000000000000000b00000508000340000000033f0008005e599c61ae8914c429455f6fc30f212378fa486f345ee9bf75d7f74d6c7d1d041e149ff31e933bee5b30f530e6dc3739b94465e5673015fc2207dd000900010073797a31000000000900010073797a31000000005e0a85c0ffdaaf765579434a3815ddad065c729127a1e5f5948274e47a3de96a2a65f1ea80fbd657ddcd5908abf8b509029fa57428f55cdb6af40b96e9a12c3755a2de7b4f31b1aa5fac87b304a0529c4a73b6ffec17855317c9385bc5d0a56b41574486bbfc4919684e540e60e517a96e45938fc5d5c00ae28d30cea8f16fc93c069c25d198995b553b1395069752f39774ee5dacca18391dcad8a6a296cf389182c822a0c7456e408c09e1dea303ca937240759c36f42d3c5f5a01a95fb4b1fafac83a1747832d63068f32fc78a1fa07d59ab8919bfa7fef2e2d343a77e60ad7c82be97a1fc6"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6-listen
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)
listen(r4, 0xfffffffc)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp-bind$inet6
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink-socket$inet6_mptcp
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW-bind$netlink
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter-sendmsg$IPCTNL_MSG_EXP_NEW
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
socket$netlink(0x10, 0x3, 0x10) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc001}, 0x50) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink-socket$nl_netfilter
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
socket$netlink(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET-socket$netlink
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)
socket$netlink(0x10, 0x3, 0x10) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE-sendmsg$NFT_MSG_GETOBJ_RESET
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
program crashed: kernel BUG in __open_session
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
program crashed: kernel BUG in __open_session
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
program crashed: kernel BUG in __open_session
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
program crashed: kernel BUG in __open_session
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
program crashed: kernel BUG in __open_session
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
program crashed: kernel BUG in __open_session
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
program crashed: kernel BUG in __open_session
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
program crashed: kernel BUG in __open_session
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

program crashed: kernel BUG in __open_session
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

program crashed: kernel BUG in __open_session
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_SET_STRING-fsconfig$FSCONFIG_CMD_CREATE
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.\x03:6789\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

program crashed: kernel BUG in __open_session
validation run: crashed=true
reproducing took 28m17.977042171s
repro crashed as (corrupted=false):
libceph: resolve '127.0.0.' (ret=-3): failed
------------[ cut here ]------------
kernel BUG at net/ceph/mon_client.c:211!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 2 UID: 0 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:pick_new_mon net/ceph/mon_client.c:211 [inline]
RIP: 0010:__open_session+0x60f/0x740 net/ceph/mon_client.c:245
Code: f6 44 89 e7 e8 72 1e 27 fa 89 c5 e9 2b fb ff ff e8 96 4b 7e f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 82 4b 7e f6 90 <0f> 0b e8 9a 86 f1 f6 e9 7b fa ff ff 4c 89 f7 e8 8d 86 f1 f6 e9 16
RSP: 0018:ffffc900039a7be0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888037864290 RCX: 0000000000000000
RDX: ffff888033b68000 RSI: ffffffff8b8dca8e RDI: ffff888033b68000
RBP: ffff88802a3b4d80 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 00000000ffffffff R14: ffff888037864400 R15: ffff888037864298
FS:  00005555720c7500(0000) GS:ffff8880d5d5a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e267f24d48 CR3: 0000000036162000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 ceph_monc_open_session+0x46/0x60 net/ceph/mon_client.c:534
 __ceph_open_session+0x135/0x590 net/ceph/ceph_common.c:798
 ceph_real_mount fs/ceph/super.c:1173 [inline]
 ceph_get_tree+0xd98/0x1fd0 fs/ceph/super.c:1362
 vfs_get_tree+0x92/0x320 fs/super.c:1947
 vfs_cmd_create+0xd7/0x2a0 fs/fsopen.c:231
 vfs_fsconfig_locked fs/fsopen.c:295 [inline]
 __do_sys_fsconfig+0x55a/0xcb0 fs/fsopen.c:463
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7feb99b9e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff76419958 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
RAX: ffffffffffffffda RBX: 00007feb99e25fa0 RCX: 00007feb99b9e159
RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
RBP: 00007feb99c3503b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007feb99e25fac R14: 00007feb99e25fa0 R15: 00007feb99e25fa0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:pick_new_mon net/ceph/mon_client.c:211 [inline]
RIP: 0010:__open_session+0x60f/0x740 net/ceph/mon_client.c:245
Code: f6 44 89 e7 e8 72 1e 27 fa 89 c5 e9 2b fb ff ff e8 96 4b 7e f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 82 4b 7e f6 90 <0f> 0b e8 9a 86 f1 f6 e9 7b fa ff ff 4c 89 f7 e8 8d 86 f1 f6 e9 16
RSP: 0018:ffffc900039a7be0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888037864290 RCX: 0000000000000000
RDX: ffff888033b68000 RSI: ffffffff8b8dca8e RDI: ffff888033b68000
RBP: ffff88802a3b4d80 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 00000000ffffffff R14: ffff888037864400 R15: ffff888037864298
FS:  00005555720c7500(0000) GS:ffff8880d5d5a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e267f24d48 CR3: 0000000036162000 CR4: 0000000000352ef0

final repro crashed as (corrupted=false):
libceph: resolve '127.0.0.' (ret=-3): failed
------------[ cut here ]------------
kernel BUG at net/ceph/mon_client.c:211!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 2 UID: 0 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:pick_new_mon net/ceph/mon_client.c:211 [inline]
RIP: 0010:__open_session+0x60f/0x740 net/ceph/mon_client.c:245
Code: f6 44 89 e7 e8 72 1e 27 fa 89 c5 e9 2b fb ff ff e8 96 4b 7e f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 82 4b 7e f6 90 <0f> 0b e8 9a 86 f1 f6 e9 7b fa ff ff 4c 89 f7 e8 8d 86 f1 f6 e9 16
RSP: 0018:ffffc900039a7be0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888037864290 RCX: 0000000000000000
RDX: ffff888033b68000 RSI: ffffffff8b8dca8e RDI: ffff888033b68000
RBP: ffff88802a3b4d80 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 00000000ffffffff R14: ffff888037864400 R15: ffff888037864298
FS:  00005555720c7500(0000) GS:ffff8880d5d5a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e267f24d48 CR3: 0000000036162000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 ceph_monc_open_session+0x46/0x60 net/ceph/mon_client.c:534
 __ceph_open_session+0x135/0x590 net/ceph/ceph_common.c:798
 ceph_real_mount fs/ceph/super.c:1173 [inline]
 ceph_get_tree+0xd98/0x1fd0 fs/ceph/super.c:1362
 vfs_get_tree+0x92/0x320 fs/super.c:1947
 vfs_cmd_create+0xd7/0x2a0 fs/fsopen.c:231
 vfs_fsconfig_locked fs/fsopen.c:295 [inline]
 __do_sys_fsconfig+0x55a/0xcb0 fs/fsopen.c:463
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7feb99b9e159
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff76419958 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
RAX: ffffffffffffffda RBX: 00007feb99e25fa0 RCX: 00007feb99b9e159
RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
RBP: 00007feb99c3503b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007feb99e25fac R14: 00007feb99e25fa0 R15: 00007feb99e25fa0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:pick_new_mon net/ceph/mon_client.c:211 [inline]
RIP: 0010:__open_session+0x60f/0x740 net/ceph/mon_client.c:245
Code: f6 44 89 e7 e8 72 1e 27 fa 89 c5 e9 2b fb ff ff e8 96 4b 7e f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 82 4b 7e f6 90 <0f> 0b e8 9a 86 f1 f6 e9 7b fa ff ff 4c 89 f7 e8 8d 86 f1 f6 e9 16
RSP: 0018:ffffc900039a7be0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888037864290 RCX: 0000000000000000
RDX: ffff888033b68000 RSI: ffffffff8b8dca8e RDI: ffff888033b68000
RBP: ffff88802a3b4d80 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: 00000000ffffffff R14: ffff888037864400 R15: ffff888037864298
FS:  00005555720c7500(0000) GS:ffff8880d5d5a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e267f24d48 CR3: 0000000036162000 CR4: 0000000000352ef0