Extracting prog: 11m55.666100884s Minimizing prog: 54m4.591205676s Simplifying prog options: 0s Extracting C: 55.992740861s Simplifying C: 17m0.887524039s extracting reproducer from 24 programs testing a last program of every proc single: executing 4 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nfc-ioctl$IOCTL_GET_NCIDEV_IDX-bpf$PROG_LOAD-sendmsg$NFC_CMD_DEV_UP-write$nci detailed listing: executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x3, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-openat$cuse detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-getsockopt$sock_cred-sendmmsg$unix-socket$inet_sctp-ioctl$sock_SIOCETHTOOL-sendmmsg$unix-bind$x25-ioctl$F2FS_IOC_MOVE_RANGE-connect$x25-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r4, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0xffffff07, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x30, 0x8041}}], 0x2, 0x80) bind$x25(r0, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-sendmsg$can_bcm-socket$inet6-bind$inet6-recvmmsg-socketpair$unix-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM_TAIL_CALL-socket$inet6-sendmmsg-connect$inet6-getpeername$unix-sendmsg$inet-socket$inet6-sendto$inet6-sendto$inet6-socket$packet-socket$nl_route-socket-syz_genetlink_get_family_id$l2tp-getsockname$packet-sendmsg$nl_route-sendmsg$nl_route_sched-sendto$packet-socketpair$unix detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x200) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{0x0}, {&(0x7f0000004480)="5e72d8", 0x3}], 0x2}}], 0x1, 0x4000) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e) sendmsg$inet(r2, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x4c010) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}]}}}]}, 0x58}}, 0x0) sendto$packet(r7, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r10, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 10, 14, 25, 23, 25, 10, 23, 14, 4, 13, 10, 7, 11, 9, 14, 23, 20, 4, 14, 13, 6, 7, 7] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xc, 0xb}, {0x7, 0x8}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb1e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 0: socket(0x1e, 0x1, 0x200) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{0x0}, {&(0x7f0000004480)="5e72d8", 0x3}], 0x2}}], 0x1, 0x4000) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x0, 0x4001c00) sendmsg$inet(r1, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x4c010) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}]}}}]}, 0x58}}, 0x0) sendto$packet(r6, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r5, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0xffffff07, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x30, 0x8041}}], 0x2, 0x80) bind$x25(r0, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) executing program 0: r0 = socket(0x1e, 0x1, 0x200) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{0x0}, {&(0x7f0000004480)="5e72d8", 0x3}], 0x2}}], 0x1, 0x4000) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e) sendmsg$inet(r2, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x4c010) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x8}}]}}}]}, 0x58}}, 0x0) sendto$packet(r7, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r10, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r4, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0xffffff07, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x30, 0x8041}}], 0x2, 0x80) bind$x25(r0, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x375}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)}, 0x4005) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x3, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='tcp', 0x3) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) write(r1, &(0x7f0000000380)='80', 0x2) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) writev(r0, 0x0, 0x0) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xc, 0xb}, {0x7, 0x8}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb1e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r4, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0xffffff07, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x30, 0x8041}}], 0x2, 0x80) bind$x25(r0, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x375}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)}, 0x4005) executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x0) getdents(r0, &(0x7f0000000600)=""/54, 0x36) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x6}, 0x2) executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x3, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) program did not crash replaying the whole log did not cause a kernel crash single: executing 4 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nfc-ioctl$IOCTL_GET_NCIDEV_IDX-bpf$PROG_LOAD-sendmsg$NFC_CMD_DEV_UP-write$nci detailed listing: executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x3, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-openat$cuse detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-getsockopt$sock_cred-sendmmsg$unix-socket$inet_sctp-ioctl$sock_SIOCETHTOOL-sendmmsg$unix-bind$x25-ioctl$F2FS_IOC_MOVE_RANGE-connect$x25-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r4, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0xffffff07, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x30, 0x8041}}], 0x2, 0x80) bind$x25(r0, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) program crashed: inconsistent lock state in x25_kill_by_neigh single: successfully extracted reproducer found reproducer with 23 syscalls minimizing guilty program testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-getsockopt$sock_cred-sendmmsg$unix-socket$inet_sctp-ioctl$sock_SIOCETHTOOL-sendmmsg$unix-bind$x25-ioctl$F2FS_IOC_MOVE_RANGE-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r3, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0xffffff07, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}], 0x30, 0x8041}}], 0x2, 0x80) bind$x25(r0, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-getsockopt$sock_cred-sendmmsg$unix-socket$inet_sctp-ioctl$sock_SIOCETHTOOL-sendmmsg$unix-bind$x25-ioctl$F2FS_IOC_MOVE_RANGE detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r3, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0xffffff07, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}], 0x30, 0x8041}}], 0x2, 0x80) bind$x25(r0, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) program did not crash testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-getsockopt$sock_cred-sendmmsg$unix-socket$inet_sctp-ioctl$sock_SIOCETHTOOL-sendmmsg$unix-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r3, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0xffffff07, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}], 0x30, 0x8041}}], 0x2, 0x80) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-getsockopt$sock_cred-sendmmsg$unix-socket$inet_sctp-ioctl$sock_SIOCETHTOOL-sendmmsg$unix-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r3, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0xffffff07, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}], 0x30, 0x8041}}], 0x2, 0x80) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program did not crash testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-getsockopt$sock_cred-sendmmsg$unix-socket$inet_sctp-ioctl$sock_SIOCETHTOOL-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-getsockopt$sock_cred-sendmmsg$unix-socket$inet_sctp-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-getsockopt$sock_cred-sendmmsg$unix-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) sendmmsg$unix(r2, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x40800}}], 0x1, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-getsockopt$sock_cred-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-socketpair$unix-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-sendmsg$nl_route-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2b, 0x25dfdbfb, {0x80, 0x4, 0x20, 0x6, 0xff, 0x1, 0xc8, 0x6, 0x1100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-gettid-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) gettid() bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bpf$MAP_CREATE-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000003000000040000008000000012320500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/24, @ANYRES32, @ANYBLOB="ca7640ffe123a611d26ffa83e27ab5ccc1ee8a367707c15b06b2a9c0d19aa9e11a019fe68c7ce841873f230c299b0b6af9a82a402efdb398bf6b9531d54d320eb4f12d244cd28eee0d860ceb83ace5b58fd14ff8b878b6fdca785b0c6ed7a07e314afc9e8d168d10b3f27b0292c509e0430342aba3129ba2fa56d677455d341b2027ea57b10a06db24bb3df56518321499a31799366095302f8561cf753d793dd1aae2b6198426c79b8b"], 0x50) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-socket-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) socket(0x2b, 0x1, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-getsockopt$inet6_IPV6_XFRM_POLICY-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-sendmsg$nl_route_sched-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-setsockopt$SO_ATTACH_FILTER-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-sendmsg$ETHTOOL_MSG_WOL_GET-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d793000"], 0x2c}}, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program did not crash testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-setsockopt$inet6_tcp_int-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000000c0)=0x9, 0x4) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-socket-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x2b, 0x1, 0x1) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-syz_genetlink_get_family_id$ethtool-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl-bind$x25-connect$x25 detailed listing: executing program 0: ioctl(0xffffffffffffffff, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(0xffffffffffffffff, &(0x7f0000000080), 0x12) connect$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program did not crash testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, 0x0) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program did not crash testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)) bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program did not crash testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, 0x0, 0x0) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program did not crash testing program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=2m17.726900748s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 program crashed: inconsistent lock state in x25_kill_by_neigh simplifying C reproducer testing compiled C program (duration=2m17.726900748s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 program crashed: inconsistent lock state in x25_kill_by_neigh testing compiled C program (duration=2m17.726900748s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 program crashed: inconsistent lock state in x25_kill_by_neigh testing compiled C program (duration=2m17.726900748s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 program crashed: inconsistent lock state in x25_kill_by_neigh testing compiled C program (duration=2m17.726900748s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 program crashed: inconsistent lock state in x25_kill_by_neigh testing compiled C program (duration=2m17.726900748s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 program crashed: inconsistent lock state in x25_kill_by_neigh testing compiled C program (duration=2m17.726900748s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 program crashed: inconsistent lock state in x25_kill_by_neigh testing compiled C program (duration=2m17.726900748s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 program crashed: inconsistent lock state in x25_kill_by_neigh testing program (duration=2m17.726900748s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh validation run: crashed=true testing program (duration=2m17.726900748s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh validation run: crashed=true testing program (duration=2m17.726900748s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-ioctl-bind$x25-connect$x25 detailed listing: executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) program crashed: inconsistent lock state in x25_kill_by_neigh validation run: crashed=true reproducing took 1h29m55.768244533s repro crashed as (corrupted=false): ================================ WARNING: inconsistent lock state syzkaller #0 Not tainted -------------------------------- inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. ksoftirqd/0/16 [HC0[0]:SC1[1]:HE1:SE0] takes: ffff8880625aa130 (sk_lock-AF_X25){+.?.}-{0:0}, at: lock_sock include/net/sock.h:1780 [inline] ffff8880625aa130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1782 {SOFTIRQ-ON-W} state was registered at: lock_acquire+0x19e/0x420 kernel/locking/lockdep.c:5754 lock_sock_nested+0x48/0x100 net/core/sock.c:3543 lock_sock include/net/sock.h:1780 [inline] x25_bind+0x20a/0x460 net/x25/af_x25.c:698 __sys_bind+0x2f0/0x3f0 net/socket.c:1856 __do_sys_bind net/socket.c:1867 [inline] __se_sys_bind net/socket.c:1865 [inline] __x64_sys_bind+0x7a/0x90 net/socket.c:1865 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 irq event stamp: 558264 hardirqs last enabled at (558264): [] __local_bh_enable_ip+0x13a/0x1c0 kernel/softirq.c:411 hardirqs last disabled at (558263): [] __local_bh_enable_ip+0xdb/0x1c0 kernel/softirq.c:388 softirqs last enabled at (557984): [] run_ksoftirqd+0xa8/0x100 kernel/softirq.c:950 softirqs last disabled at (557989): [] __do_softirq kernel/softirq.c:612 [inline] softirqs last disabled at (557989): [] invoke_softirq kernel/softirq.c:452 [inline] softirqs last disabled at (557989): [] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(sk_lock-AF_X25); lock(sk_lock-AF_X25); *** DEADLOCK *** 1 lock held by ksoftirqd/0/16: #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:334 [inline] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:786 [inline] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 net/core/dev.c:5688 stack backtrace: CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0x18c/0x250 lib/dump_stack.c:106 valid_state+0x13b/0x1d0 kernel/locking/lockdep.c:4013 mark_lock_irq+0xad/0x900 kernel/locking/lockdep.c:4216 mark_lock+0x208/0x320 kernel/locking/lockdep.c:4678 mark_usage kernel/locking/lockdep.c:-1 [inline] __lock_acquire+0xcfc/0x7d80 kernel/locking/lockdep.c:5091 lock_acquire+0x19e/0x420 kernel/locking/lockdep.c:5754 lock_sock_nested+0x48/0x100 net/core/sock.c:3543 lock_sock include/net/sock.h:1780 [inline] x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1782 x25_lapb_receive_frame+0x1a7/0xef0 net/x25/x25_dev.c:138 __netif_receive_skb_one_core net/core/dev.c:5664 [inline] netif_receive_skb_core+0x16a/0x230 net/core/dev.c:5689 lapbeth_napi_poll+0x42/0x80 drivers/net/wan/lapbether.c:99 __napi_poll+0xbb/0x460 net/core/dev.c:6668 napi_poll net/core/dev.c:6735 [inline] net_rx_action+0x65f/0xcc0 net/core/dev.c:6871 handle_softirqs+0x27d/0x820 kernel/softirq.c:578 __do_softirq kernel/softirq.c:612 [inline] invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673 instr_sysvec_call_function_single arch/x86/kernel/smp.c:262 [inline] sysvec_call_function_single+0xa1/0xc0 arch/x86/kernel/smp.c:262 asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:694 RIP: 0010:finish_task_switch+0x267/0x8f0 kernel/sched/core.c:5256 Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 73 87 3b 09 e8 4e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0018:ffffc90000157ba0 EFLAGS: 00000286 RAX: 078d51a856d80600 RBX: 0000000000000000 RCX: 078d51a856d80600 RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 RBP: ffffc90000157bf0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: ffff88801b665a00 R13: 1ffff110171c79a1 R14: dffffc0000000000 R15: ffff8880b8e3cd08 context_switch kernel/sched/core.c:5385 [inline] __schedule+0x15b6/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 smpboot_thread_fn+0x71c/0x9f0 kernel/smpboot.c:160 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 BUG: sleeping function called from invalid context at net/core/sock.c:3545 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16, name: ksoftirqd/0 preempt_count: 101, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. Preemption disabled at: [] schedule+0xb6/0x170 kernel/sched/core.c:6774 CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0x18c/0x250 lib/dump_stack.c:106 __might_resched+0x48d/0x5f0 kernel/sched/core.c:10212 lock_sock_nested+0x5d/0x100 net/core/sock.c:3545 lock_sock include/net/sock.h:1780 [inline] x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1782 x25_lapb_receive_frame+0x1a7/0xef0 net/x25/x25_dev.c:138 __netif_receive_skb_one_core net/core/dev.c:5664 [inline] netif_receive_skb_core+0x16a/0x230 net/core/dev.c:5689 lapbeth_napi_poll+0x42/0x80 drivers/net/wan/lapbether.c:99 __napi_poll+0xbb/0x460 net/core/dev.c:6668 napi_poll net/core/dev.c:6735 [inline] net_rx_action+0x65f/0xcc0 net/core/dev.c:6871 handle_softirqs+0x27d/0x820 kernel/softirq.c:578 __do_softirq kernel/softirq.c:612 [inline] invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673 instr_sysvec_call_function_single arch/x86/kernel/smp.c:262 [inline] sysvec_call_function_single+0xa1/0xc0 arch/x86/kernel/smp.c:262 asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:694 RIP: 0010:finish_task_switch+0x267/0x8f0 kernel/sched/core.c:5256 Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 73 87 3b 09 e8 4e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0018:ffffc90000157ba0 EFLAGS: 00000286 RAX: 078d51a856d80600 RBX: 0000000000000000 RCX: 078d51a856d80600 RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 RBP: ffffc90000157bf0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: ffff88801b665a00 R13: 1ffff110171c79a1 R14: dffffc0000000000 R15: ffff8880b8e3cd08 context_switch kernel/sched/core.c:5385 [inline] __schedule+0x15b6/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 smpboot_thread_fn+0x71c/0x9f0 kernel/smpboot.c:160 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 ---------------- Code disassembly (best guess): 0: 31 09 xor %ecx,(%rcx) 2: 85 c0 test %eax,%eax 4: 0f 84 30 01 00 00 je 0x13a a: 48 85 db test %rbx,%rbx d: 0f 85 4f 01 00 00 jne 0x162 13: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 18: 4c 89 e7 mov %r12,%rdi 1b: e8 73 87 3b 09 call 0x93b8793 20: e8 4e 1a 30 00 call 0x301a73 25: fb sti 26: 4c 8b 65 b8 mov -0x48(%rbp),%r12 * 2a: 49 8d bc 24 00 16 00 lea 0x1600(%r12),%rdi <-- trapping instruction 31: 00 32: 48 89 f8 mov %rdi,%rax 35: 48 c1 e8 03 shr $0x3,%rax 39: 42 0f b6 04 30 movzbl (%rax,%r14,1),%eax 3e: 84 c0 test %al,%al final repro crashed as (corrupted=false): ================================ WARNING: inconsistent lock state syzkaller #0 Not tainted -------------------------------- inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. ksoftirqd/0/16 [HC0[0]:SC1[1]:HE1:SE0] takes: ffff8880625aa130 (sk_lock-AF_X25){+.?.}-{0:0}, at: lock_sock include/net/sock.h:1780 [inline] ffff8880625aa130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1782 {SOFTIRQ-ON-W} state was registered at: lock_acquire+0x19e/0x420 kernel/locking/lockdep.c:5754 lock_sock_nested+0x48/0x100 net/core/sock.c:3543 lock_sock include/net/sock.h:1780 [inline] x25_bind+0x20a/0x460 net/x25/af_x25.c:698 __sys_bind+0x2f0/0x3f0 net/socket.c:1856 __do_sys_bind net/socket.c:1867 [inline] __se_sys_bind net/socket.c:1865 [inline] __x64_sys_bind+0x7a/0x90 net/socket.c:1865 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 irq event stamp: 558264 hardirqs last enabled at (558264): [] __local_bh_enable_ip+0x13a/0x1c0 kernel/softirq.c:411 hardirqs last disabled at (558263): [] __local_bh_enable_ip+0xdb/0x1c0 kernel/softirq.c:388 softirqs last enabled at (557984): [] run_ksoftirqd+0xa8/0x100 kernel/softirq.c:950 softirqs last disabled at (557989): [] __do_softirq kernel/softirq.c:612 [inline] softirqs last disabled at (557989): [] invoke_softirq kernel/softirq.c:452 [inline] softirqs last disabled at (557989): [] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(sk_lock-AF_X25); lock(sk_lock-AF_X25); *** DEADLOCK *** 1 lock held by ksoftirqd/0/16: #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:334 [inline] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:786 [inline] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 net/core/dev.c:5688 stack backtrace: CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0x18c/0x250 lib/dump_stack.c:106 valid_state+0x13b/0x1d0 kernel/locking/lockdep.c:4013 mark_lock_irq+0xad/0x900 kernel/locking/lockdep.c:4216 mark_lock+0x208/0x320 kernel/locking/lockdep.c:4678 mark_usage kernel/locking/lockdep.c:-1 [inline] __lock_acquire+0xcfc/0x7d80 kernel/locking/lockdep.c:5091 lock_acquire+0x19e/0x420 kernel/locking/lockdep.c:5754 lock_sock_nested+0x48/0x100 net/core/sock.c:3543 lock_sock include/net/sock.h:1780 [inline] x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1782 x25_lapb_receive_frame+0x1a7/0xef0 net/x25/x25_dev.c:138 __netif_receive_skb_one_core net/core/dev.c:5664 [inline] netif_receive_skb_core+0x16a/0x230 net/core/dev.c:5689 lapbeth_napi_poll+0x42/0x80 drivers/net/wan/lapbether.c:99 __napi_poll+0xbb/0x460 net/core/dev.c:6668 napi_poll net/core/dev.c:6735 [inline] net_rx_action+0x65f/0xcc0 net/core/dev.c:6871 handle_softirqs+0x27d/0x820 kernel/softirq.c:578 __do_softirq kernel/softirq.c:612 [inline] invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673 instr_sysvec_call_function_single arch/x86/kernel/smp.c:262 [inline] sysvec_call_function_single+0xa1/0xc0 arch/x86/kernel/smp.c:262 asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:694 RIP: 0010:finish_task_switch+0x267/0x8f0 kernel/sched/core.c:5256 Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 73 87 3b 09 e8 4e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0018:ffffc90000157ba0 EFLAGS: 00000286 RAX: 078d51a856d80600 RBX: 0000000000000000 RCX: 078d51a856d80600 RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 RBP: ffffc90000157bf0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: ffff88801b665a00 R13: 1ffff110171c79a1 R14: dffffc0000000000 R15: ffff8880b8e3cd08 context_switch kernel/sched/core.c:5385 [inline] __schedule+0x15b6/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 smpboot_thread_fn+0x71c/0x9f0 kernel/smpboot.c:160 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 BUG: sleeping function called from invalid context at net/core/sock.c:3545 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16, name: ksoftirqd/0 preempt_count: 101, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. Preemption disabled at: [] schedule+0xb6/0x170 kernel/sched/core.c:6774 CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0x18c/0x250 lib/dump_stack.c:106 __might_resched+0x48d/0x5f0 kernel/sched/core.c:10212 lock_sock_nested+0x5d/0x100 net/core/sock.c:3545 lock_sock include/net/sock.h:1780 [inline] x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1782 x25_lapb_receive_frame+0x1a7/0xef0 net/x25/x25_dev.c:138 __netif_receive_skb_one_core net/core/dev.c:5664 [inline] netif_receive_skb_core+0x16a/0x230 net/core/dev.c:5689 lapbeth_napi_poll+0x42/0x80 drivers/net/wan/lapbether.c:99 __napi_poll+0xbb/0x460 net/core/dev.c:6668 napi_poll net/core/dev.c:6735 [inline] net_rx_action+0x65f/0xcc0 net/core/dev.c:6871 handle_softirqs+0x27d/0x820 kernel/softirq.c:578 __do_softirq kernel/softirq.c:612 [inline] invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0xd3/0x190 kernel/softirq.c:661 irq_exit_rcu+0x9/0x20 kernel/softirq.c:673 instr_sysvec_call_function_single arch/x86/kernel/smp.c:262 [inline] sysvec_call_function_single+0xa1/0xc0 arch/x86/kernel/smp.c:262 asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:694 RIP: 0010:finish_task_switch+0x267/0x8f0 kernel/sched/core.c:5256 Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 73 87 3b 09 e8 4e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0018:ffffc90000157ba0 EFLAGS: 00000286 RAX: 078d51a856d80600 RBX: 0000000000000000 RCX: 078d51a856d80600 RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 RBP: ffffc90000157bf0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: ffff88801b665a00 R13: 1ffff110171c79a1 R14: dffffc0000000000 R15: ffff8880b8e3cd08 context_switch kernel/sched/core.c:5385 [inline] __schedule+0x15b6/0x4660 kernel/sched/core.c:6701 schedule+0xbd/0x170 kernel/sched/core.c:6775 smpboot_thread_fn+0x71c/0x9f0 kernel/smpboot.c:160 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 ---------------- Code disassembly (best guess): 0: 31 09 xor %ecx,(%rcx) 2: 85 c0 test %eax,%eax 4: 0f 84 30 01 00 00 je 0x13a a: 48 85 db test %rbx,%rbx d: 0f 85 4f 01 00 00 jne 0x162 13: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 18: 4c 89 e7 mov %r12,%rdi 1b: e8 73 87 3b 09 call 0x93b8793 20: e8 4e 1a 30 00 call 0x301a73 25: fb sti 26: 4c 8b 65 b8 mov -0x48(%rbp),%r12 * 2a: 49 8d bc 24 00 16 00 lea 0x1600(%r12),%rdi <-- trapping instruction 31: 00 32: 48 89 f8 mov %rdi,%rax 35: 48 c1 e8 03 shr $0x3,%rax 39: 42 0f b6 04 30 movzbl (%rax,%r14,1),%eax 3e: 84 c0 test %al,%al