last executing test programs: 1.836185016s ago: executing program 3 (id=8353): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) syz_clone(0x0, 0x0, 0x8, 0x0, 0x0, 0x0) 1.821245417s ago: executing program 4 (id=8354): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaff7fff7ffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xd5823500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.276341319s ago: executing program 1 (id=8367): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000002000000000000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 1.258431779s ago: executing program 1 (id=8369): close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r1, 0x8982, 0x20000000) 1.179586022s ago: executing program 1 (id=8371): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2f, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bcc", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_alloc_da_blocks\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='tlb_flush\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r7}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.120740915s ago: executing program 1 (id=8374): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) 1.027319489s ago: executing program 1 (id=8376): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x400, 0x9}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000240)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='ext4_discard_preallocations\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x3, 0x80, 0x7f, 0x8, 0x5, 0x4, 0x0, 0x7e, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x9, 0x80000001}, 0x800, 0x3, 0x6, 0x8, 0x4, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x6, r0, 0x1) 979.71804ms ago: executing program 3 (id=8377): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840), 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xa7c, r0, 0x0, 0x5c0900a0}, 0x38) 915.771863ms ago: executing program 4 (id=8379): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000f9ffffffffffffffffcf090fa2c5e4efa5910a4b0f8d779343aaf0c8a86978549315aaa23c5fd95f235b207845360a5e88ef163b86463e02764b841c90cbbb827811cb78b8b56b87cadddb847fa599127032de74f197b0df", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socketpair$unix(0xa, 0x2, 0x3a, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000080)) 735.55396ms ago: executing program 4 (id=8383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 675.692083ms ago: executing program 2 (id=8385): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 675.526173ms ago: executing program 4 (id=8386): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 663.622994ms ago: executing program 1 (id=8387): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1510, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x2f) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 660.186513ms ago: executing program 4 (id=8388): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 592.275596ms ago: executing program 2 (id=8389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) 592.112276ms ago: executing program 4 (id=8390): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaff7fff7ffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xd5823500, 0x0, 0x0, 0x0, 0x0, 0x0) 558.104687ms ago: executing program 3 (id=8392): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x1fd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x60}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r6 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.controllers\x00', 0x100002, 0x0) unlink(&(0x7f0000000040)='./file0\x00') ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 433.469572ms ago: executing program 2 (id=8393): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000000)=@raw=[@alu={0x6, 0x0, 0xc}, @initr0, @jmp={0x5, 0x0, 0x9}], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) 404.657024ms ago: executing program 2 (id=8394): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000f9ffffffffffffffffcf090fa2c5e4efa5910a4b0f8d779343aaf0c8a86978549315aaa23c5fd95f235b207845360a5e88ef163b86463e02764b841c90cbbb827811cb78b8b56b87cadddb847fa599127032de74f197b0df", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socketpair$unix(0xa, 0x2, 0x3a, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000080)) 206.222422ms ago: executing program 0 (id=8396): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000ffff3f002c000000000000009500000200000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) 196.208432ms ago: executing program 0 (id=8397): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000b40)='ns/cgroup\x00') ioctl$TUNGETDEVNETNS(r0, 0xc0189436, 0xf0ff1f00000000) 187.834562ms ago: executing program 3 (id=8398): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 104.210226ms ago: executing program 0 (id=8399): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 104.023035ms ago: executing program 3 (id=8400): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 103.882716ms ago: executing program 3 (id=8401): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 96.292996ms ago: executing program 0 (id=8402): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2762], &(0x7f00000001c0)='GPL\x00'}, 0x48) 74.029327ms ago: executing program 0 (id=8403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) 62.230497ms ago: executing program 2 (id=8404): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 157.48µs ago: executing program 0 (id=8405): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000007000000000000000000008500000053000000850000002a0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="00e25556745ea61453d7c3883b39", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=8406): syz_clone(0x1000000, &(0x7f0000002fc0), 0x0, 0x0, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): rt 2(bridge_slave_1) entered forwarding state [ 109.954507][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.963119][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.972007][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.997186][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.021087][ T7] device bridge_slave_1 left promiscuous mode [ 110.049398][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.089756][ T7] device bridge_slave_0 left promiscuous mode [ 110.096001][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.448759][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.461696][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.523045][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.532325][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.566542][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.586193][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.633010][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.651289][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.679986][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.688846][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.836444][ T5209] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 59301 (only 8 groups) [ 117.259760][ T5477] FAULT_INJECTION: forcing a failure. [ 117.259760][ T5477] name failslab, interval 1, probability 0, space 0, times 0 [ 117.279410][ T5477] CPU: 0 PID: 5477 Comm: syz.3.1831 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 117.289026][ T5477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 117.298917][ T5477] Call Trace: [ 117.302056][ T5477] dump_stack+0x1d8/0x241 [ 117.306220][ T5477] ? panic+0x89d/0x89d [ 117.310121][ T5477] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 117.315761][ T5477] should_fail+0x71f/0x880 [ 117.320010][ T5477] ? setup_fault_attr+0x3d0/0x3d0 [ 117.324868][ T5477] ? vma_interval_tree_augment_rotate+0x1c0/0x1c0 [ 117.331116][ T5477] ? anon_vma_clone+0x47d/0x4d0 [ 117.335801][ T5477] ? anon_vma_fork+0xed/0x560 [ 117.340324][ T5477] should_failslab+0x5/0x20 [ 117.344656][ T5477] kmem_cache_alloc+0x28/0x250 [ 117.349260][ T5477] anon_vma_fork+0xed/0x560 [ 117.353601][ T5477] ? dup_userfaultfd+0x9c/0x5d0 [ 117.358288][ T5477] ? copy_mm+0x75e/0x10d0 [ 117.362450][ T5477] copy_mm+0x842/0x10d0 [ 117.366449][ T5477] ? copy_signal+0x5d0/0x5d0 [ 117.370866][ T5477] ? __init_rwsem+0xd6/0x210 [ 117.375293][ T5477] ? copy_signal+0x4b3/0x5d0 [ 117.379722][ T5477] copy_process+0x1291/0x3230 [ 117.384365][ T5477] ? proc_fail_nth_write+0x20b/0x290 [ 117.389483][ T5477] ? fork_idle+0x290/0x290 [ 117.393742][ T5477] ? memset+0x1f/0x40 [ 117.397551][ T5477] ? fsnotify+0x1280/0x1340 [ 117.402028][ T5477] ? __kernel_write+0x350/0x350 [ 117.406881][ T5477] _do_fork+0x197/0x900 [ 117.410966][ T5477] ? debug_smp_processor_id+0x20/0x20 [ 117.416160][ T5477] ? __fsnotify_parent+0x310/0x310 [ 117.421107][ T5477] ? copy_process+0x3230/0x3230 [ 117.425816][ T5477] ? __sb_end_write+0xc4/0x120 [ 117.430391][ T5477] __x64_sys_clone+0x26b/0x2c0 [ 117.434988][ T5477] ? fput_many+0x15e/0x1b0 [ 117.439244][ T5477] ? __ia32_sys_vfork+0x110/0x110 [ 117.444100][ T5477] ? do_syscall_64+0x7f/0x1c0 [ 117.448699][ T5477] do_syscall_64+0xca/0x1c0 [ 117.453477][ T5477] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 117.459308][ T5477] RIP: 0033:0x7fdc279e1b99 [ 117.463544][ T5477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.483069][ T5477] RSP: 002b:00007fdc26c62ff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 117.491538][ T5477] RAX: ffffffffffffffda RBX: 00007fdc27b6ffa0 RCX: 00007fdc279e1b99 [ 117.499529][ T5477] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000081280000 [ 117.507424][ T5477] RBP: 00007fdc26c630a0 R08: ffffffffff600000 R09: ffffffffff600000 [ 117.515322][ T5477] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 117.523126][ T5477] R13: 000000000000000b R14: 00007fdc27b6ffa0 R15: 00007ffffacfb468 [ 117.600319][ T5491] FAULT_INJECTION: forcing a failure. [ 117.600319][ T5491] name failslab, interval 1, probability 0, space 0, times 0 [ 117.619768][ T5491] CPU: 1 PID: 5491 Comm: syz.1.1838 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 117.629647][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 117.639536][ T5491] Call Trace: [ 117.642674][ T5491] dump_stack+0x1d8/0x241 [ 117.646834][ T5491] ? panic+0x89d/0x89d [ 117.650830][ T5491] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 117.656474][ T5491] should_fail+0x71f/0x880 [ 117.660730][ T5491] ? setup_fault_attr+0x3d0/0x3d0 [ 117.665583][ T5491] ? apic_timer_interrupt+0xa/0x20 [ 117.670615][ T5491] ? security_inode_alloc+0x24/0x110 [ 117.675732][ T5491] should_failslab+0x5/0x20 [ 117.680070][ T5491] kmem_cache_alloc+0x28/0x250 [ 117.684676][ T5491] security_inode_alloc+0x24/0x110 [ 117.689714][ T5491] inode_init_always+0x655/0x8a0 [ 117.694481][ T5491] ? sockfs_init_fs_context+0xa0/0xa0 [ 117.699687][ T5491] new_inode_pseudo+0x8f/0x210 [ 117.704287][ T5491] __sock_create+0x124/0x7a0 [ 117.708713][ T5491] ? __sock_create+0x9/0x7a0 [ 117.713141][ T5491] __sys_socketpair+0x308/0x6e0 [ 117.717824][ T5491] ? bpf_prog_e3071fbae9fcb7cf+0x558/0x1000 [ 117.723738][ T5491] ? __ia32_sys_socket+0x80/0x80 [ 117.728502][ T5491] ? do_syscall_64+0x1c0/0x1c0 [ 117.733099][ T5491] ? syscall_slow_exit_work+0x3dd/0x400 [ 117.738576][ T5491] ? syscall_slow_exit_work+0x3e7/0x400 [ 117.743950][ T5491] ? __sanitizer_cov_trace_pc+0x4/0x50 [ 117.749245][ T5491] __x64_sys_socketpair+0x97/0xb0 [ 117.754104][ T5491] do_syscall_64+0xca/0x1c0 [ 117.758530][ T5491] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 117.764370][ T5491] RIP: 0033:0x7fbecfdd2b99 [ 117.768624][ T5491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.788149][ T5491] RSP: 002b:00007fbecf054048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 117.796398][ T5491] RAX: ffffffffffffffda RBX: 00007fbecff60fa0 RCX: 00007fbecfdd2b99 [ 117.804204][ T5491] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 117.812105][ T5491] RBP: 00007fbecf0540a0 R08: 0000000000000000 R09: 0000000000000000 [ 117.819918][ T5491] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.827728][ T5491] R13: 000000000000000b R14: 00007fbecff60fa0 R15: 00007fff32e153c8 [ 117.869509][ T5491] socket: no more sockets [ 118.646969][ T5573] device syzkaller0 entered promiscuous mode [ 123.013349][ T23] audit: type=1400 audit(1719865311.300:141): avc: denied { create } for pid=5895 comm="syz.3.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 126.426138][ T5983] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0605:0000:0023 with DS=0x32 [ 130.575355][ T6162] EXT4-fs warning (device sda1): ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled. [ 131.318208][ T6213] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 133.116361][ T6305] device sit0 entered promiscuous mode [ 134.022476][ T6336] device sit0 entered promiscuous mode [ 134.595305][ T6355] device syzkaller0 entered promiscuous mode [ 141.790716][ T6704] device pim6reg1 entered promiscuous mode [ 144.320633][ T6858] syz.1.2376[6858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.320737][ T6858] syz.1.2376[6858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.466259][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.516440][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.536746][ T7014] device bridge_slave_0 entered promiscuous mode [ 146.563478][ T7014] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.582558][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.595549][ T7014] device bridge_slave_1 entered promiscuous mode [ 146.810035][ T7014] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.816901][ T7014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.824062][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.830907][ T7014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.888141][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.903631][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.913332][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.943064][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.953392][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.960253][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.978188][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.995790][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.002681][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.066203][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.083968][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.101380][ T775] device bridge_slave_1 left promiscuous mode [ 147.117496][ T775] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.149568][ T775] device bridge_slave_0 left promiscuous mode [ 147.179325][ T775] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.371949][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.388449][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.438680][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.455107][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.479707][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.487798][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.505978][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.514671][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.523968][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.532958][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.964371][ T7261] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 231 (only 8 groups) [ 150.307375][ T7274] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 49 (only 8 groups) [ 150.827850][ T7308] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 49 (only 8 groups) [ 151.678164][ T7369] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 49 (only 8 groups) [ 152.381110][ T7417] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 49 (only 8 groups) [ 157.425250][ T7703] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.541917][ T7717] device bridge_slave_1 left promiscuous mode [ 157.551263][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.563074][ T7717] device bridge_slave_0 left promiscuous mode [ 157.581659][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.693355][ T8125] device syzkaller0 entered promiscuous mode [ 161.816101][ T23] audit: type=1400 audit(1719865350.100:142): avc: denied { create } for pid=8119 comm="syz.3.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.356954][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.372072][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.392408][ T8160] device bridge_slave_0 entered promiscuous mode [ 162.422104][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.431607][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.445967][ T8160] device bridge_slave_1 entered promiscuous mode [ 162.643874][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.650872][ T8160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.657978][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.664847][ T8160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.751388][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.769679][ T977] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.790101][ T977] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.840108][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.853548][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.860440][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.876522][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.885753][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.892632][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.925285][ T8226] device syzkaller0 entered promiscuous mode [ 163.010246][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.030414][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.052248][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.062474][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.081121][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.089028][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.120817][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.128953][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.195180][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.205865][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.220838][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.229175][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.025617][ T8903] device syzkaller0 entered promiscuous mode [ 177.673058][ T9049] FAULT_INJECTION: forcing a failure. [ 177.673058][ T9049] name failslab, interval 1, probability 0, space 0, times 0 [ 177.691102][ T9049] CPU: 1 PID: 9049 Comm: syz.1.3310 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 177.700724][ T9049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 177.710611][ T9049] Call Trace: [ 177.713739][ T9049] dump_stack+0x1d8/0x241 [ 177.717899][ T9049] ? panic+0x89d/0x89d [ 177.721808][ T9049] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 177.727452][ T9049] ? unwind_next_frame+0x176a/0x1ea0 [ 177.732572][ T9049] ? get_reg+0x105/0x220 [ 177.736659][ T9049] should_fail+0x71f/0x880 [ 177.740914][ T9049] ? setup_fault_attr+0x3d0/0x3d0 [ 177.745854][ T9049] ? avc_denied+0x1d0/0x1d0 [ 177.750286][ T9049] ? __get_vm_area_node+0x183/0x310 [ 177.755313][ T9049] should_failslab+0x5/0x20 [ 177.759653][ T9049] kmem_cache_alloc_trace+0x28/0x260 [ 177.764775][ T9049] __get_vm_area_node+0x183/0x310 [ 177.769632][ T9049] ? selinux_capable+0x2f1/0x430 [ 177.774410][ T9049] __vmalloc_node_range+0xee/0x710 [ 177.779356][ T9049] ? bpf_prog_alloc_no_stats+0x6b/0x240 [ 177.784736][ T9049] __vmalloc+0x40/0x50 [ 177.788640][ T9049] ? bpf_prog_alloc_no_stats+0x6b/0x240 [ 177.794024][ T9049] bpf_prog_alloc_no_stats+0x6b/0x240 [ 177.799232][ T9049] bpf_prog_alloc+0x1a/0x1e0 [ 177.803714][ T9049] __se_sys_bpf+0x5e76/0xbcb0 [ 177.808178][ T9049] ? stack_trace_save+0x1c0/0x1c0 [ 177.813027][ T9049] ? __kernel_text_address+0x94/0x100 [ 177.818242][ T9049] ? unwind_get_return_address+0x49/0x80 [ 177.823705][ T9049] ? arch_stack_walk+0xf5/0x140 [ 177.828394][ T9049] ? _kstrtoull+0x390/0x4a0 [ 177.832736][ T9049] ? __x64_sys_bpf+0x80/0x80 [ 177.837159][ T9049] ? kstrtouint_from_user+0x20a/0x2a0 [ 177.842399][ T9049] ? kstrtol_from_user+0x310/0x310 [ 177.847319][ T9049] ? get_pid_task+0xde/0x130 [ 177.851736][ T9049] ? proc_fail_nth_write+0x20b/0x290 [ 177.856857][ T9049] ? proc_fail_nth_read+0x210/0x210 [ 177.861894][ T9049] ? proc_fail_nth_read+0x210/0x210 [ 177.867016][ T9049] ? memset+0x1f/0x40 [ 177.870832][ T9049] ? fsnotify+0x1280/0x1340 [ 177.875176][ T9049] ? __kernel_write+0x350/0x350 [ 177.879868][ T9049] ? check_preemption_disabled+0x9f/0x320 [ 177.885473][ T9049] ? debug_smp_processor_id+0x20/0x20 [ 177.890627][ T9049] ? __fsnotify_parent+0x310/0x310 [ 177.895662][ T9049] ? __sb_end_write+0xc4/0x120 [ 177.900260][ T9049] ? vfs_write+0x41a/0x4e0 [ 177.904511][ T9049] ? fput_many+0x15e/0x1b0 [ 177.908760][ T9049] ? check_preemption_disabled+0x153/0x320 [ 177.914410][ T9049] ? __do_page_fault+0x725/0xbb0 [ 177.919178][ T9049] do_syscall_64+0xca/0x1c0 [ 177.923521][ T9049] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 177.929240][ T9049] RIP: 0033:0x7f1523a5cb99 [ 177.933521][ T9049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.952936][ T9049] RSP: 002b:00007f1522cde048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.961184][ T9049] RAX: ffffffffffffffda RBX: 00007f1523beafa0 RCX: 00007f1523a5cb99 [ 177.968992][ T9049] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 177.976814][ T9049] RBP: 00007f1522cde0a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.984623][ T9049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.992425][ T9049] R13: 000000000000000b R14: 00007f1523beafa0 R15: 00007ffda6828d28 [ 178.055647][ T9049] syz.1.3310: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 178.069300][ T9049] CPU: 1 PID: 9049 Comm: syz.1.3310 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 178.078813][ T9049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 178.088705][ T9049] Call Trace: [ 178.091844][ T9049] dump_stack+0x1d8/0x241 [ 178.096003][ T9049] ? panic+0x89d/0x89d [ 178.099912][ T9049] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 178.105552][ T9049] warn_alloc+0x271/0x3e0 [ 178.109718][ T9049] ? setup_fault_attr+0x3d0/0x3d0 [ 178.114579][ T9049] ? should_fail+0x491/0x880 [ 178.119004][ T9049] ? zone_watermark_ok_safe+0x280/0x280 [ 178.124388][ T9049] ? kmem_cache_alloc_trace+0x28/0x260 [ 178.129683][ T9049] ? __get_vm_area_node+0x301/0x310 [ 178.134814][ T9049] ? selinux_capable+0x2f1/0x430 [ 178.139590][ T9049] __vmalloc_node_range+0x29b/0x710 [ 178.144620][ T9049] __vmalloc+0x40/0x50 [ 178.148522][ T9049] ? bpf_prog_alloc_no_stats+0x6b/0x240 [ 178.153904][ T9049] bpf_prog_alloc_no_stats+0x6b/0x240 [ 178.159112][ T9049] bpf_prog_alloc+0x1a/0x1e0 [ 178.163556][ T9049] __se_sys_bpf+0x5e76/0xbcb0 [ 178.168049][ T9049] ? stack_trace_save+0x1c0/0x1c0 [ 178.172911][ T9049] ? __kernel_text_address+0x94/0x100 [ 178.178114][ T9049] ? unwind_get_return_address+0x49/0x80 [ 178.183588][ T9049] ? arch_stack_walk+0xf5/0x140 [ 178.188277][ T9049] ? _kstrtoull+0x390/0x4a0 [ 178.192610][ T9049] ? __x64_sys_bpf+0x80/0x80 [ 178.197037][ T9049] ? kstrtouint_from_user+0x20a/0x2a0 [ 178.202246][ T9049] ? kstrtol_from_user+0x310/0x310 [ 178.207196][ T9049] ? get_pid_task+0xde/0x130 [ 178.211629][ T9049] ? proc_fail_nth_write+0x20b/0x290 [ 178.216739][ T9049] ? proc_fail_nth_read+0x210/0x210 [ 178.221777][ T9049] ? proc_fail_nth_read+0x210/0x210 [ 178.226811][ T9049] ? memset+0x1f/0x40 [ 178.230627][ T9049] ? fsnotify+0x1280/0x1340 [ 178.234968][ T9049] ? __kernel_write+0x350/0x350 [ 178.239653][ T9049] ? check_preemption_disabled+0x9f/0x320 [ 178.245215][ T9049] ? debug_smp_processor_id+0x20/0x20 [ 178.250418][ T9049] ? __fsnotify_parent+0x310/0x310 [ 178.255371][ T9049] ? __sb_end_write+0xc4/0x120 [ 178.259966][ T9049] ? vfs_write+0x41a/0x4e0 [ 178.264219][ T9049] ? fput_many+0x15e/0x1b0 [ 178.268475][ T9049] ? check_preemption_disabled+0x153/0x320 [ 178.274125][ T9049] ? __do_page_fault+0x725/0xbb0 [ 178.278888][ T9049] do_syscall_64+0xca/0x1c0 [ 178.283226][ T9049] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 178.288948][ T9049] RIP: 0033:0x7f1523a5cb99 [ 178.293320][ T9049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.312856][ T9049] RSP: 002b:00007f1522cde048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.321182][ T9049] RAX: ffffffffffffffda RBX: 00007f1523beafa0 RCX: 00007f1523a5cb99 [ 178.328989][ T9049] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 178.336802][ T9049] RBP: 00007f1522cde0a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.344613][ T9049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.352419][ T9049] R13: 000000000000000b R14: 00007f1523beafa0 R15: 00007ffda6828d28 [ 178.367610][ T9049] Mem-Info: [ 178.370964][ T9049] active_anon:4972 inactive_anon:74 isolated_anon:0 [ 178.370964][ T9049] active_file:22077 inactive_file:5312 isolated_file:0 [ 178.370964][ T9049] unevictable:0 dirty:161 writeback:0 unstable:0 [ 178.370964][ T9049] slab_reclaimable:7095 slab_unreclaimable:71283 [ 178.370964][ T9049] mapped:13336 shmem:163 pagetables:325 bounce:0 [ 178.370964][ T9049] free:1600872 free_pcp:896 free_cma:0 [ 178.409362][ T9049] Node 0 active_anon:19888kB inactive_anon:296kB active_file:88308kB inactive_file:21248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53344kB dirty:644kB writeback:0kB shmem:652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 178.438198][ T9049] DMA free:15908kB min:500kB low:624kB high:748kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.472276][ T9049] lowmem_reserve[]: 0 2888 6828 6828 [ 178.477553][ T9049] DMA32 free:2962060kB min:93324kB low:116652kB high:139980kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2963396kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1336kB local_pcp:1288kB free_cma:0kB [ 178.505921][ T9049] lowmem_reserve[]: 0 0 3940 3940 [ 178.511291][ T9049] Normal free:3425520kB min:127352kB low:159188kB high:191024kB active_anon:19888kB inactive_anon:296kB active_file:88308kB inactive_file:21248kB unevictable:0kB writepending:644kB present:5242880kB managed:4035536kB mlocked:0kB kernel_stack:5184kB pagetables:1300kB bounce:0kB free_pcp:2228kB local_pcp:1196kB free_cma:0kB [ 178.544121][ T9049] lowmem_reserve[]: 0 0 0 0 [ 178.548806][ T9049] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (U) 3*4096kB (M) = 15908kB [ 178.564601][ T9049] DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 6*64kB (M) 6*128kB (M) 5*256kB (M) 4*512kB (M) 4*1024kB (M) 2*2048kB (M) 720*4096kB (M) = 2962060kB [ 178.583035][ T9049] Normal: 2262*4kB (UME) 1527*8kB (UME) 1744*16kB (UME) 1176*32kB (UME) 651*64kB (UME) 245*128kB (UME) 75*256kB (UME) 18*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 789*4096kB (M) = 3426128kB [ 178.601654][ T9049] 27551 total pagecache pages [ 178.606223][ T9049] 0 pages in swap cache [ 178.610494][ T9049] Swap cache stats: add 0, delete 0, find 0/0 [ 178.616494][ T9049] Free swap = 124996kB [ 178.621431][ T9049] Total swap = 124996kB [ 178.625444][ T9049] 2097051 pages RAM [ 178.629139][ T9049] 0 pages HighMem/MovableOnly [ 178.633941][ T9049] 343341 pages reserved [ 178.646203][ T9049] 0 pages cma reserved [ 179.933075][ T9126] device syzkaller0 entered promiscuous mode [ 187.273595][ T9435] FAULT_INJECTION: forcing a failure. [ 187.273595][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 187.437005][ T9435] CPU: 1 PID: 9435 Comm: syz.2.3459 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 187.446630][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 187.456520][ T9435] Call Trace: [ 187.459656][ T9435] dump_stack+0x1d8/0x241 [ 187.463809][ T9435] ? panic+0x89d/0x89d [ 187.467722][ T9435] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 187.473367][ T9435] should_fail+0x71f/0x880 [ 187.477616][ T9435] ? setup_fault_attr+0x3d0/0x3d0 [ 187.482479][ T9435] ? call_usermodehelper_setup+0x83/0x200 [ 187.488026][ T9435] should_failslab+0x5/0x20 [ 187.492367][ T9435] kmem_cache_alloc_trace+0x28/0x260 [ 187.497487][ T9435] call_usermodehelper_setup+0x83/0x200 [ 187.502938][ T9435] ? __request_module+0xc30/0xc30 [ 187.507731][ T9435] __request_module+0x445/0xc30 [ 187.512419][ T9435] ? asan.module_dtor+0x20/0x20 [ 187.517103][ T9435] ? check_preemption_disabled+0x9f/0x320 [ 187.522661][ T9435] ? perf_trace_kmem_alloc+0x4b/0x130 [ 187.527872][ T9435] ? check_preemption_disabled+0x9f/0x320 [ 187.533417][ T9435] ? _raw_spin_lock+0xa4/0x1b0 [ 187.538018][ T9435] ? debug_smp_processor_id+0x20/0x20 [ 187.543232][ T9435] inet6_create+0x1e4/0x1000 [ 187.547658][ T9435] __sock_create+0x3cb/0x7a0 [ 187.552084][ T9435] __sys_socketpair+0x28f/0x6e0 [ 187.556767][ T9435] ? __ia32_sys_socket+0x80/0x80 [ 187.561541][ T9435] ? debug_smp_processor_id+0x20/0x20 [ 187.566751][ T9435] ? __ia32_sys_read+0x80/0x80 [ 187.571348][ T9435] ? __do_page_fault+0x725/0xbb0 [ 187.576123][ T9435] __x64_sys_socketpair+0x97/0xb0 [ 187.580983][ T9435] do_syscall_64+0xca/0x1c0 [ 187.585325][ T9435] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 187.591058][ T9435] RIP: 0033:0x7fd94a47bb99 [ 187.595299][ T9435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.614740][ T9435] RSP: 002b:00007fd9496fd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 187.622983][ T9435] RAX: ffffffffffffffda RBX: 00007fd94a609fa0 RCX: 00007fd94a47bb99 [ 187.630794][ T9435] RDX: 0000000000000006 RSI: 0000000000000005 RDI: 000000000000000a [ 187.638612][ T9435] RBP: 00007fd9496fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.646418][ T9435] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.654231][ T9435] R13: 000000000000000b R14: 00007fd94a609fa0 R15: 00007fffff36ea58 [ 194.096546][ T0] NOHZ: local_softirq_pending 08 [ 195.089210][ T23] audit: type=1400 audit(1719865383.370:143): avc: denied { create } for pid=9708 comm="syz.3.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 205.777451][T10206] syz.0.3746[10206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.777510][T10206] syz.0.3746[10206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.174986][T10409] FAULT_INJECTION: forcing a failure. [ 209.174986][T10409] name failslab, interval 1, probability 0, space 0, times 0 [ 209.288148][T10409] CPU: 1 PID: 10409 Comm: syz.4.3817 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 209.297943][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 209.307831][T10409] Call Trace: [ 209.310971][T10409] dump_stack+0x1d8/0x241 [ 209.315127][T10409] ? panic+0x89d/0x89d [ 209.319063][T10409] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 209.324680][T10409] should_fail+0x71f/0x880 [ 209.328934][T10409] ? setup_fault_attr+0x3d0/0x3d0 [ 209.334313][T10409] ? memset+0x1f/0x40 [ 209.338128][T10409] ? copy_mm+0x75e/0x10d0 [ 209.342295][T10409] should_failslab+0x5/0x20 [ 209.346637][T10409] kmem_cache_alloc+0x28/0x250 [ 209.351234][T10409] copy_mm+0x75e/0x10d0 [ 209.355231][T10409] ? copy_signal+0x5d0/0x5d0 [ 209.359651][T10409] ? __init_rwsem+0xd6/0x210 [ 209.364078][T10409] ? copy_signal+0x4b3/0x5d0 [ 209.368509][T10409] copy_process+0x1291/0x3230 [ 209.373022][T10409] ? proc_fail_nth_write+0x20b/0x290 [ 209.378152][T10409] ? fork_idle+0x290/0x290 [ 209.382389][T10409] ? memset+0x1f/0x40 [ 209.386213][T10409] ? fsnotify+0x1280/0x1340 [ 209.390554][T10409] ? __kernel_write+0x350/0x350 [ 209.395247][T10409] _do_fork+0x197/0x900 [ 209.399235][T10409] ? debug_smp_processor_id+0x20/0x20 [ 209.404440][T10409] ? __fsnotify_parent+0x310/0x310 [ 209.409393][T10409] ? copy_process+0x3230/0x3230 [ 209.414081][T10409] ? __sb_end_write+0xc4/0x120 [ 209.418677][T10409] __x64_sys_clone+0x26b/0x2c0 [ 209.423286][T10409] ? fput_many+0x15e/0x1b0 [ 209.427540][T10409] ? __ia32_sys_vfork+0x110/0x110 [ 209.432394][T10409] ? __do_page_fault+0xb8a/0xbb0 [ 209.437253][T10409] do_syscall_64+0xca/0x1c0 [ 209.441594][T10409] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 209.447457][T10409] RIP: 0033:0x7fdd77bf6b99 [ 209.451723][T10409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.471147][T10409] RSP: 002b:00007fdd76e56ff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 209.479390][T10409] RAX: ffffffffffffffda RBX: 00007fdd77d85078 RCX: 00007fdd77bf6b99 [ 209.487198][T10409] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000081280000 [ 209.495189][T10409] RBP: 00007fdd76e570a0 R08: ffffffffff600000 R09: ffffffffff600000 [ 209.502996][T10409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 209.510805][T10409] R13: 000000000000006e R14: 00007fdd77d85078 R15: 00007ffc61d17688 [ 209.521998][T10411] FAULT_INJECTION: forcing a failure. [ 209.521998][T10411] name failslab, interval 1, probability 0, space 0, times 0 [ 209.539154][T10411] CPU: 0 PID: 10411 Comm: syz.3.3820 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 209.548848][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 209.558746][T10411] Call Trace: [ 209.562008][T10411] dump_stack+0x1d8/0x241 [ 209.566162][T10411] ? panic+0x89d/0x89d [ 209.570071][T10411] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 209.575714][T10411] should_fail+0x71f/0x880 [ 209.579955][T10411] ? setup_fault_attr+0x3d0/0x3d0 [ 209.584824][T10411] ? apic_timer_interrupt+0xa/0x20 [ 209.589764][T10411] ? sk_prot_alloc+0xbd/0x3e0 [ 209.594274][T10411] should_failslab+0x5/0x20 [ 209.598608][T10411] __kmalloc+0x51/0x2e0 [ 209.602604][T10411] sk_prot_alloc+0xbd/0x3e0 [ 209.606944][T10411] sk_alloc+0x35/0x2f0 [ 209.610850][T10411] can_create+0x2dd/0x570 [ 209.615133][T10411] __sock_create+0x3cb/0x7a0 [ 209.619909][T10411] __sys_socketpair+0x308/0x6e0 [ 209.624592][T10411] ? __ia32_sys_socket+0x80/0x80 [ 209.629366][T10411] ? debug_smp_processor_id+0x20/0x20 [ 209.634578][T10411] ? do_syscall_64+0x7f/0x1c0 [ 209.639174][T10411] __x64_sys_socketpair+0x97/0xb0 [ 209.644031][T10411] do_syscall_64+0xca/0x1c0 [ 209.648372][T10411] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 209.654098][T10411] RIP: 0033:0x7fdc279e1b99 [ 209.658358][T10411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.677978][T10411] RSP: 002b:00007fdc26c63048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 209.686223][T10411] RAX: ffffffffffffffda RBX: 00007fdc27b6ffa0 RCX: 00007fdc279e1b99 [ 209.694050][T10411] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 209.702019][T10411] RBP: 00007fdc26c630a0 R08: 0000000000000000 R09: 0000000000000000 [ 209.709833][T10411] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.717645][T10411] R13: 000000000000000b R14: 00007fdc27b6ffa0 R15: 00007ffffacfb468 [ 215.906029][T10734] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 215.999537][ T23] audit: type=1400 audit(1719865404.220:144): avc: denied { create } for pid=10719 comm="syz.4.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 217.178183][T10777] device syzkaller0 entered promiscuous mode [ 217.220204][T10793] device syzkaller0 entered promiscuous mode [ 218.074206][T10840] device syzkaller0 entered promiscuous mode [ 219.259462][T10895] syz.4.4003[10895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.545987][T10925] device syzkaller0 entered promiscuous mode [ 221.703109][T10984] device syzkaller0 entered promiscuous mode [ 223.712064][T11052] device syzkaller0 entered promiscuous mode [ 224.384732][ T23] audit: type=1400 audit(1719865412.670:145): avc: denied { append } for pid=11079 comm="syz.0.4073" name="ppp" dev="devtmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 224.441682][T11086] EXT4-fs warning (device sda1): ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled. [ 228.132342][T11283] device lo entered promiscuous mode [ 231.332023][T11411] device pim6reg1 entered promiscuous mode [ 234.173827][T11485] syz_tun: mtu less than device minimum [ 235.958854][T11584] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.979123][T11584] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.006465][T11584] device bridge_slave_0 entered promiscuous mode [ 236.153590][T11584] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.175772][T11584] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.191050][T11584] device bridge_slave_1 entered promiscuous mode [ 236.238842][T11588] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.246001][T11588] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.254873][T11588] device bridge_slave_0 entered promiscuous mode [ 236.262182][T11588] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.273912][T11588] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.284766][T11588] device bridge_slave_1 entered promiscuous mode [ 236.567161][T11588] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.574146][T11588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.581324][T11588] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.588192][T11588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.644042][ T2851] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.651537][ T2851] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.677855][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.697233][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.760939][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.774318][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.782692][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.792358][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.801682][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.808544][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.816678][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.831734][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.840094][ T3286] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.846973][ T3286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.854940][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.863632][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.870520][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.975524][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.984352][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.992981][ T2851] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.999865][ T2851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.009043][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.028115][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.085297][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.106345][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.140310][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.152484][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.177199][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.218900][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.229784][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.285721][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.298381][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.338099][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.352909][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.374762][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.534634][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.754557][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.887308][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.895750][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.904058][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.357243][T11718] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 231 (only 8 groups) [ 239.589360][T11733] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 49 (only 8 groups) [ 240.058520][ T9] device bridge_slave_1 left promiscuous mode [ 240.064576][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.750225][ T9] device bridge_slave_0 left promiscuous mode [ 240.763350][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.367002][T11857] device syzkaller0 entered promiscuous mode [ 242.435728][T11865] device syzkaller0 entered promiscuous mode [ 247.670121][ T23] audit: type=1400 audit(1719865435.960:146): avc: denied { create } for pid=12062 comm="syz.1.4433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 248.076764][T12087] device syzkaller0 entered promiscuous mode [ 249.432500][T12132] device pim6reg1 entered promiscuous mode [ 249.890463][T12143] device syzkaller0 entered promiscuous mode [ 249.949319][T12145] device syzkaller0 entered promiscuous mode [ 250.057959][T12153] syz.0.4466[12153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.058029][T12153] syz.0.4466[12153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.692656][T12190] device pim6reg1 entered promiscuous mode [ 252.887646][T12206] device syzkaller0 entered promiscuous mode [ 253.610450][T12238] device syzkaller0 entered promiscuous mode [ 253.693699][T12236] device syzkaller0 entered promiscuous mode [ 254.030678][T12253] device pim6reg1 entered promiscuous mode [ 256.349690][T12282] device syzkaller0 entered promiscuous mode [ 256.400405][T12289] device syzkaller0 entered promiscuous mode [ 257.764731][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.819419][T12318] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.830180][T12318] device bridge_slave_0 entered promiscuous mode [ 257.850644][T12318] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.858283][T12318] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.870905][T12318] device bridge_slave_1 entered promiscuous mode [ 258.164628][T12318] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.171525][T12318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.178720][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.185594][T12318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.562804][ T854] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.608906][ T854] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.694350][T12362] device syzkaller0 entered promiscuous mode [ 260.789536][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.796952][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.859729][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.868004][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.876182][ T976] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.883033][ T976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.890483][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.898765][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.906937][ T976] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.913877][ T976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.921140][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.929346][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.937773][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.945962][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.953838][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.962178][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.970366][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.978622][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.986480][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.994524][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.002587][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.010842][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.018990][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.027232][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.769738][T12407] device pim6reg1 entered promiscuous mode [ 262.823384][ T379] device bridge_slave_1 left promiscuous mode [ 262.836886][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.851865][ T379] device bridge_slave_0 left promiscuous mode [ 262.858001][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.338431][T12446] device syzkaller0 entered promiscuous mode [ 267.765353][T12503] device syzkaller0 entered promiscuous mode [ 280.532848][T12878] FAULT_INJECTION: forcing a failure. [ 280.532848][T12878] name failslab, interval 1, probability 0, space 0, times 0 [ 280.571140][T12878] CPU: 0 PID: 12878 Comm: syz.2.4740 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 280.580934][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 280.590831][T12878] Call Trace: [ 280.593966][T12878] dump_stack+0x1d8/0x241 [ 280.598125][T12878] ? panic+0x89d/0x89d [ 280.602033][T12878] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 280.607680][T12878] ? unwind_next_frame+0x176a/0x1ea0 [ 280.612796][T12878] ? get_reg+0x105/0x220 [ 280.616880][T12878] should_fail+0x71f/0x880 [ 280.621130][T12878] ? setup_fault_attr+0x3d0/0x3d0 [ 280.625986][T12878] ? avc_denied+0x1d0/0x1d0 [ 280.630331][T12878] ? __get_vm_area_node+0x183/0x310 [ 280.635360][T12878] should_failslab+0x5/0x20 [ 280.639698][T12878] kmem_cache_alloc_trace+0x28/0x260 [ 280.644822][T12878] __get_vm_area_node+0x183/0x310 [ 280.649780][T12878] ? selinux_capable+0x2f1/0x430 [ 280.654634][T12878] __vmalloc_node_range+0xee/0x710 [ 280.659571][T12878] ? bpf_prog_alloc_no_stats+0x6b/0x240 [ 280.664955][T12878] __vmalloc+0x40/0x50 [ 280.668858][T12878] ? bpf_prog_alloc_no_stats+0x6b/0x240 [ 280.674237][T12878] bpf_prog_alloc_no_stats+0x6b/0x240 [ 280.679443][T12878] bpf_prog_alloc+0x1a/0x1e0 [ 280.683870][T12878] __se_sys_bpf+0x5e76/0xbcb0 [ 280.688386][T12878] ? stack_trace_save+0x1c0/0x1c0 [ 280.693252][T12878] ? __kernel_text_address+0x94/0x100 [ 280.698454][T12878] ? unwind_get_return_address+0x49/0x80 [ 280.703919][T12878] ? arch_stack_walk+0xf5/0x140 [ 280.708606][T12878] ? _kstrtoull+0x390/0x4a0 [ 280.712946][T12878] ? __x64_sys_bpf+0x80/0x80 [ 280.717373][T12878] ? kstrtouint_from_user+0x20a/0x2a0 [ 280.722580][T12878] ? kstrtol_from_user+0x310/0x310 [ 280.727532][T12878] ? get_pid_task+0xde/0x130 [ 280.731955][T12878] ? proc_fail_nth_write+0x20b/0x290 [ 280.737161][T12878] ? proc_fail_nth_read+0x210/0x210 [ 280.742193][T12878] ? proc_fail_nth_read+0x210/0x210 [ 280.747230][T12878] ? memset+0x1f/0x40 [ 280.751046][T12878] ? fsnotify+0x1280/0x1340 [ 280.755390][T12878] ? __kernel_write+0x350/0x350 [ 280.760073][T12878] ? check_preemption_disabled+0x9f/0x320 [ 280.765630][T12878] ? debug_smp_processor_id+0x20/0x20 [ 280.770834][T12878] ? __fsnotify_parent+0x310/0x310 [ 280.775788][T12878] ? __sb_end_write+0xc4/0x120 [ 280.780387][T12878] ? vfs_write+0x41a/0x4e0 [ 280.784637][T12878] ? fput_many+0x15e/0x1b0 [ 280.788888][T12878] ? check_preemption_disabled+0x153/0x320 [ 280.794537][T12878] ? __do_page_fault+0x725/0xbb0 [ 280.799314][T12878] do_syscall_64+0xca/0x1c0 [ 280.803653][T12878] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 280.809381][T12878] RIP: 0033:0x7fd94a47bb99 [ 280.813626][T12878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.833061][T12878] RSP: 002b:00007fd9496fd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.841307][T12878] RAX: ffffffffffffffda RBX: 00007fd94a609fa0 RCX: 00007fd94a47bb99 [ 280.849130][T12878] RDX: 0000000000000080 RSI: 0000000020000600 RDI: 0000000000000005 [ 280.856931][T12878] RBP: 00007fd9496fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 280.864741][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.872636][T12878] R13: 000000000000000b R14: 00007fd94a609fa0 R15: 00007fffff36ea58 [ 280.959408][T12878] syz.2.4740: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 281.005214][T12878] CPU: 1 PID: 12878 Comm: syz.2.4740 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 281.014916][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 281.024810][T12878] Call Trace: [ 281.027950][T12878] dump_stack+0x1d8/0x241 [ 281.032122][T12878] ? panic+0x89d/0x89d [ 281.036017][T12878] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 281.041662][T12878] warn_alloc+0x271/0x3e0 [ 281.045825][T12878] ? setup_fault_attr+0x3d0/0x3d0 [ 281.050686][T12878] ? should_fail+0x491/0x880 [ 281.055115][T12878] ? zone_watermark_ok_safe+0x280/0x280 [ 281.060493][T12878] ? kmem_cache_alloc_trace+0x28/0x260 [ 281.065785][T12878] ? __get_vm_area_node+0x301/0x310 [ 281.070818][T12878] ? selinux_capable+0x2f1/0x430 [ 281.075597][T12878] __vmalloc_node_range+0x29b/0x710 [ 281.080629][T12878] __vmalloc+0x40/0x50 [ 281.084535][T12878] ? bpf_prog_alloc_no_stats+0x6b/0x240 [ 281.089913][T12878] bpf_prog_alloc_no_stats+0x6b/0x240 [ 281.095122][T12878] bpf_prog_alloc+0x1a/0x1e0 [ 281.099552][T12878] __se_sys_bpf+0x5e76/0xbcb0 [ 281.104063][T12878] ? stack_trace_save+0x1c0/0x1c0 [ 281.108925][T12878] ? __kernel_text_address+0x94/0x100 [ 281.114144][T12878] ? unwind_get_return_address+0x49/0x80 [ 281.119596][T12878] ? arch_stack_walk+0xf5/0x140 [ 281.124287][T12878] ? _kstrtoull+0x390/0x4a0 [ 281.128622][T12878] ? __x64_sys_bpf+0x80/0x80 [ 281.133054][T12878] ? kstrtouint_from_user+0x20a/0x2a0 [ 281.138258][T12878] ? kstrtol_from_user+0x310/0x310 [ 281.143211][T12878] ? get_pid_task+0xde/0x130 [ 281.147630][T12878] ? proc_fail_nth_write+0x20b/0x290 [ 281.152751][T12878] ? proc_fail_nth_read+0x210/0x210 [ 281.157782][T12878] ? proc_fail_nth_read+0x210/0x210 [ 281.162819][T12878] ? memset+0x1f/0x40 [ 281.166632][T12878] ? fsnotify+0x1280/0x1340 [ 281.170975][T12878] ? __kernel_write+0x350/0x350 [ 281.175665][T12878] ? check_preemption_disabled+0x9f/0x320 [ 281.181218][T12878] ? debug_smp_processor_id+0x20/0x20 [ 281.186430][T12878] ? __fsnotify_parent+0x310/0x310 [ 281.191373][T12878] ? __sb_end_write+0xc4/0x120 [ 281.195969][T12878] ? vfs_write+0x41a/0x4e0 [ 281.200226][T12878] ? fput_many+0x15e/0x1b0 [ 281.204478][T12878] ? check_preemption_disabled+0x153/0x320 [ 281.210131][T12878] ? __do_page_fault+0x725/0xbb0 [ 281.214897][T12878] do_syscall_64+0xca/0x1c0 [ 281.219235][T12878] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 281.224960][T12878] RIP: 0033:0x7fd94a47bb99 [ 281.229217][T12878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.248742][T12878] RSP: 002b:00007fd9496fd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.256988][T12878] RAX: ffffffffffffffda RBX: 00007fd94a609fa0 RCX: 00007fd94a47bb99 [ 281.264792][T12878] RDX: 0000000000000080 RSI: 0000000020000600 RDI: 0000000000000005 [ 281.272602][T12878] RBP: 00007fd9496fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 281.280413][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.288228][T12878] R13: 000000000000000b R14: 00007fd94a609fa0 R15: 00007fffff36ea58 [ 281.307420][T12878] Mem-Info: [ 281.310506][T12878] active_anon:5015 inactive_anon:74 isolated_anon:0 [ 281.310506][T12878] active_file:22468 inactive_file:5368 isolated_file:0 [ 281.310506][T12878] unevictable:0 dirty:119 writeback:0 unstable:0 [ 281.310506][T12878] slab_reclaimable:7204 slab_unreclaimable:72075 [ 281.310506][T12878] mapped:13414 shmem:181 pagetables:357 bounce:0 [ 281.310506][T12878] free:1599787 free_pcp:757 free_cma:0 [ 281.348645][T12878] Node 0 active_anon:20060kB inactive_anon:296kB active_file:89872kB inactive_file:21472kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53656kB dirty:476kB writeback:0kB shmem:724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 281.377083][T12878] DMA free:15908kB min:500kB low:624kB high:748kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.403611][T12878] lowmem_reserve[]: 0 2888 6828 6828 [ 281.411111][T12878] DMA32 free:2962060kB min:93324kB low:116652kB high:139980kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2963396kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1336kB local_pcp:1288kB free_cma:0kB [ 281.469463][T12878] lowmem_reserve[]: 0 0 3940 3940 [ 281.474436][T12878] Normal free:3421340kB min:127352kB low:159188kB high:191024kB active_anon:20060kB inactive_anon:296kB active_file:89872kB inactive_file:21472kB unevictable:0kB writepending:484kB present:5242880kB managed:4035536kB mlocked:0kB kernel_stack:5088kB pagetables:1428kB bounce:0kB free_pcp:1712kB local_pcp:804kB free_cma:0kB [ 281.511692][T12878] lowmem_reserve[]: 0 0 0 0 [ 281.516019][T12878] DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (U) 3*4096kB (M) = 15908kB [ 281.529522][T12878] DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 6*64kB (M) 6*128kB (M) 5*256kB (M) 4*512kB (M) 4*1024kB (M) 2*2048kB (M) 720*4096kB (M) = 2962060kB [ 281.561990][T12878] Normal: 1511*4kB (UME) 1774*8kB (UME) 1841*16kB (UME) 1106*32kB (UME) 616*64kB (UME) 277*128kB (UME) 96*256kB (UME) 22*512kB (UME) 6*1024kB (UME) 2*2048kB (UM) 785*4096kB (UM) = 3421404kB [ 281.616071][T12878] 28017 total pagecache pages [ 281.627749][T12878] 0 pages in swap cache [ 281.631828][T12878] Swap cache stats: add 0, delete 0, find 0/0 [ 281.637828][T12878] Free swap = 124996kB [ 281.641769][T12878] Total swap = 124996kB [ 281.645778][T12878] 2097051 pages RAM [ 281.649464][T12878] 0 pages HighMem/MovableOnly [ 281.653902][T12878] 343341 pages reserved [ 281.658003][T12878] 0 pages cma reserved [ 281.706741][T12888] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 59301 (only 8 groups) [ 281.986946][T12888] EXT4-fs warning (device sda1): verify_group_input:171: Bad blocks count 0 [ 283.192024][T12949] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.198954][T12949] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.207052][T12949] device bridge_slave_0 entered promiscuous mode [ 283.214436][T12949] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.233718][T12949] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.242429][T12949] device bridge_slave_1 entered promiscuous mode [ 283.428194][T12949] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.435070][T12949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.442213][T12949] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.449046][T12949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.804771][T12971] device syzkaller0 entered promiscuous mode [ 284.204736][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.251677][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.372139][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.386626][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.422248][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.469689][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.495592][ T3248] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.502476][ T3248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.560303][ T775] device bridge_slave_1 left promiscuous mode [ 284.578808][ T775] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.599927][ T775] device bridge_slave_0 left promiscuous mode [ 284.622249][ T775] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.782345][T13000] €Â: renamed from pim6reg1 [ 284.788693][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.797548][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.805718][ T3286] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.812590][ T3286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.849784][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.857832][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.888378][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.896456][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.928900][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.033140][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.311379][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.319443][ T3286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.341110][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.349442][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.390544][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.410793][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.425392][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.436881][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.675806][T13122] device syzkaller0 entered promiscuous mode [ 288.240883][T13150] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.276391][T13150] O3ãc¤±: renamed from bridge_slave_0 [ 290.258723][ T23] audit: type=1400 audit(1719865478.540:147): avc: denied { ioctl } for pid=13261 comm="syz.4.4886" path="net:[4026532375]" dev="nsfs" ino=4026532375 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 291.055841][T13282] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.075957][T13282] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.083738][T13282] device bridge_slave_0 entered promiscuous mode [ 291.094291][T13282] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.104629][T13282] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.118482][T13282] device bridge_slave_1 entered promiscuous mode [ 291.719299][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.727664][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.807987][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.820241][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.848226][ T2851] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.855125][ T2851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.874815][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.888709][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.905728][ T2851] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.912707][ T2851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.950000][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.957537][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.999595][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.354439][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.467082][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.490068][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.504265][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.557231][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.569772][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.590004][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.598310][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.631320][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.647529][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.409785][ T775] device bridge_slave_1 left promiscuous mode [ 293.418736][ T775] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.471592][ T775] device bridge_slave_0 left promiscuous mode [ 293.525187][ T775] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.883338][T13399] FAULT_INJECTION: forcing a failure. [ 293.883338][T13399] name failslab, interval 1, probability 0, space 0, times 0 [ 293.900500][T13399] CPU: 1 PID: 13399 Comm: syz.4.4933 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 293.910202][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 293.920097][T13399] Call Trace: [ 293.923234][T13399] dump_stack+0x1d8/0x241 [ 293.927409][T13399] ? panic+0x89d/0x89d [ 293.931383][T13399] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 293.937049][T13399] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 293.942239][T13399] should_fail+0x71f/0x880 [ 293.946489][T13399] ? setup_fault_attr+0x3d0/0x3d0 [ 293.951355][T13399] ? ptr_to_hashval+0x60/0x60 [ 293.955867][T13399] ? __request_module+0x359/0xc30 [ 293.960913][T13399] should_failslab+0x5/0x20 [ 293.965255][T13399] kmem_cache_alloc_trace+0x28/0x260 [ 293.970380][T13399] ? inet6_create+0x366/0x1000 [ 293.974981][T13399] __request_module+0x359/0xc30 [ 293.979664][T13399] ? inet6_create+0x25b/0x1000 [ 293.984265][T13399] ? asan.module_dtor+0x20/0x20 [ 293.988959][T13399] ? check_preemption_disabled+0x9f/0x320 [ 293.994514][T13399] ? perf_trace_kmem_alloc+0x4b/0x130 [ 293.999710][T13399] ? check_preemption_disabled+0x9f/0x320 [ 294.005265][T13399] ? _raw_spin_lock+0xa4/0x1b0 [ 294.009868][T13399] ? debug_smp_processor_id+0x20/0x20 [ 294.015074][T13399] inet6_create+0x366/0x1000 [ 294.019501][T13399] __sock_create+0x3cb/0x7a0 [ 294.023932][T13399] __sys_socketpair+0x28f/0x6e0 [ 294.028613][T13399] ? __ia32_sys_socket+0x80/0x80 [ 294.033388][T13399] ? debug_smp_processor_id+0x20/0x20 [ 294.038597][T13399] ? __ia32_sys_read+0x80/0x80 [ 294.043194][T13399] ? __do_page_fault+0x725/0xbb0 [ 294.047968][T13399] __x64_sys_socketpair+0x97/0xb0 [ 294.052831][T13399] do_syscall_64+0xca/0x1c0 [ 294.057170][T13399] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 294.062898][T13399] RIP: 0033:0x7fdd77bf6b99 [ 294.067149][T13399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.086587][T13399] RSP: 002b:00007fdd76e78048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 294.094923][T13399] RAX: ffffffffffffffda RBX: 00007fdd77d84fa0 RCX: 00007fdd77bf6b99 [ 294.102730][T13399] RDX: 0000000000000006 RSI: 0000000000000005 RDI: 000000000000000a [ 294.110544][T13399] RBP: 00007fdd76e780a0 R08: 0000000000000000 R09: 0000000000000000 [ 294.118357][T13399] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.126169][T13399] R13: 000000000000000b R14: 00007fdd77d84fa0 R15: 00007ffc61d17688 [ 297.358642][ T23] audit: type=1400 audit(1719865485.640:148): avc: denied { create } for pid=13550 comm="syz.4.4992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 300.224797][T13640] bridge0: port 3(veth0_to_batadv) entered blocking state [ 300.273717][T13640] bridge0: port 3(veth0_to_batadv) entered disabled state [ 300.323828][T13640] device veth0_to_batadv entered promiscuous mode [ 300.344813][T13640] bridge0: port 3(veth0_to_batadv) entered blocking state [ 300.351829][T13640] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 301.366112][T13682] device syzkaller0 entered promiscuous mode [ 307.505126][ T23] audit: type=1400 audit(1719865495.790:149): avc: denied { create } for pid=13921 comm="syz.4.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 307.820169][T13940] device sit0 entered promiscuous mode [ 309.915023][T14013] FAULT_INJECTION: forcing a failure. [ 309.915023][T14013] name failslab, interval 1, probability 0, space 0, times 0 [ 309.959352][T14013] CPU: 0 PID: 14013 Comm: syz.2.5163 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 309.969059][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 309.978954][T14013] Call Trace: [ 309.982204][T14013] dump_stack+0x1d8/0x241 [ 309.986350][T14013] ? panic+0x89d/0x89d [ 309.990320][T14013] ? can_create+0x2dd/0x570 [ 309.994586][T14013] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 310.000367][T14013] ? do_syscall_64+0xca/0x1c0 [ 310.004878][T14013] should_fail+0x71f/0x880 [ 310.009201][T14013] ? setup_fault_attr+0x3d0/0x3d0 [ 310.014186][T14013] ? apic_timer_interrupt+0xa/0x20 [ 310.019094][T14013] ? selinux_sk_alloc_security+0x71/0x190 [ 310.024668][T14013] should_failslab+0x5/0x20 [ 310.029428][T14013] kmem_cache_alloc_trace+0x28/0x260 [ 310.034560][T14013] selinux_sk_alloc_security+0x71/0x190 [ 310.040100][T14013] security_sk_alloc+0x6d/0xa0 [ 310.044697][T14013] sk_prot_alloc+0x14c/0x3e0 [ 310.049132][T14013] sk_alloc+0x35/0x2f0 [ 310.053037][T14013] can_create+0x2dd/0x570 [ 310.057237][T14013] __sock_create+0x3cb/0x7a0 [ 310.061628][T14013] __sys_socketpair+0x308/0x6e0 [ 310.066311][T14013] ? __ia32_sys_socket+0x80/0x80 [ 310.071076][T14013] ? debug_smp_processor_id+0x20/0x20 [ 310.076563][T14013] ? __ia32_sys_read+0x80/0x80 [ 310.081147][T14013] __x64_sys_socketpair+0x97/0xb0 [ 310.086010][T14013] do_syscall_64+0xca/0x1c0 [ 310.090357][T14013] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 310.096081][T14013] RIP: 0033:0x7f53586a2b99 [ 310.100336][T14013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.119762][T14013] RSP: 002b:00007f5357924048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 310.128007][T14013] RAX: ffffffffffffffda RBX: 00007f5358830fa0 RCX: 00007f53586a2b99 [ 310.135817][T14013] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 310.143724][T14013] RBP: 00007f53579240a0 R08: 0000000000000000 R09: 0000000000000000 [ 310.151534][T14013] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.159340][T14013] R13: 000000000000000b R14: 00007f5358830fa0 R15: 00007ffd8cd7ef88 [ 310.729920][T14042] FAULT_INJECTION: forcing a failure. [ 310.729920][T14042] name failslab, interval 1, probability 0, space 0, times 0 [ 310.785495][T14042] CPU: 0 PID: 14042 Comm: syz.1.5175 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 310.795211][T14042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 310.805352][T14042] Call Trace: [ 310.808523][T14042] dump_stack+0x1d8/0x241 [ 310.812917][T14042] ? panic+0x89d/0x89d [ 310.816957][T14042] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 310.822550][T14042] should_fail+0x71f/0x880 [ 310.826796][T14042] ? setup_fault_attr+0x3d0/0x3d0 [ 310.831660][T14042] ? percpu_counter_add_batch+0x14d/0x170 [ 310.837204][T14042] ? copy_mm+0x75e/0x10d0 [ 310.841377][T14042] should_failslab+0x5/0x20 [ 310.845796][T14042] kmem_cache_alloc+0x28/0x250 [ 310.850403][T14042] copy_mm+0x75e/0x10d0 [ 310.854421][T14042] ? copy_signal+0x5d0/0x5d0 [ 310.858826][T14042] ? __init_rwsem+0xd6/0x210 [ 310.863244][T14042] ? copy_signal+0x4b3/0x5d0 [ 310.867674][T14042] copy_process+0x1291/0x3230 [ 310.872186][T14042] ? proc_fail_nth_write+0x20b/0x290 [ 310.877402][T14042] ? fork_idle+0x290/0x290 [ 310.881642][T14042] ? memset+0x1f/0x40 [ 310.885640][T14042] ? fsnotify+0x1280/0x1340 [ 310.889985][T14042] ? __kernel_write+0x350/0x350 [ 310.894669][T14042] _do_fork+0x197/0x900 [ 310.898674][T14042] ? debug_smp_processor_id+0x20/0x20 [ 310.903861][T14042] ? __fsnotify_parent+0x310/0x310 [ 310.909057][T14042] ? copy_process+0x3230/0x3230 [ 310.913851][T14042] ? __sb_end_write+0xc4/0x120 [ 310.918453][T14042] __x64_sys_clone+0x26b/0x2c0 [ 310.923058][T14042] ? fput_many+0x15e/0x1b0 [ 310.927312][T14042] ? __ia32_sys_vfork+0x110/0x110 [ 310.932247][T14042] ? __do_page_fault+0x725/0xbb0 [ 310.937020][T14042] do_syscall_64+0xca/0x1c0 [ 310.941534][T14042] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 310.947259][T14042] RIP: 0033:0x7f1523a5cb99 [ 310.951606][T14042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.971042][T14042] RSP: 002b:00007f1522cbcff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.979296][T14042] RAX: ffffffffffffffda RBX: 00007f1523beb078 RCX: 00007f1523a5cb99 [ 310.987091][T14042] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000081280000 [ 310.994994][T14042] RBP: 00007f1522cbd0a0 R08: ffffffffff600000 R09: ffffffffff600000 [ 311.002804][T14042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 311.010614][T14042] R13: 000000000000006e R14: 00007f1523beb078 R15: 00007ffda6828d28 [ 312.141585][T14101] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 313.331296][T14152] device syzkaller0 entered promiscuous mode [ 313.997032][T14187] syz_tun: refused to change device tx_queue_len [ 318.503815][T14420] device syzkaller0 entered promiscuous mode [ 319.338216][T14481] syz.3.5334[14481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.338327][T14481] syz.3.5334[14481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.826063][T14522] device syzkaller0 entered promiscuous mode [ 322.512659][T14549] device bridge0 entered promiscuous mode [ 322.577439][T14560] device bridge0 entered promiscuous mode [ 322.666341][T14543] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.676850][T14543] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.773415][T14543] device bridge0 left promiscuous mode [ 324.592377][T14601] EXT4-fs warning (device sda1): ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled. [ 324.787311][T14616] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.799103][T14616] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.137625][T14665] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.181640][T14665] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.214480][T14665] device bridge_slave_0 entered promiscuous mode [ 326.250173][T14665] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.306531][T14665] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.321289][T14665] device bridge_slave_1 entered promiscuous mode [ 326.360962][T14684] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.367940][T14684] bridge0: port 2(bridge_slave_1) entered listening state [ 326.377813][T14684] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.384922][T14684] bridge0: port 1(bridge_slave_0) entered listening state [ 326.404490][T14684] device bridge0 entered promiscuous mode [ 326.508097][T14688] device syzkaller0 entered promiscuous mode [ 326.687393][T14693] device syzkaller0 entered promiscuous mode [ 326.923402][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.969910][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.118830][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.138135][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.189495][ T953] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.196361][ T953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.223853][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.239838][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.247960][ T953] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.254821][ T953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.319274][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.356904][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.381670][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.453051][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.509764][ T7] device bridge_slave_1 left promiscuous mode [ 327.515756][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.569812][ T7] device O3ãc¤± left promiscuous mode [ 327.575088][ T7] bridge0: port 1(O3ãc¤±) entered disabled state [ 327.679923][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.695959][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 327.704092][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.724571][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.732898][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.761995][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.771047][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.402186][T14754] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.410791][T14754] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.236917][T14754] device bridge0 left promiscuous mode [ 329.268466][T14762] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.275347][T14762] bridge0: port 2(bridge_slave_1) entered listening state [ 329.282410][T14762] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.289265][T14762] bridge0: port 1(bridge_slave_0) entered listening state [ 329.301618][T14762] device bridge0 entered promiscuous mode [ 329.404372][T14780] device lo entered promiscuous mode [ 329.800077][T14796] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 1 (only 8 groups) [ 338.380642][T15118] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.430422][T15118] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.470166][T15118] device bridge_slave_0 entered promiscuous mode [ 339.279840][T15118] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.286692][T15118] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.328204][T15118] device bridge_slave_1 entered promiscuous mode [ 339.489248][ T9] device bridge_slave_1 left promiscuous mode [ 339.495332][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.508855][ T9] device bridge_slave_0 left promiscuous mode [ 339.519939][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.948205][T15181] device syzkaller0 entered promiscuous mode [ 340.151727][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.186552][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.225311][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.243897][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.285701][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.292576][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.308232][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.317462][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.326054][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.332936][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.349694][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.357810][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.367833][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.375982][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.408354][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.641009][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.667681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 340.676415][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.710153][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 340.718742][ T953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.733402][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.752384][ T3240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.779626][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.796257][ T3254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.876494][T15219] device syzkaller0 entered promiscuous mode [ 341.708235][T15266] device syzkaller0 entered promiscuous mode [ 344.819137][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 344.826679][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 347.761424][T15534] device syzkaller0 entered promiscuous mode [ 348.461397][ T23] audit: type=1400 audit(1719865536.750:150): avc: denied { create } for pid=15577 comm="syz.4.5719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 348.911519][T15600] device syzkaller0 entered promiscuous mode [ 349.895076][T15640] device syzkaller0 entered promiscuous mode [ 351.740918][T15734] device syzkaller0 entered promiscuous mode [ 352.369520][T15768] device syzkaller0 entered promiscuous mode [ 354.281009][T15870] device syzkaller0 entered promiscuous mode [ 356.461024][ T23] audit: type=1400 audit(1719865544.750:151): avc: denied { unlink } for pid=144 comm="syslogd" name="messages.0" dev="tmpfs" ino=911 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 360.179129][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.186146][ C1] bridge0: topology change detected, propagating [ 360.192428][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.199359][ C1] bridge0: topology change detected, propagating [ 360.205958][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.415175][T16011] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.422209][T16011] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.429987][T16011] device bridge_slave_0 entered promiscuous mode [ 365.437160][T16011] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.444304][T16011] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.452004][T16011] device bridge_slave_1 entered promiscuous mode [ 365.527820][T16011] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.534899][T16011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.542060][T16011] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.548885][T16011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.253740][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.627653][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.688457][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.721678][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.036897][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.045020][ T3246] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.051865][ T3246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.071694][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.080353][ T3246] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.087221][ T3246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.141499][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.151622][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.164857][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.174328][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.233558][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.247548][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.288246][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.369623][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.494053][T14976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.507818][T14976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.864408][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.886466][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.935115][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.977491][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.115177][T16078] device syzkaller0 entered promiscuous mode [ 368.251334][T16089] syz.4.5896[16089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.251390][T16089] syz.4.5896[16089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.390630][T16093] syz.4.5896[16093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.402515][T16093] syz.4.5896[16093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.670563][ T7] device bridge_slave_1 left promiscuous mode [ 368.712060][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.732107][ T7] device bridge_slave_0 left promiscuous mode [ 368.738513][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.545018][T16160] FAULT_INJECTION: forcing a failure. [ 369.545018][T16160] name failslab, interval 1, probability 0, space 0, times 0 [ 369.560980][T16160] CPU: 1 PID: 16160 Comm: syz.2.5923 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 369.570684][T16160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 369.580574][T16160] Call Trace: [ 369.583709][T16160] dump_stack+0x1d8/0x241 [ 369.587888][T16160] ? panic+0x89d/0x89d [ 369.591867][T16160] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 369.597502][T16160] ? is_bpf_text_address+0x24c/0x260 [ 369.602714][T16160] ? stack_trace_save+0x1c0/0x1c0 [ 369.607576][T16160] ? __kernel_text_address+0x94/0x100 [ 369.612907][T16160] should_fail+0x71f/0x880 [ 369.617240][T16160] ? setup_fault_attr+0x3d0/0x3d0 [ 369.622094][T16160] ? dup_task_struct+0x4f/0x600 [ 369.626774][T16160] should_failslab+0x5/0x20 [ 369.631116][T16160] kmem_cache_alloc+0x28/0x250 [ 369.635715][T16160] dup_task_struct+0x4f/0x600 [ 369.640237][T16160] copy_process+0x56d/0x3230 [ 369.644774][T16160] ? proc_fail_nth_write+0x20b/0x290 [ 369.649894][T16160] ? proc_fail_nth_read+0x210/0x210 [ 369.654928][T16160] ? proc_fail_nth_read+0x210/0x210 [ 369.659961][T16160] ? fork_idle+0x290/0x290 [ 369.664302][T16160] ? memset+0x1f/0x40 [ 369.668209][T16160] ? fsnotify+0x1280/0x1340 [ 369.672550][T16160] ? __kernel_write+0x350/0x350 [ 369.677235][T16160] _do_fork+0x197/0x900 [ 369.681228][T16160] ? debug_smp_processor_id+0x20/0x20 [ 369.686431][T16160] ? __fsnotify_parent+0x310/0x310 [ 369.691381][T16160] ? copy_process+0x3230/0x3230 [ 369.696069][T16160] ? __sb_end_write+0xc4/0x120 [ 369.700672][T16160] __x64_sys_clone+0x26b/0x2c0 [ 369.705275][T16160] ? fput_many+0x15e/0x1b0 [ 369.709522][T16160] ? __ia32_sys_vfork+0x110/0x110 [ 369.714393][T16160] ? __do_page_fault+0x725/0xbb0 [ 369.719158][T16160] do_syscall_64+0xca/0x1c0 [ 369.723498][T16160] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 369.729228][T16160] RIP: 0033:0x7f783d53cb99 [ 369.733473][T16160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.752911][T16160] RSP: 002b:00007f783c7bdff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 369.761156][T16160] RAX: ffffffffffffffda RBX: 00007f783d6cafa0 RCX: 00007f783d53cb99 [ 369.769227][T16160] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000 [ 369.777042][T16160] RBP: 00007f783c7be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 369.784850][T16160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.792674][T16160] R13: 000000000000000b R14: 00007f783d6cafa0 R15: 00007fff1351add8 [ 371.018165][T16294] FAULT_INJECTION: forcing a failure. [ 371.018165][T16294] name failslab, interval 1, probability 0, space 0, times 0 [ 371.032727][T16294] CPU: 0 PID: 16294 Comm: syz.2.5963 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 371.042429][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 371.052414][T16294] Call Trace: [ 371.055540][T16294] dump_stack+0x1d8/0x241 [ 371.059710][T16294] ? panic+0x89d/0x89d [ 371.063604][T16294] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 371.069254][T16294] should_fail+0x71f/0x880 [ 371.073523][T16294] ? setup_fault_attr+0x3d0/0x3d0 [ 371.078370][T16294] ? __request_module+0x37a/0xc30 [ 371.083315][T16294] should_failslab+0x5/0x20 [ 371.087652][T16294] __kmalloc_track_caller+0x4f/0x2b0 [ 371.092777][T16294] kstrdup+0x31/0x70 [ 371.096501][T16294] __request_module+0x37a/0xc30 [ 371.101190][T16294] ? inet6_create+0x25b/0x1000 [ 371.105795][T16294] ? asan.module_dtor+0x20/0x20 [ 371.110485][T16294] ? check_preemption_disabled+0x9f/0x320 [ 371.116041][T16294] ? _raw_spin_lock+0xa4/0x1b0 [ 371.120718][T16294] ? debug_smp_processor_id+0x20/0x20 [ 371.125938][T16294] inet6_create+0x366/0x1000 [ 371.130357][T16294] __sock_create+0x3cb/0x7a0 [ 371.134782][T16294] __sys_socketpair+0x28f/0x6e0 [ 371.139473][T16294] ? __ia32_sys_socket+0x80/0x80 [ 371.144243][T16294] ? debug_smp_processor_id+0x20/0x20 [ 371.149446][T16294] ? __ia32_sys_read+0x80/0x80 [ 371.154043][T16294] ? __do_page_fault+0x725/0xbb0 [ 371.158819][T16294] __x64_sys_socketpair+0x97/0xb0 [ 371.163680][T16294] do_syscall_64+0xca/0x1c0 [ 371.168019][T16294] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 371.173748][T16294] RIP: 0033:0x7f783d53cb99 [ 371.178048][T16294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.197437][T16294] RSP: 002b:00007f783c7be048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 371.205852][T16294] RAX: ffffffffffffffda RBX: 00007f783d6cafa0 RCX: 00007f783d53cb99 [ 371.213653][T16294] RDX: 0000000000000006 RSI: 0000000000000005 RDI: 000000000000000a [ 371.221457][T16294] RBP: 00007f783c7be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 371.229264][T16294] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.237081][T16294] R13: 000000000000000b R14: 00007f783d6cafa0 R15: 00007fff1351add8 [ 371.446738][T16314] device sit0 entered promiscuous mode [ 375.614820][T16553] bridge0: port 3(veth0_to_batadv) entered blocking state [ 375.690140][T16553] bridge0: port 3(veth0_to_batadv) entered disabled state [ 375.715982][T16553] device veth0_to_batadv entered promiscuous mode [ 375.747404][T16553] bridge0: port 3(veth0_to_batadv) entered blocking state [ 375.754591][T16553] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 375.953877][T16561] device syzkaller0 entered promiscuous mode [ 380.811552][T16858] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.818560][T16858] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.826451][T16858] device bridge_slave_0 entered promiscuous mode [ 380.868727][T16858] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.896599][T16858] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.904625][T16858] device bridge_slave_1 entered promiscuous mode [ 381.903671][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 381.913881][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 381.922198][T16909] FAULT_INJECTION: forcing a failure. [ 381.922198][T16909] name failslab, interval 1, probability 0, space 0, times 0 [ 381.937023][T16909] CPU: 0 PID: 16909 Comm: syz.3.6176 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 381.946712][T16909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 381.956606][T16909] Call Trace: [ 381.959743][T16909] dump_stack+0x1d8/0x241 [ 381.963906][T16909] ? apic_timer_interrupt+0xa/0x20 [ 381.968864][T16909] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 381.974495][T16909] ? should_fail+0x700/0x880 [ 381.978918][T16909] ? should_fail+0x71a/0x880 [ 381.983350][T16909] should_fail+0x71f/0x880 [ 381.987599][T16909] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 381.993504][T16909] ? setup_fault_attr+0x3d0/0x3d0 [ 381.998358][T16909] ? check_preemption_disabled+0x9f/0x320 [ 382.003917][T16909] ? apic_timer_interrupt+0xa/0x20 [ 382.008861][T16909] ? mls_compute_context_len+0x74b/0x790 [ 382.014329][T16909] ? context_struct_to_string+0x10a/0x8a0 [ 382.019881][T16909] ? context_struct_to_string+0x441/0x8a0 [ 382.025436][T16909] should_failslab+0x5/0x20 [ 382.029795][T16909] __kmalloc+0x51/0x2e0 [ 382.033775][T16909] context_struct_to_string+0x441/0x8a0 [ 382.039161][T16909] ? __kernel_text_address+0x94/0x100 [ 382.044367][T16909] ? security_bounded_transition+0x560/0x560 [ 382.050185][T16909] context_add_hash+0x141/0x270 [ 382.054859][T16909] ? ebitmap_get_bit+0x98/0x170 [ 382.059544][T16909] ? security_sid_to_context_inval+0x40/0x40 [ 382.065365][T16909] ? ebitmap_get_bit+0x86/0x170 [ 382.070055][T16909] ? mls_context_isvalid+0xa4/0x380 [ 382.075091][T16909] ? policydb_context_isvalid+0x1bc/0x410 [ 382.080733][T16909] security_compute_sid+0x11a7/0x1d60 [ 382.085937][T16909] ? __kasan_kmalloc+0x1d9/0x210 [ 382.090714][T16909] ? security_transition_sid+0x90/0x90 [ 382.096018][T16909] security_transition_sid+0x78/0x90 [ 382.101127][T16909] selinux_socket_post_create+0x37f/0x500 [ 382.106680][T16909] ? selinux_socket_create+0x330/0x330 [ 382.111971][T16909] ? apic_timer_interrupt+0xa/0x20 [ 382.116921][T16909] ? __module_put_and_exit+0x20/0x20 [ 382.122037][T16909] security_socket_post_create+0x86/0xc0 [ 382.127510][T16909] __sock_create+0x46d/0x7a0 [ 382.131933][T16909] __sys_socketpair+0x308/0x6e0 [ 382.136619][T16909] ? __ia32_sys_socket+0x80/0x80 [ 382.141390][T16909] ? debug_smp_processor_id+0x20/0x20 [ 382.146867][T16909] ? apic_timer_interrupt+0xa/0x20 [ 382.151821][T16909] __x64_sys_socketpair+0x97/0xb0 [ 382.156673][T16909] do_syscall_64+0xca/0x1c0 [ 382.161015][T16909] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 382.166739][T16909] RIP: 0033:0x7f23d0be4b99 [ 382.170990][T16909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.190427][T16909] RSP: 002b:00007f23cfe66048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 382.198673][T16909] RAX: ffffffffffffffda RBX: 00007f23d0d72fa0 RCX: 00007f23d0be4b99 [ 382.206479][T16909] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 382.214382][T16909] RBP: 00007f23cfe660a0 R08: 0000000000000000 R09: 0000000000000000 [ 382.222187][T16909] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.230003][T16909] R13: 000000000000000b R14: 00007f23d0d72fa0 R15: 00007fff727a74a8 [ 382.325254][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.339809][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.358237][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.365118][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.373505][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.381843][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.401263][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.408311][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.446246][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.458674][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 382.472678][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.528128][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 382.557505][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 382.566193][T16934] FAULT_INJECTION: forcing a failure. [ 382.566193][T16934] name failslab, interval 1, probability 0, space 0, times 0 [ 382.599867][T16934] CPU: 0 PID: 16934 Comm: syz.0.6183 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 382.609658][T16934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 382.619546][T16934] Call Trace: [ 382.622687][T16934] dump_stack+0x1d8/0x241 [ 382.626847][T16934] ? panic+0x89d/0x89d [ 382.630752][T16934] ? __kasan_kmalloc+0x1d9/0x210 [ 382.635617][T16934] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 382.641261][T16934] ? kmem_cache_alloc+0xd9/0x250 [ 382.646026][T16934] ? copy_mm+0x75e/0x10d0 [ 382.650194][T16934] ? copy_process+0x1291/0x3230 [ 382.654892][T16934] ? __x64_sys_clone+0x26b/0x2c0 [ 382.659658][T16934] ? do_syscall_64+0xca/0x1c0 [ 382.664173][T16934] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 382.670079][T16934] should_fail+0x71f/0x880 [ 382.674331][T16934] ? setup_fault_attr+0x3d0/0x3d0 [ 382.679190][T16934] ? anon_vma_clone+0x9d/0x4d0 [ 382.683784][T16934] should_failslab+0x5/0x20 [ 382.688135][T16934] kmem_cache_alloc+0x28/0x250 [ 382.692817][T16934] anon_vma_clone+0x9d/0x4d0 [ 382.697253][T16934] anon_vma_fork+0x8c/0x560 [ 382.701586][T16934] ? dup_userfaultfd+0x9c/0x5d0 [ 382.706264][T16934] ? copy_mm+0x75e/0x10d0 [ 382.710432][T16934] copy_mm+0x842/0x10d0 [ 382.714445][T16934] ? copy_signal+0x5d0/0x5d0 [ 382.718849][T16934] ? __init_rwsem+0xd6/0x210 [ 382.723273][T16934] ? copy_signal+0x4b3/0x5d0 [ 382.727707][T16934] copy_process+0x1291/0x3230 [ 382.732224][T16934] ? proc_fail_nth_write+0x20b/0x290 [ 382.737432][T16934] ? fork_idle+0x290/0x290 [ 382.741677][T16934] ? memset+0x1f/0x40 [ 382.745496][T16934] ? fsnotify+0x1280/0x1340 [ 382.749835][T16934] ? __kernel_write+0x350/0x350 [ 382.754522][T16934] _do_fork+0x197/0x900 [ 382.758515][T16934] ? debug_smp_processor_id+0x20/0x20 [ 382.763718][T16934] ? __fsnotify_parent+0x310/0x310 [ 382.768670][T16934] ? copy_process+0x3230/0x3230 [ 382.773363][T16934] ? __sb_end_write+0xc4/0x120 [ 382.778394][T16934] __x64_sys_clone+0x26b/0x2c0 [ 382.782986][T16934] ? fput_many+0x15e/0x1b0 [ 382.787338][T16934] ? __ia32_sys_vfork+0x110/0x110 [ 382.792192][T16934] ? __do_page_fault+0x725/0xbb0 [ 382.797131][T16934] do_syscall_64+0xca/0x1c0 [ 382.801429][T16934] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 382.807296][T16934] RIP: 0033:0x7fa156adcb99 [ 382.811640][T16934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.831678][T16934] RSP: 002b:00007fa155d3cff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 382.841532][T16934] RAX: ffffffffffffffda RBX: 00007fa156c6b078 RCX: 00007fa156adcb99 [ 382.849337][T16934] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000081280000 [ 382.857135][T16934] RBP: 00007fa155d3d0a0 R08: ffffffffff600000 R09: ffffffffff600000 [ 382.865030][T16934] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 382.872849][T16934] R13: 000000000000006e R14: 00007fa156c6b078 R15: 00007ffe4636bfc8 [ 382.907454][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.924557][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.950878][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 382.961217][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.992100][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.000791][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.017431][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.027004][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.318526][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 383.331369][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 383.665294][T16980] device syzkaller0 entered promiscuous mode [ 386.417643][T17110] device syzkaller0 entered promiscuous mode [ 386.482849][T17126] device syzkaller0 entered promiscuous mode [ 386.701777][ T23] audit: type=1400 audit(1719865574.990:152): avc: denied { create } for pid=17150 comm="syz.3.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 386.786137][ T23] audit: type=1400 audit(1719865575.030:153): avc: denied { create } for pid=17155 comm="syz.1.6265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 386.806618][ T23] audit: type=1400 audit(1719865575.100:154): avc: denied { append } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=84849 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 386.833471][ T23] audit: type=1400 audit(1719865575.100:155): avc: denied { open } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=84849 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 386.880935][ T23] audit: type=1400 audit(1719865575.100:156): avc: denied { getattr } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=84849 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 389.238071][T17314] device syzkaller0 entered promiscuous mode [ 389.830098][T17356] EXT4-fs warning (device sda1): ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled. [ 390.858190][T17427] device sit0 entered promiscuous mode [ 390.868388][T17428] sock: process `syz.3.6363' is using obsolete setsockopt SO_BSDCOMPAT [ 391.210427][T17432] device syzkaller0 entered promiscuous mode [ 405.366034][T17856] device pim6reg1 entered promiscuous mode [ 411.066643][T18253] device syzkaller0 entered promiscuous mode [ 411.451785][T18281] device syzkaller0 entered promiscuous mode [ 412.169456][T18314] device syzkaller0 entered promiscuous mode [ 414.487760][T18442] device syzkaller0 entered promiscuous mode [ 414.727517][T18462] device wg2 entered promiscuous mode [ 414.901694][T18474] device syzkaller0 entered promiscuous mode [ 416.839943][T18600] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 1 (only 8 groups) [ 416.914968][T18606] device bridge0 entered promiscuous mode [ 420.361979][T18778] device syzkaller0 entered promiscuous mode [ 421.034083][T18810] device syzkaller0 entered promiscuous mode [ 421.800010][T18865] FAULT_INJECTION: forcing a failure. [ 421.800010][T18865] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 421.813480][T18865] CPU: 0 PID: 18865 Comm: syz.1.6879 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 421.823205][T18865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 421.833240][T18865] Call Trace: [ 421.836375][T18865] dump_stack+0x1d8/0x241 [ 421.840531][T18865] ? panic+0x89d/0x89d [ 421.844435][T18865] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 421.850255][T18865] should_fail+0x71f/0x880 [ 421.854511][T18865] ? setup_fault_attr+0x3d0/0x3d0 [ 421.859361][T18865] ? check_preemption_disabled+0x9f/0x320 [ 421.864921][T18865] __alloc_pages_nodemask+0x1b4/0x840 [ 421.870289][T18865] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 421.875613][T18865] ? dup_task_struct+0x4f/0x600 [ 421.880398][T18865] ? dup_task_struct+0x4f/0x600 [ 421.885331][T18865] ? kmem_cache_alloc+0x151/0x250 [ 421.890208][T18865] dup_task_struct+0x85/0x600 [ 421.894936][T18865] copy_process+0x56d/0x3230 [ 421.901446][T18865] ? proc_fail_nth_write+0x20b/0x290 [ 421.907136][T18865] ? proc_fail_nth_read+0x210/0x210 [ 421.912389][T18865] ? proc_fail_nth_read+0x210/0x210 [ 421.917494][T18865] ? fork_idle+0x290/0x290 [ 421.921740][T18865] ? memset+0x1f/0x40 [ 421.925645][T18865] ? fsnotify+0x1280/0x1340 [ 421.930804][T18865] ? __kernel_write+0x350/0x350 [ 421.935560][T18865] _do_fork+0x197/0x900 [ 421.939556][T18865] ? debug_smp_processor_id+0x20/0x20 [ 421.944849][T18865] ? __fsnotify_parent+0x310/0x310 [ 421.949902][T18865] ? copy_process+0x3230/0x3230 [ 421.954571][T18865] ? __sb_end_write+0xc4/0x120 [ 421.959172][T18865] __x64_sys_clone+0x26b/0x2c0 [ 421.963768][T18865] ? fput_many+0x15e/0x1b0 [ 421.968114][T18865] ? __ia32_sys_vfork+0x110/0x110 [ 421.973149][T18865] ? __do_page_fault+0x725/0xbb0 [ 421.978006][T18865] do_syscall_64+0xca/0x1c0 [ 421.982349][T18865] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 421.988075][T18865] RIP: 0033:0x7f1523a5cb99 [ 421.992933][T18865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.012375][T18865] RSP: 002b:00007f1522cddff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 422.020624][T18865] RAX: ffffffffffffffda RBX: 00007f1523beafa0 RCX: 00007f1523a5cb99 [ 422.028525][T18865] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000 [ 422.036326][T18865] RBP: 00007f1522cde0a0 R08: 0000000000000000 R09: 0000000000000000 [ 422.044157][T18865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.051948][T18865] R13: 000000000000000b R14: 00007f1523beafa0 R15: 00007ffda6828d28 [ 422.095791][T18853] device syzkaller0 entered promiscuous mode [ 423.285514][T18921] device syzkaller0 entered promiscuous mode [ 423.622866][T18926] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.642622][T18926] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.650603][T18926] device bridge_slave_0 entered promiscuous mode [ 423.661339][T18926] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.676596][T18926] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.689368][T18926] device bridge_slave_1 entered promiscuous mode [ 423.817104][T18926] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.824086][T18926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.831251][T18926] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.838084][T18926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.887315][ T3274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 423.910858][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.930145][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.952506][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 423.961036][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.967904][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.978506][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 423.987606][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.994572][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.016657][ T7] device veth0_to_batadv left promiscuous mode [ 424.024135][ T7] bridge0: port 3(veth0_to_batadv) entered disabled state [ 424.032013][ T7] device bridge_slave_1 left promiscuous mode [ 424.038090][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.048334][ T7] device bridge_slave_0 left promiscuous mode [ 424.054729][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.249779][T18959] device syzkaller0 entered promiscuous mode [ 424.261008][ T3270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.269005][ T3270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.291270][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.310313][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.336702][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.357171][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.388190][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.553539][T19037] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.560499][T19037] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.574475][T19037] device bridge_slave_0 entered promiscuous mode [ 425.606321][T19037] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.613568][T19037] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.622648][T19037] device bridge_slave_1 entered promiscuous mode [ 425.801459][T19037] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.808426][T19037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.815572][T19037] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.822433][T19037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.880460][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.895543][ T981] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.924379][ T981] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.951638][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.961587][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.968431][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.977343][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.015207][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.022073][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.178573][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.197308][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.252038][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.315078][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.342372][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.367709][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 426.377187][ T981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.390887][ T775] device bridge_slave_1 left promiscuous mode [ 426.396945][ T775] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.438248][ T775] device bridge_slave_0 left promiscuous mode [ 426.444326][ T775] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.817524][T19059] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.845746][T19059] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.876994][T19059] device bridge_slave_0 entered promiscuous mode [ 426.887068][T19059] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.894654][T19059] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.903419][T19059] device bridge_slave_1 entered promiscuous mode [ 427.016553][T19059] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.023543][T19059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.030678][T19059] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.037513][T19059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.169554][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.189238][ T3284] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.240372][ T3284] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.323710][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.349587][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.356439][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.429391][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.437502][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.444448][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.516488][ T3270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.532878][ T3270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 427.579335][ T3270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.635473][ T3270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.693162][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.736699][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 427.789365][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 427.839645][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 427.848312][T19146] FAULT_INJECTION: forcing a failure. [ 427.848312][T19146] name failslab, interval 1, probability 0, space 0, times 0 [ 427.881374][T19146] CPU: 1 PID: 19146 Comm: syz.2.6988 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 427.891355][T19146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 427.901318][T19146] Call Trace: [ 427.904457][T19146] dump_stack+0x1d8/0x241 [ 427.908613][T19146] ? panic+0x89d/0x89d [ 427.912615][T19146] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 427.918265][T19146] should_fail+0x71f/0x880 [ 427.922508][T19146] ? setup_fault_attr+0x3d0/0x3d0 [ 427.928196][T19146] ? call_usermodehelper_setup+0x83/0x200 [ 427.933697][T19146] should_failslab+0x5/0x20 [ 427.938035][T19146] kmem_cache_alloc_trace+0x28/0x260 [ 427.943247][T19146] call_usermodehelper_setup+0x83/0x200 [ 427.948625][T19146] ? __request_module+0xc30/0xc30 [ 427.953596][T19146] __request_module+0x445/0xc30 [ 427.958263][T19146] ? inet6_create+0x25b/0x1000 [ 427.962860][T19146] ? asan.module_dtor+0x20/0x20 [ 427.967554][T19146] ? check_preemption_disabled+0x9f/0x320 [ 427.973101][T19146] ? _raw_spin_lock+0xa4/0x1b0 [ 427.977696][T19146] ? debug_smp_processor_id+0x20/0x20 [ 427.982905][T19146] inet6_create+0x366/0x1000 [ 427.987336][T19146] __sock_create+0x3cb/0x7a0 [ 427.991764][T19146] __sys_socketpair+0x28f/0x6e0 [ 427.996448][T19146] ? __ia32_sys_socket+0x80/0x80 [ 428.001226][T19146] ? debug_smp_processor_id+0x20/0x20 [ 428.006431][T19146] ? __ia32_sys_read+0x80/0x80 [ 428.011118][T19146] ? __do_page_fault+0x725/0xbb0 [ 428.015976][T19146] __x64_sys_socketpair+0x97/0xb0 [ 428.020834][T19146] do_syscall_64+0xca/0x1c0 [ 428.025176][T19146] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 428.030902][T19146] RIP: 0033:0x7f783d53cb99 [ 428.035152][T19146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.054593][T19146] RSP: 002b:00007f783c7be048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 428.062839][T19146] RAX: ffffffffffffffda RBX: 00007f783d6cafa0 RCX: 00007f783d53cb99 [ 428.071089][T19146] RDX: 0000000000000006 RSI: 0000000000000005 RDI: 000000000000000a [ 428.079017][T19146] RBP: 00007f783c7be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 428.086823][T19146] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.094806][T19146] R13: 000000000000000b R14: 00007f783d6cafa0 R15: 00007fff1351add8 [ 430.805853][T19407] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.054314][T19589] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.061436][T19589] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.756562][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.765832][T20182] syz.3.7409[20182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.765885][T20182] syz.3.7409[20182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.894640][T20187] device syzkaller0 entered promiscuous mode [ 446.418119][T20361] FAULT_INJECTION: forcing a failure. [ 446.418119][T20361] name failslab, interval 1, probability 0, space 0, times 0 [ 446.440336][T20361] CPU: 0 PID: 20361 Comm: syz.3.7477 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 446.450039][T20361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 446.459931][T20361] Call Trace: [ 446.463081][T20361] dump_stack+0x1d8/0x241 [ 446.467232][T20361] ? panic+0x89d/0x89d [ 446.471137][T20361] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 446.477325][T20361] should_fail+0x71f/0x880 [ 446.481893][T20361] ? setup_fault_attr+0x3d0/0x3d0 [ 446.486737][T20361] ? memset+0x1f/0x40 [ 446.490545][T20361] ? copy_mm+0x75e/0x10d0 [ 446.494710][T20361] should_failslab+0x5/0x20 [ 446.499054][T20361] kmem_cache_alloc+0x28/0x250 [ 446.503654][T20361] copy_mm+0x75e/0x10d0 [ 446.507653][T20361] ? copy_signal+0x5d0/0x5d0 [ 446.512087][T20361] ? __init_rwsem+0xd6/0x210 [ 446.516515][T20361] ? copy_signal+0x4b3/0x5d0 [ 446.521018][T20361] copy_process+0x1291/0x3230 [ 446.525613][T20361] ? proc_fail_nth_write+0x20b/0x290 [ 446.530753][T20361] ? fork_idle+0x290/0x290 [ 446.534982][T20361] ? memset+0x1f/0x40 [ 446.538799][T20361] ? fsnotify+0x1280/0x1340 [ 446.543147][T20361] ? __kernel_write+0x350/0x350 [ 446.547832][T20361] _do_fork+0x197/0x900 [ 446.551822][T20361] ? debug_smp_processor_id+0x20/0x20 [ 446.557829][T20361] ? __fsnotify_parent+0x310/0x310 [ 446.562762][T20361] ? copy_process+0x3230/0x3230 [ 446.567447][T20361] ? __sb_end_write+0xc4/0x120 [ 446.572042][T20361] __x64_sys_clone+0x26b/0x2c0 [ 446.576647][T20361] ? fput_many+0x15e/0x1b0 [ 446.580900][T20361] ? __ia32_sys_vfork+0x110/0x110 [ 446.585767][T20361] ? __do_page_fault+0x725/0xbb0 [ 446.590531][T20361] do_syscall_64+0xca/0x1c0 [ 446.594876][T20361] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 446.600606][T20361] RIP: 0033:0x7f23d0be4b99 [ 446.604849][T20361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.624291][T20361] RSP: 002b:00007f23cfe44ff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 446.632533][T20361] RAX: ffffffffffffffda RBX: 00007f23d0d73078 RCX: 00007f23d0be4b99 [ 446.640344][T20361] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000081280000 [ 446.648344][T20361] RBP: 00007f23cfe450a0 R08: ffffffffff600000 R09: ffffffffff600000 [ 446.656149][T20361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 446.663996][T20361] R13: 000000000000006e R14: 00007f23d0d73078 R15: 00007fff727a74a8 [ 449.050051][T20460] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.057080][T20460] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.065012][T20460] device bridge_slave_0 entered promiscuous mode [ 449.072680][T20460] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.079993][T20460] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.087934][T20460] device bridge_slave_1 entered promiscuous mode [ 449.198104][T20460] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.205055][T20460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.212374][T20460] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.219322][T20460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.307043][ T3274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.321767][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.369505][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.420404][ T3274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.439400][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.446242][ T3274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.485588][ T3274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.505906][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.512803][ T3274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.560117][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.567937][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.739227][ T775] device bridge_slave_1 left promiscuous mode [ 449.745254][ T775] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.753712][ T775] device bridge_slave_0 left promiscuous mode [ 449.759789][ T775] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.854709][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.116627][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.125246][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.134616][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.143866][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.152609][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.161382][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.265398][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 450.325919][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 458.000957][T20769] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.007808][T20769] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.089627][T20769] device bridge_slave_0 entered promiscuous mode [ 458.117111][T20769] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.169188][T20769] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.176743][T20769] device bridge_slave_1 entered promiscuous mode [ 459.250133][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.284994][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.316738][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.333297][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.342088][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.348938][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.357349][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.365781][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.374212][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.381071][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.436702][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.468918][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.487849][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.590159][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.598309][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.719399][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 459.727818][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 459.865851][T20854] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.873127][T20854] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.884278][T20855] device bridge_slave_1 left promiscuous mode [ 459.890754][T20855] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.898655][T20855] device bridge_slave_0 left promiscuous mode [ 459.905107][T20855] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.022611][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.030658][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.208450][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 460.227589][ T854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.309411][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 460.320372][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.353610][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.379826][ T3284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 460.503091][ T179] device veth0_to_batadv left promiscuous mode [ 460.515575][ T179] bridge0: port 3(veth0_to_batadv) entered disabled state [ 460.547895][ T179] device bridge_slave_1 left promiscuous mode [ 460.571799][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.580086][ T179] device bridge_slave_0 left promiscuous mode [ 460.586249][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.125183][T20997] device syzkaller0 entered promiscuous mode [ 465.319842][T21169] device syzkaller0 entered promiscuous mode [ 474.961858][T21593] EXT4-fs warning (device sda1): ext4_ioctl:888: Setting inode version is not supported with metadata_csum enabled. [ 477.724714][T21704] device sit0 entered promiscuous mode [ 478.449116][T21739] device lo entered promiscuous mode [ 483.947833][T21937] device pim6reg1 entered promiscuous mode [ 485.314719][T22051] device sit0 entered promiscuous mode [ 487.887154][T22179] device wg2 entered promiscuous mode [ 489.940491][T22260] device syzkaller0 entered promiscuous mode [ 494.028698][T22387] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 40704 (only 8 groups) [ 496.022544][T22500] syz.0.8299[22500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.022615][T22500] syz.0.8299[22500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.057855][T22500] device wg2 entered promiscuous mode [ 496.943345][T22520] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.978716][T22520] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.987595][T22520] device bridge_slave_0 entered promiscuous mode [ 497.028354][T22520] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.036137][T22520] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.044008][T22520] device bridge_slave_1 entered promiscuous mode [ 497.311501][ T179] device bridge_slave_1 left promiscuous mode [ 497.317489][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.352001][ T179] device bridge_slave_0 left promiscuous mode [ 497.359298][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.505542][T22567] device wg2 entered promiscuous mode [ 497.525447][T22569] device wg2 entered promiscuous mode [ 497.592609][ T23] audit: type=1400 audit(1719865685.870:157): avc: denied { create } for pid=22572 comm="syz.1.8330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 497.594189][T22573] bridge0: port 3(veth0) entered blocking state [ 497.620986][T22573] bridge0: port 3(veth0) entered disabled state [ 497.630606][T22573] device veth0 entered promiscuous mode [ 497.636615][T22573] bridge0: port 3(veth0) entered blocking state [ 497.642729][T22573] bridge0: port 3(veth0) entered listening state [ 497.664011][T22580] device veth0 left promiscuous mode [ 497.673415][T22580] bridge0: port 3(veth0) entered disabled state [ 497.768067][T22591] device syzkaller0 entered promiscuous mode [ 497.789817][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 497.797217][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 497.805208][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 497.813777][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 497.824982][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.831848][ T3309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.853867][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.862257][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.871001][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.877870][ T3309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.885174][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 497.935020][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.949322][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.956920][ T23] audit: type=1400 audit(1719865686.240:158): avc: denied { create } for pid=22604 comm="syz.3.8345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 497.978708][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.987128][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.024551][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 498.043499][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 498.060708][T22616] bridge0: port 3(veth0) entered blocking state [ 498.066797][T22616] bridge0: port 3(veth0) entered disabled state [ 498.081678][T22616] device veth0 entered promiscuous mode [ 498.099682][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 498.112340][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.126080][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.135094][ T3246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.145257][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.160804][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.182486][T22616] device veth0 left promiscuous mode [ 498.187806][T22616] bridge0: port 3(veth0) entered disabled state [ 498.670933][T22658] bridge0: port 3(veth0) entered blocking state [ 498.683916][T22658] bridge0: port 3(veth0) entered disabled state [ 498.712932][T22658] device veth0 entered promiscuous mode [ 498.727477][T22658] bridge0: port 3(veth0) entered blocking state [ 498.733725][T22658] bridge0: port 3(veth0) entered forwarding state [ 498.750982][T22660] device veth0 left promiscuous mode [ 498.765597][T22660] bridge0: port 3(veth0) entered disabled state [ 498.826420][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 499.049911][T22678] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 499.223790][T22687] bridge0: port 3(veth0) entered blocking state [ 499.230043][T22687] bridge0: port 3(veth0) entered disabled state [ 499.237539][T22687] device veth0 entered promiscuous mode [ 499.284679][T22687] device veth0 left promiscuous mode [ 499.290157][T22687] bridge0: port 3(veth0) entered disabled state [ 499.769855][T22723] bridge0: port 3(veth0) entered blocking state [ 499.796123][T22723] bridge0: port 3(veth0) entered disabled state [ 499.810660][T22723] device veth0 entered promiscuous mode [ 499.816345][T22723] bridge0: port 3(veth0) entered blocking state [ 499.822435][T22723] bridge0: port 3(veth0) entered forwarding state [ 499.924636][T22727] device veth0 left promiscuous mode [ 499.933454][T22727] bridge0: port 3(veth0) entered disabled state [ 500.044411][T22747] kasan: CONFIG_KASAN_INLINE enabled [ 500.049591][T22747] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 500.057459][T22747] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 500.064225][T22747] CPU: 1 PID: 22747 Comm: syz.0.8405 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 500.074524][T22747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 500.084445][T22747] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 500.090863][T22747] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 0d 33 0c fe 48 8b 1b 48 8d bb 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 2f 01 00 00 8b ab 1c 01 00 00 89 ef 44 [ 500.110523][T22747] RSP: 0018:ffff8881e5d47638 EFLAGS: 00010203 [ 500.116412][T22747] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 500.124228][T22747] RDX: ffffc90002952000 RSI: 0000000000000080 RDI: 000000000000011c [ 500.132042][T22747] RBP: 0000000000000080 R08: ffffffff8387eaea R09: ffff8881e5d47760 [ 500.139854][T22747] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 500.147661][T22747] R13: ffffff8b942ab62f R14: 0000000000000700 R15: ffff8881c60e3012 [ 500.155562][T22747] FS: 00007f2f5d7f26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 500.164419][T22747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.170830][T22747] CR2: 00007f2f5e6fb0e0 CR3: 00000001efa04000 CR4: 00000000003406a0 [ 500.178644][T22747] DR0: 0000000020000240 DR1: 0000000000000000 DR2: 0000000000000000 [ 500.186457][T22747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 500.194259][T22747] Call Trace: [ 500.197402][T22747] ? __die+0xb4/0x100 [ 500.201215][T22747] ? die+0x26/0x50 [ 500.204773][T22747] ? do_general_protection+0x266/0x3c0 [ 500.210131][T22747] ? do_trap+0x340/0x340 [ 500.214141][T22747] ? __kasan_kmalloc+0x1d9/0x210 [ 500.218917][T22747] ? kmem_cache_alloc+0xd9/0x250 [ 500.223690][T22747] ? build_skb+0x26/0x440 [ 500.227859][T22747] ? bpf_prog_test_run_skb+0x302/0xf00 [ 500.233152][T22747] ? __se_sys_bpf+0x2e37/0xbcb0 [ 500.238026][T22747] ? do_syscall_64+0xca/0x1c0 [ 500.242541][T22747] ? general_protection+0x28/0x30 [ 500.247490][T22747] ? bpf_skb_ancestor_cgroup_id+0xda/0x270 [ 500.253131][T22747] ? bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 500.258856][T22747] ? bpf_skb_ancestor_cgroup_id+0xda/0x270 [ 500.264498][T22747] bpf_prog_92e6f5cf76514d74+0x6ce/0x1000 [ 500.270060][T22747] bpf_test_run+0x2ae/0x6c0 [ 500.274403][T22747] ? bpf_ctx_init+0x1a0/0x1a0 [ 500.278943][T22747] ? build_skb+0x259/0x440 [ 500.283159][T22747] bpf_prog_test_run_skb+0x73c/0xf00 [ 500.288295][T22747] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 500.294010][T22747] ? __bpf_prog_get+0x296/0x310 [ 500.298738][T22747] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 500.304340][T22747] __se_sys_bpf+0x2e37/0xbcb0 [ 500.308861][T22747] ? plist_check_list+0x20d/0x220 [ 500.313705][T22747] ? plist_del+0x3bf/0x3e0 [ 500.317963][T22747] ? _raw_spin_trylock_bh+0x190/0x190 [ 500.323170][T22747] ? wake_up_q+0xa8/0xf0 [ 500.327309][T22747] ? futex_wake+0x6ce/0x840 [ 500.331594][T22747] ? __x64_sys_bpf+0x80/0x80 [ 500.336111][T22747] ? futex_wait+0x890/0x890 [ 500.340449][T22747] ? do_futex+0x13fe/0x19f0 [ 500.344792][T22747] ? futex_exit_release+0x1e0/0x1e0 [ 500.349817][T22747] ? kmem_cache_free+0x10b/0x2c0 [ 500.354591][T22747] ? getname_flags+0x23e/0x4e0 [ 500.359190][T22747] ? check_preemption_disabled+0x153/0x320 [ 500.364828][T22747] ? debug_smp_processor_id+0x20/0x20 [ 500.370036][T22747] ? __se_sys_futex+0x355/0x470 [ 500.374822][T22747] ? __do_page_fault+0x725/0xbb0 [ 500.379586][T22747] do_syscall_64+0xca/0x1c0 [ 500.383925][T22747] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 500.389652][T22747] RIP: 0033:0x7f2f5e570b99 [ 500.393903][T22747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.413459][T22747] RSP: 002b:00007f2f5d7f2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 500.421693][T22747] RAX: ffffffffffffffda RBX: 00007f2f5e6fefa0 RCX: 00007f2f5e570b99 [ 500.429504][T22747] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 500.437399][T22747] RBP: 00007f2f5e5f177e R08: 0000000000000000 R09: 0000000000000000 [ 500.445216][T22747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.453023][T22747] R13: 000000000000000b R14: 00007f2f5e6fefa0 R15: 00007ffeb334f028 [ 500.460843][T22747] Modules linked in: [ 500.465320][T22747] ---[ end trace a7710b7ded075d7b ]--- [ 500.470729][T22747] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 500.477013][T22747] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 0d 33 0c fe 48 8b 1b 48 8d bb 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 2f 01 00 00 8b ab 1c 01 00 00 89 ef 44 [ 500.496576][T22747] RSP: 0018:ffff8881e5d47638 EFLAGS: 00010203 [ 500.502455][T22747] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 500.510303][T22747] RDX: ffffc90002952000 RSI: 0000000000000080 RDI: 000000000000011c [ 500.518162][T22747] RBP: 0000000000000080 R08: ffffffff8387eaea R09: ffff8881e5d47760 [ 500.526013][T22747] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 500.533799][T22747] R13: ffffff8b942ab62f R14: 0000000000000700 R15: ffff8881c60e3012 [ 500.541618][T22747] FS: 00007f2f5d7f26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 500.550383][T22747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.556784][T22747] CR2: 00007f2f5e6fb0e0 CR3: 00000001efa04000 CR4: 00000000003406a0 [ 500.564709][T22747] DR0: 0000000020000240 DR1: 0000000000000000 DR2: 0000000000000000 [ 500.572514][T22747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 500.580332][T22747] Kernel panic - not syncing: Fatal exception [ 500.586449][T22747] Kernel Offset: disabled [ 500.590578][T22747] Rebooting in 86400 seconds..