Extracting prog: 57m35.628595301s Minimizing prog: 5h27m55.727579049s Simplifying prog options: 0s Extracting C: 3m59.759912653s Simplifying C: 1h24m39.475280127s extracting reproducer from 35 programs testing a last program of every proc single: executing 10 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-syz_init_net_socket$nl_rdma-preadv-setsockopt$packet_tx_ring-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-setsockopt$sock_int-sendmmsg$alg-recvmsg-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-bind$packet-sendmsg$NL80211_CMD_START_AP-socket$nl_netfilter-sendmsg$NFT_BATCH-syz_genetlink_get_family_id$nl80211-socket$inet6_sctp-setsockopt$inet6_group_source_req-openat$rfkill-socket$inet_mptcp-listen-bpf$MAP_CREATE_RINGBUF-socketpair$unix-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-ppoll-pselect6 detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/162, 0xa2}, {&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/71, 0x47}], 0x5, 0x3, 0x3) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x3, 0x80000001, {{0x2a, 0x4, 0x2, 0x4, 0xa8, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x13, 0xa0, [@loopback, @local, @loopback, @multicast1]}, @ssrr={0x89, 0x1b, 0xdc, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @end, @cipso={0x86, 0x32, 0x3, [{0x5, 0x9, "290928ea69cf13"}, {0x7, 0xe, "fb22f9a3e17ae747ea15a54f"}, {0x5, 0x6, "cb514247"}, {0x7, 0xf, "219ddaa3daf0fe4e8c577a1f04"}]}, @timestamp_addr={0x44, 0x24, 0x23, 0x1, 0x1, [{@local, 0x2}, {@multicast1, 0x7}, {@multicast2, 0x1}, {@broadcast, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bind$packet(r4, &(0x7f0000000680)={0x11, 0x1, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x20, r2, 0x105, 0x0, 0x8000, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "bb3f27819cc613dcbf91dc167dfa2dee90"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x2) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-bind$inet-connect$inet-socket$inet6_tcp-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-setsockopt$inet_tcp_TCP_CONGESTION-setsockopt$inet_tcp_TCP_REPAIR-sendto$inet-recvfrom$inet-ioctl$BTRFS_IOC_SEND detailed listing: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x8864}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xf4, 0x0, 0x41, 0x21, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}}}}}}}, 0x26) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r1}, 0x7, &(0x7f0000000040)=[0x1, 0xfffffffffffffff8, 0x723f, 0xe5a, 0x6, 0x1, 0xd], 0x0, 0x1, 0x1}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-syz_init_net_socket$nl_rdma-preadv-setsockopt$packet_tx_ring-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-setsockopt$sock_int-sendmmsg$alg-recvmsg-ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL-bind$packet-sendmsg$NL80211_CMD_START_AP-socket$nl_netfilter-sendmsg$NFT_BATCH-syz_genetlink_get_family_id$nl80211-socket$inet6_sctp-setsockopt$inet6_group_source_req-openat$rfkill-socket$inet_mptcp-listen-bpf$MAP_CREATE_RINGBUF-socketpair$unix-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-ppoll-pselect6 detailed listing: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/162, 0xa2}, {&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/71, 0x47}], 0x5, 0x3, 0x3) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x3, 0x80000001, {{0x2a, 0x4, 0x2, 0x4, 0xa8, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x13, 0xa0, [@loopback, @local, @loopback, @multicast1]}, @ssrr={0x89, 0x1b, 0xdc, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @end, @cipso={0x86, 0x32, 0x3, [{0x5, 0x9, "290928ea69cf13"}, {0x7, 0xe, "fb22f9a3e17ae747ea15a54f"}, {0x5, 0x6, "cb514247"}, {0x7, 0xf, "219ddaa3daf0fe4e8c577a1f04"}]}, @timestamp_addr={0x44, 0x24, 0x23, 0x1, 0x1, [{@local, 0x2}, {@multicast1, 0x7}, {@multicast2, 0x1}, {@broadcast, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bind$packet(r4, &(0x7f0000000680)={0x11, 0x1, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x20, r2, 0x105, 0x0, 0x8000, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "bb3f27819cc613dcbf91dc167dfa2dee90"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x2) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_tcp-bind$inet-connect$inet-socket$inet6_tcp-openat$tun-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-write$tun-setsockopt$inet_tcp_TCP_CONGESTION-setsockopt$inet_tcp_TCP_REPAIR-sendto$inet-recvfrom$inet-ioctl$BTRFS_IOC_SEND detailed listing: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x8864}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xf4, 0x0, 0x41, 0x21, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}}}}}}}, 0x26) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000100)={{r1}, 0x7, &(0x7f0000000040)=[0x1, 0xfffffffffffffff8, 0x723f, 0xe5a, 0x6, 0x1, 0xd], 0x0, 0x1, 0x1}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-openat$tun-ioctl$TUNSETIFF-socket-socket$unix-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socket$unix-socket$kcm-socket-socket$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-ioctl$sock_SIOCGIFINDEX-bpf$MAP_CREATE-close-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc0000000}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) close(0x3) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r13, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r14}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE-bpf$PROG_LOAD-openat$tun-ioctl$TUNSETIFF-socket-socket$unix-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-socket$unix-socket$kcm-socket-socket$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-ioctl$sock_SIOCGIFINDEX-bpf$MAP_CREATE-close-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN detailed listing: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc0000000}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) close(0x3) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r13, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r14}, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-socket-sendmsg$AUDIT_GET_FEATURE-socket$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$kcm-sendmsg$kcm detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x300, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20008020) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x7a, 0x6, 0x8, 0x8, 0x7, 0xdc2, 0x7, 0x0, 0x2, 0xb9, 0xdac, 0x4, 0xb10, 0x589, 0x3, 0x87, 0x1e, 0x200, 0x100, 0x3, 0x8a, 0x7fffffff, 0x9, 0x4, 0x1, 0x6, 0x2, 0x2, 0x4, 0xfa, 0x10001, 0x5, 0x75, 0x9, 0x8, 0x6, 0x2, 0x40000, 0x2, 0x56, 0x7, 0x4, 0xff, 0xff, 0x8000, 0x6, 0xd6ba, 0x3e, 0x4, 0x1, 0x8, 0x7b, 0x80000001, 0xfffffffe, 0xab, 0x8, 0xc, 0x7, 0x3, 0x2, 0xf79, 0x2, 0x7, 0x89, 0xe0, 0x56, 0x2, 0x5, 0x8, 0x2, 0x7fff, 0xfffffff7, 0x34, 0x60a, 0xfffffffa, 0x7, 0xfffffffa, 0x80, 0x2403, 0xfffff801, 0x9, 0x6, 0x2, 0x7, 0x3d, 0x2, 0xffff91f0, 0x4, 0x3, 0x9, 0x7f, 0x1, 0x3, 0x5, 0x4, 0x3, 0x1, 0x0, 0x3, 0xffff1b80, 0x8, 0x101, 0xf, 0x0, 0x0, 0x8, 0x800, 0xfffffffe, 0x9, 0x0, 0x10001, 0xb, 0x2, 0xf721, 0x0, 0x7, 0x4, 0x1, 0x5, 0x2, 0xb, 0xa, 0x1000, 0x6, 0x8, 0x8, 0x74, 0x3, 0x1, 0x76, 0x10001, 0x928, 0xf, 0x1, 0xffff0001, 0x715, 0x3, 0x2, 0x68, 0x6, 0x4, 0x9, 0x9, 0x1, 0x81, 0xa, 0x6, 0xc7f, 0x6f01, 0x0, 0x7, 0x0, 0x4067, 0x272, 0xfffffffb, 0xf, 0x81, 0x7, 0x5, 0x8001, 0x3ff, 0x7, 0x82fb, 0x409b, 0x2, 0x7, 0x7, 0x1, 0xb9, 0x1, 0x84d8, 0x1, 0x48, 0x5, 0x6, 0x5, 0x1, 0x9, 0x3, 0x6, 0x8001, 0xdf43, 0x4, 0x548, 0xf, 0x1, 0x7fffffff, 0x8, 0x8000, 0x2, 0x7, 0x1, 0x2, 0x3, 0xe, 0x6, 0x3, 0x4, 0xb77, 0x8, 0x5a99, 0x80000000, 0x101, 0x101, 0x7, 0xb2cc, 0x800, 0x7c6, 0xa000, 0x8, 0x9, 0x9, 0x10001, 0x8001, 0x100, 0x52d4, 0xcfeb, 0x7, 0x0, 0x7, 0x11, 0x1ff, 0x7, 0x982, 0x0, 0x1, 0x1, 0x2, 0x5, 0x2, 0x40000000, 0x9, 0x7, 0xfffffffa, 0xffff, 0x5, 0x200, 0x1, 0x2, 0x8, 0x6, 0xc, 0x9, 0x1ff, 0x9, 0x7fff, 0x2, 0xa, 0x8080, 0x1, 0x474e, 0x0, 0x5, 0x172151fb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x3, 0x7, 0x6b, {0x4, 0x2, 0x8, 0x40, 0x4, 0x400}, {0x5, 0x1, 0x67b7, 0x0, 0xffff, 0x4}, 0xfffffff9, 0x2, 0xe314}}, @TCA_POLICE_RATE={0x404, 0x2, [0x45a, 0x9, 0x7, 0x80000000, 0x47, 0x3bf, 0x6, 0x2, 0xf9, 0x10, 0x6, 0xffff5bd2, 0x4, 0x7df, 0x5, 0x4, 0xf, 0x7, 0xdce, 0x1, 0x8, 0xec93, 0xfba, 0x7, 0x6, 0x2, 0x5, 0x98e7, 0x9, 0x6, 0x6, 0x7, 0x2, 0x7, 0x54e6, 0xa, 0x3, 0x7, 0x1, 0x5, 0x3, 0x6, 0x0, 0xfffffff7, 0x8ad, 0x0, 0x8, 0x8, 0xfffffe01, 0x1000, 0xfffffff7, 0xc, 0x2, 0x100, 0x2, 0x3000000, 0x4, 0x0, 0x1, 0x8001, 0x5, 0x5, 0x2, 0x3220550a, 0x4, 0x5ffe, 0x5, 0x6, 0x9, 0x167, 0x3, 0x5, 0x6, 0x0, 0x7d, 0x3000000, 0xffffffff, 0x7, 0x8000, 0x26b, 0x5, 0x8, 0x4, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0xb60, 0x4, 0x1, 0x101, 0x0, 0x4, 0xb, 0x7, 0x786, 0x46f1f65b, 0x1c4, 0x19, 0x800, 0x81, 0x9, 0x401, 0x1ff, 0x8, 0x8, 0xffff6d16, 0xf, 0x7f, 0x2, 0x5, 0x1000, 0x7, 0x4, 0x2, 0xff, 0x8, 0x9, 0x7f70, 0x7, 0x4, 0x81, 0x0, 0x32, 0xb3, 0x1, 0x2, 0x2731, 0x9, 0x9, 0x7, 0x9e, 0x300000, 0xffff, 0xa, 0x4, 0x8, 0x84, 0x0, 0x7fff, 0x5, 0x800, 0x6, 0x3, 0x7, 0x5, 0x905d, 0x10a0, 0xfff, 0x7, 0x8, 0xffffffff, 0xfffffffb, 0x6, 0x6, 0x7f, 0x0, 0xab, 0x9, 0x9, 0x5, 0x7ff, 0x6, 0x6, 0x10, 0x5, 0x8, 0x6, 0x3bd, 0x2, 0x401, 0x1ff, 0x5, 0x373b, 0x800, 0xdee6, 0xe5f7, 0x7, 0x7ff, 0x60000, 0xe, 0x2, 0x4, 0x0, 0x2600, 0x80000001, 0x7, 0x3, 0x2, 0x4, 0xf, 0x6, 0x3, 0x80, 0x100, 0x6, 0x401, 0x1000, 0x6, 0x5, 0xa, 0x5, 0x3, 0x7f, 0x8, 0x0, 0x1, 0x0, 0xfffffffd, 0x8, 0xffffffd6, 0x5, 0x7ff, 0xffffff80, 0x3, 0xc, 0x9, 0x4, 0x3940e8a8, 0x7, 0xe189, 0x7b1ee370, 0x4, 0x0, 0x56, 0x4, 0x5, 0xfffeffff, 0x8, 0x2, 0x6, 0xf0, 0xffffda3a, 0x2, 0x7, 0xc53, 0x1000, 0x5, 0x396, 0x3, 0x1, 0x2, 0x3, 0x7, 0x0, 0x0, 0xc627, 0x0, 0x0, 0x5, 0x8, 0xfff, 0x0, 0x1000]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x20004044) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-socket-sendmsg$AUDIT_GET_FEATURE-socket$unix-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$kcm-sendmsg$kcm detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x300, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20008020) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x7a, 0x6, 0x8, 0x8, 0x7, 0xdc2, 0x7, 0x0, 0x2, 0xb9, 0xdac, 0x4, 0xb10, 0x589, 0x3, 0x87, 0x1e, 0x200, 0x100, 0x3, 0x8a, 0x7fffffff, 0x9, 0x4, 0x1, 0x6, 0x2, 0x2, 0x4, 0xfa, 0x10001, 0x5, 0x75, 0x9, 0x8, 0x6, 0x2, 0x40000, 0x2, 0x56, 0x7, 0x4, 0xff, 0xff, 0x8000, 0x6, 0xd6ba, 0x3e, 0x4, 0x1, 0x8, 0x7b, 0x80000001, 0xfffffffe, 0xab, 0x8, 0xc, 0x7, 0x3, 0x2, 0xf79, 0x2, 0x7, 0x89, 0xe0, 0x56, 0x2, 0x5, 0x8, 0x2, 0x7fff, 0xfffffff7, 0x34, 0x60a, 0xfffffffa, 0x7, 0xfffffffa, 0x80, 0x2403, 0xfffff801, 0x9, 0x6, 0x2, 0x7, 0x3d, 0x2, 0xffff91f0, 0x4, 0x3, 0x9, 0x7f, 0x1, 0x3, 0x5, 0x4, 0x3, 0x1, 0x0, 0x3, 0xffff1b80, 0x8, 0x101, 0xf, 0x0, 0x0, 0x8, 0x800, 0xfffffffe, 0x9, 0x0, 0x10001, 0xb, 0x2, 0xf721, 0x0, 0x7, 0x4, 0x1, 0x5, 0x2, 0xb, 0xa, 0x1000, 0x6, 0x8, 0x8, 0x74, 0x3, 0x1, 0x76, 0x10001, 0x928, 0xf, 0x1, 0xffff0001, 0x715, 0x3, 0x2, 0x68, 0x6, 0x4, 0x9, 0x9, 0x1, 0x81, 0xa, 0x6, 0xc7f, 0x6f01, 0x0, 0x7, 0x0, 0x4067, 0x272, 0xfffffffb, 0xf, 0x81, 0x7, 0x5, 0x8001, 0x3ff, 0x7, 0x82fb, 0x409b, 0x2, 0x7, 0x7, 0x1, 0xb9, 0x1, 0x84d8, 0x1, 0x48, 0x5, 0x6, 0x5, 0x1, 0x9, 0x3, 0x6, 0x8001, 0xdf43, 0x4, 0x548, 0xf, 0x1, 0x7fffffff, 0x8, 0x8000, 0x2, 0x7, 0x1, 0x2, 0x3, 0xe, 0x6, 0x3, 0x4, 0xb77, 0x8, 0x5a99, 0x80000000, 0x101, 0x101, 0x7, 0xb2cc, 0x800, 0x7c6, 0xa000, 0x8, 0x9, 0x9, 0x10001, 0x8001, 0x100, 0x52d4, 0xcfeb, 0x7, 0x0, 0x7, 0x11, 0x1ff, 0x7, 0x982, 0x0, 0x1, 0x1, 0x2, 0x5, 0x2, 0x40000000, 0x9, 0x7, 0xfffffffa, 0xffff, 0x5, 0x200, 0x1, 0x2, 0x8, 0x6, 0xc, 0x9, 0x1ff, 0x9, 0x7fff, 0x2, 0xa, 0x8080, 0x1, 0x474e, 0x0, 0x5, 0x172151fb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x3, 0x7, 0x6b, {0x4, 0x2, 0x8, 0x40, 0x4, 0x400}, {0x5, 0x1, 0x67b7, 0x0, 0xffff, 0x4}, 0xfffffff9, 0x2, 0xe314}}, @TCA_POLICE_RATE={0x404, 0x2, [0x45a, 0x9, 0x7, 0x80000000, 0x47, 0x3bf, 0x6, 0x2, 0xf9, 0x10, 0x6, 0xffff5bd2, 0x4, 0x7df, 0x5, 0x4, 0xf, 0x7, 0xdce, 0x1, 0x8, 0xec93, 0xfba, 0x7, 0x6, 0x2, 0x5, 0x98e7, 0x9, 0x6, 0x6, 0x7, 0x2, 0x7, 0x54e6, 0xa, 0x3, 0x7, 0x1, 0x5, 0x3, 0x6, 0x0, 0xfffffff7, 0x8ad, 0x0, 0x8, 0x8, 0xfffffe01, 0x1000, 0xfffffff7, 0xc, 0x2, 0x100, 0x2, 0x3000000, 0x4, 0x0, 0x1, 0x8001, 0x5, 0x5, 0x2, 0x3220550a, 0x4, 0x5ffe, 0x5, 0x6, 0x9, 0x167, 0x3, 0x5, 0x6, 0x0, 0x7d, 0x3000000, 0xffffffff, 0x7, 0x8000, 0x26b, 0x5, 0x8, 0x4, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0xb60, 0x4, 0x1, 0x101, 0x0, 0x4, 0xb, 0x7, 0x786, 0x46f1f65b, 0x1c4, 0x19, 0x800, 0x81, 0x9, 0x401, 0x1ff, 0x8, 0x8, 0xffff6d16, 0xf, 0x7f, 0x2, 0x5, 0x1000, 0x7, 0x4, 0x2, 0xff, 0x8, 0x9, 0x7f70, 0x7, 0x4, 0x81, 0x0, 0x32, 0xb3, 0x1, 0x2, 0x2731, 0x9, 0x9, 0x7, 0x9e, 0x300000, 0xffff, 0xa, 0x4, 0x8, 0x84, 0x0, 0x7fff, 0x5, 0x800, 0x6, 0x3, 0x7, 0x5, 0x905d, 0x10a0, 0xfff, 0x7, 0x8, 0xffffffff, 0xfffffffb, 0x6, 0x6, 0x7f, 0x0, 0xab, 0x9, 0x9, 0x5, 0x7ff, 0x6, 0x6, 0x10, 0x5, 0x8, 0x6, 0x3bd, 0x2, 0x401, 0x1ff, 0x5, 0x373b, 0x800, 0xdee6, 0xe5f7, 0x7, 0x7ff, 0x60000, 0xe, 0x2, 0x4, 0x0, 0x2600, 0x80000001, 0x7, 0x3, 0x2, 0x4, 0xf, 0x6, 0x3, 0x80, 0x100, 0x6, 0x401, 0x1000, 0x6, 0x5, 0xa, 0x5, 0x3, 0x7f, 0x8, 0x0, 0x1, 0x0, 0xfffffffd, 0x8, 0xffffffd6, 0x5, 0x7ff, 0xffffff80, 0x3, 0xc, 0x9, 0x4, 0x3940e8a8, 0x7, 0xe189, 0x7b1ee370, 0x4, 0x0, 0x56, 0x4, 0x5, 0xfffeffff, 0x8, 0x2, 0x6, 0xf0, 0xffffda3a, 0x2, 0x7, 0xc53, 0x1000, 0x5, 0x396, 0x3, 0x1, 0x2, 0x3, 0x7, 0x0, 0x0, 0xc627, 0x0, 0x0, 0x5, 0x8, 0xfff, 0x0, 0x1000]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x20004044) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-openat$cgroup_ro-mmap-ioctl$SIOCAX25NOUID-listen-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r10, 0x1000) ioctl$SIOCAX25NOUID(r10, 0x89e3, &(0x7f0000000440)=0x1) listen(r9, 0x0) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: rcu detected stall in exit_to_user_mode_loop single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-openat$cgroup_ro-mmap-ioctl$SIOCAX25NOUID-listen-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r10, 0x1000) ioctl$SIOCAX25NOUID(r10, 0x89e3, &(0x7f0000000440)=0x1) listen(r9, 0x0) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-openat$cgroup_ro-mmap-ioctl$SIOCAX25NOUID-listen-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r10, 0x1000) ioctl$SIOCAX25NOUID(r10, 0x89e3, &(0x7f0000000440)=0x1) listen(r9, 0x0) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-openat$cgroup_ro-mmap-ioctl$SIOCAX25NOUID-listen-socket$inet_mptcp-connect$inet-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r10, 0x1000) ioctl$SIOCAX25NOUID(r10, 0x89e3, &(0x7f0000000440)=0x1) listen(r9, 0x0) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-openat$cgroup_ro-mmap-ioctl$SIOCAX25NOUID-listen-socket$inet_mptcp-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r10, 0x1000) ioctl$SIOCAX25NOUID(r10, 0x89e3, &(0x7f0000000440)=0x1) listen(r9, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-openat$cgroup_ro-mmap-ioctl$SIOCAX25NOUID-listen-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r10, 0x1000) ioctl$SIOCAX25NOUID(r10, 0x89e3, &(0x7f0000000440)=0x1) listen(r9, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-openat$cgroup_ro-mmap-ioctl$SIOCAX25NOUID-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r9, 0x1000) ioctl$SIOCAX25NOUID(r9, 0x89e3, &(0x7f0000000440)=0x1) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: rcu detected stall in watchdog testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-openat$cgroup_ro-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r9, 0x1000) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-openat$cgroup_ro-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-bind$inet6-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-close-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$inet6_tcp-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: rcu detected stall in sys_unshare testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$NL802154_CMD_NEW_INTERFACE-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: rcu detected stall in tx testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_init_net_socket$nl_generic-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_genetlink_get_family_id$mptcp-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, r5, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-socket$nl_generic-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-bpf$PROG_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_CREATE_RINGBUF-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: rcu detected stall in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-bind$netlink-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-syz_emit_ethernet-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-socket$packet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (rerun: 64) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-socket$netlink-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(r1, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (rerun: 64) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) (async, rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) syz_emit_ethernet(0x196, &(0x7f0000000980)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "1b5e97", 0x158, 0x21, 0x0, @mcast1, @private1, {[@routing={0x11, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x87, 0x0, 0x3, 0x1, 0x0, 0x19, 0x66}, @routing={0x3c, 0x6, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @srh={0x33, 0x2, 0x4, 0x1, 0x8, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x5e, 0x0, 0xff, 0x0, 0x0, 0x2, 0x64}], {{0x4e22, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x2, 0x7, "1c55d6", 0x1, "84ea9e"}, "e3e2c0d4a90c9f7689c2cd1c7c64e9db88b77c531a68fed3254ae4ffa6df518390d756c2d1671a92271d87b5333e980fde0dd2fc7b768147b240dfad40e83f06721a35936a3bfdac25a66b0b28dbd87784a999780989e33a905127568ee538edd5b27c10bdd263f75df61e7752b380861271e868d9547c5ec3cfc30ede978f1c05512ca6715eff3e63d6343dc112bcb98e155e7457bd22ea6fb1901ed045dcd4cc6935dd0a5ba469aac85b68c398747e2277f6c3eafbf6698c31b255d86295ec"}}}}}}, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in new_device_store testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70ad26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in del_device_store testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted extracting C reproducer testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: INFO: task hung in corrupted simplifying C reproducer testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: INFO: task hung in corrupted testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: INFO: task hung in corrupted testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: INFO: task hung in corrupted testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: INFO: task hung in corrupted testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: INFO: task hung in corrupted testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program did not crash validation run: crashed=false testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted validation run: crashed=true testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x0) close(0xffffffffffffffff) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) program crashed: INFO: task hung in corrupted validation run: crashed=true reproducing took 8h29m9.301081913s repro crashed as (corrupted=true): INFO: task syz-executor:5956 blocked for more than 154 seconds. report is corrupted, running repro again testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: INFO: task hung in corrupted report is corrupted, running repro again testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: INFO: task hung in corrupted report is corrupted, running repro again testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-unshare-syz_emit_ethernet-bind$netlink-socket$nl_xfrm-bpf$MAP_UPDATE_CONST_STR-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nl802154-sendmsg$MPTCP_PM_CMD_ADD_ADDR-close-socket$inet6_mptcp-mmap-socket$inet_mptcp-connect$inet-syz_genetlink_get_family_id$mptcp-sendmsg$MPTCP_PM_CMD_ADD_ADDR-socket$nl_generic program crashed: INFO: task hung in corrupted final repro crashed as (corrupted=true): INFO: task syz-executor425:5856 blocked for more than 146 seconds. Not tainted syzkaller #0