Extracting prog: 3m25.216942888s Minimizing prog: 44m44.332794251s Simplifying prog options: 3m16.810979716s Extracting C: 52.537355122s Simplifying C: 0s extracting reproducer from 35 programs testing a last program of every proc single: executing 7 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-getsockopt$sock_cred-ptrace$ARCH_GET_GS-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-socket$packet-accept4-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-sendmsg$inet6-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_usb_connect$uac2-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-prctl$PR_MPX_DISABLE_MANAGEMENT-syz_usb_connect$cdc_ecm-prctl$PR_MPX_DISABLE_MANAGEMENT-socket$inet-prctl$PR_MPX_DISABLE_MANAGEMENT detailed listing: executing program 0: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000080), 0x1004) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r1 = socket$packet(0x11, 0x2, 0x300) accept4(r1, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x800) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)={0xa, 0x4e23, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000001200)=[{&(0x7f00000001c0)="d5bb87f1f33d9f383d23e120f2e9e3f9bec01ff843a3d82a01814328d6ad012bcda1788afbd044edbc2406ee12f7e68f", 0x30}, {&(0x7f0000000200)="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", 0x1000}], 0x2, &(0x7f0000001240)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdr={{0x58, 0x29, 0x39, {0x67, 0x8, 0x0, 0xf7, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x2, 0xda, 0x0, [@private1, @local]}}}], 0xa8}, 0x8080) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac2(0x5, 0xd8, &(0x7f0000001340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x7, 0xd0, 0x0, {0x8, 0xb, 0x1, 0x1, 0x1, 0x2, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x5, 0x2c, 0x2}, [@sample_rate={0xf, 0x24, 0xd, 0x4, 0x1, 0x6, [0x1, 0x0, 0x2, 0x4]}, @selector_unit={0x8, 0x24, 0xb, 0x5, 0x3, "ab6d92"}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x304, 0x5f, 0xfe, 0x7, 0x5, 0xd0}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x80}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5e49, 0xee, 0x4, 0x58}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x1, 0xd9, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfa, 0x3, 0x5, 0x1, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x8, 0x3, "8ec0f31fa0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2a, 0x36, 0x1, {0x8, 0x25, 0x1, 0x0, 0x30, 0x6, 0x86}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x6, 0x9, 0x97}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x10, 0x81, {0x8, 0x25, 0x1, 0x82, 0x30, 0x85}}}}}}}}]}}, &(0x7f00000016c0)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x300, 0x2, 0x4, 0xfc, 0x10}, 0xec, &(0x7f0000001480)={0x5, 0xf, 0xec, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "c933b8618aeed8e17db377f91a4c04ac"}, @generic={0xd0, 0x10, 0x4, "3a046aa1c5cd0e660e96a27aefa56d071e1ecf15955b66716a699d063b21ba7b2ac25bbeceebfb0ab28003a5ba5d8aebba4631eee317d69dcb10003cf62ca55d265306582415b24bf486ada648f467576c96b5ef191214e740c8c1fad073aaa13c673117fc6e6b14bd719cee144b654dac1c6afe886ad40418659019fa7353bf3c27a3c339aeea07d054007912590199e73eb9ae3f8b7401ef7dc178656eee911724d4353ec54d38a9d8a358aa6ba4fb3e0e551648e2f0e3ddcfc72cdba2b62d4635f666083928f738f979f1fe"}]}, 0x2, [{0x100, &(0x7f0000001580)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x1809}}]}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_usb_connect$cdc_ecm(0x3, 0x79, &(0x7f0000001700)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x4, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "a54e73"}, {0x5, 0x24, 0x0, 0x9f69}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8cd, 0x1, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0x44, 0x5}, @obex={0x5, 0x24, 0x15, 0x8}, @acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x6, 0x4}, @obex={0x5, 0x24, 0x15, 0x5ed7}, @obex={0x5, 0x24, 0x15, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x0, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x648, 0x7, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x70, 0x40, 0xf5}}}}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x250, 0x9, 0xea, 0x80, 0x8, 0x8}, 0x5, &(0x7f00000017c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x437}}]}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socket$inet(0x2, 0x0, 0xffffffff) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prlimit64-sched_setscheduler-getpid-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-ioctl$BTRFS_IOC_SNAP_CREATE-sendmmsg$unix-syz_init_net_socket$bt_rfcomm-recvmmsg-syz_open_dev$tty1-socket$pppl2tp-openat$sndtimer-ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE-socketpair$unix-socket$key-mlockall-mknodat-socket$nl_route-sendmsg$nl_route-signalfd4-socket$inet-mmap$IORING_OFF_SQ_RING-poll-write-bpf$PROG_LOAD-bpf$PROG_LOAD detailed listing: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000400)={{r2}, "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"}) sendmmsg$unix(r2, &(0x7f0000001400), 0x651, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmmsg(r1, &(0x7f0000001440), 0x4000087, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x480) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000014c0)={0x2, 0x3, 0xae10ab3d, 0x1, 0x6}) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mlockall(0x7) mknodat(0xffffffffffffff9c, &(0x7f0000001500)='./file3\x00', 0xc1c0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbff2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c00028014000700ff00000000000000fffffffffffffffe1400060000000300000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x4008834}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001400)={[0x3]}, 0x8, 0x800) socket$inet(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) poll(&(0x7f0000001640)=[{r3, 0x8113}], 0x1, 0x5d) write(r3, &(0x7f0000000300)="66123e1fca7b1230ce677911747e1688e136e060c88d11b6ee9f553647642c3b6c04fa01aa36f0053b447b32400fcc50", 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x10, 0x16, &(0x7f0000001740)=ANY=[@ANYBLOB], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000faffffffb702000005000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000023000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-socket$inet6-sendmsg$inet6-mount-openat-syz_emit_ethernet-bpf$MAP_CREATE-bpf$MAP_CREATE-socket$inet6_udp-setsockopt$IP6T_SO_SET_REPLACE-ioctl$F2FS_IOC_SET_PIN_FILE-bpf$MAP_LOOKUP_ELEM-ioctl$sock_SIOCGIFINDEX-socket$igmp6-setsockopt$IP6T_SO_SET_REPLACE-syz_emit_ethernet-socket$inet6_udp-mmap-getsockopt$inet6_int-bpf$PROG_LOAD-socket$inet6-mmap-bpf$PROG_LOAD-dup-bind$unix-sendmsg$nl_route_sched-write detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000700)={0xa, 0x1231, 0x0, @mcast1, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x18}, 0x8040004) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/trace_clock\x00', 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x4, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xd, 0xff, 0x4, 0x1, 0x0, r2}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000ac0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, &(0x7f00000005c0), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x49}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "1d0300", 0x8, 0x2c, 0x0, @local, @local, {[@routing={0x2c, 0x0, 0x0, 0x7}]}}}}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000791048000000000071043e000000000095000080"], &(0x7f0000000340)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = dup(r7) bind$unix(r8, &(0x7f0000000680)=@abs={0xa, 0x2}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048001}, 0x0) write(r1, &(0x7f0000000100)='counter', 0x7) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$vfat-quotactl$Q_SETQUOTA-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-bpf$PROG_LOAD detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file2\x00', 0x1018ed8, &(0x7f0000000500)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000e40), &(0x7f0000000e80)='./file0\x00', 0x2d9000, 0x0, 0xfc, 0x0, &(0x7f0000000ec0)) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000f00)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f40)={0x0, 0x0, 0x4, 0x0, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x278, 0x148, 0x1e0, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xb0}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@generic={0x67, 0x1}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_wireguard-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat-write detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000005b40)='1', 0x1) program crashed: SYZFAIL: mkdir(syz-tmp) failed single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_wireguard-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_wireguard-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_wireguard-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_wireguard-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_wireguard-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_WITH_BTFID_LOAD-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_wireguard-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_wireguard-bpf$MAP_CREATE_RINGBUF-bpf$BPF_BTF_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_wireguard-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: posix_spawnp failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-ioctl$ifreq_SIOCGIFINDEX_wireguard-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', 0x0, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, 0xffffffffffffffff, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-socket$inet_udp-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-write$binfmt_misc-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-connect$tipc-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: r0 = socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r2, 0x80000001, '\x00', r4, r5, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4081, 0xff1}], 0x1, 0x0, 0x64}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', r3, r4, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', 0x0, r3, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x80000001, 0xff, 0x0, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x80000001, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x2, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x9, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x580, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x44000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', 0x0, r3, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', 0x0, r3, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: posix_spawnp failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x100, 0x1, 0x3, 0x10028, r1, 0x80000001, '\x00', 0x0, r3, 0x5, 0x0, 0x3, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat program did not crash simplifying guilty program options testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: lost connection to test machine a never seen crash title: lost connection to test machine, ignore testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: lost connection to test machine validation run: crashed=true testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: posix_spawnp failed validation run: crashed=true testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program did not crash validation run: crashed=false testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): connect$tipc-mmap-socket$inet_udp-setsockopt$IPT_SO_SET_REPLACE-syz_emit_ethernet-mount-recvmmsg$unix-mkdirat-mount-openat-write-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched-bpf$BPF_BTF_GET_FD_BY_ID-bpf$MAP_CREATE-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$MAP_CREATE_TAIL_CALL-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$PROG_LOAD-openat detailed listing: executing program 0: connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002340)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000002580)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) mount(0x0, 0x0, 0x0, 0x1218442, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/rescan\x00', 0x1, 0x0) program crashed: SYZFAIL: mkdir(syz-tmp) failed validation run: crashed=true reproducing took 57m14.56097708s repro crashed as (corrupted=false): SYZFAIL: mkdir(syz-tmp) failed (errno 30: Read-only file system) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=0 req=17 state=1 status=67 (errno 9: Bad file descriptor) connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): SYZFAIL: mkdir(syz-tmp) failed (errno 30: Read-only file system) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=0 req=17 state=1 status=67 (errno 9: Bad file descriptor) connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF