last executing test programs: 507.461202ms ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 124.084991ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000004fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) 94.115146ms ago: executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) 20.805387ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='ext4_ext_convert_to_initialized_enter\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b00)='ext4_ext_convert_to_initialized_enter\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r5, &(0x7f0000000200), 0x42400) 0s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. 2024/06/04 06:49:02 fuzzer started 2024/06/04 06:49:02 dialing manager at 10.128.0.163:30010 [ 19.541489][ T30] audit: type=1400 audit(1717483742.635:66): avc: denied { node_bind } for pid=281 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 19.561831][ T30] audit: type=1400 audit(1717483742.635:67): avc: denied { name_bind } for pid=281 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 19.606941][ T30] audit: type=1400 audit(1717483742.695:68): avc: denied { integrity } for pid=290 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 19.611841][ T290] cgroup: Unknown subsys name 'net' [ 19.639080][ T30] audit: type=1400 audit(1717483742.695:69): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.658683][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.662560][ T30] audit: type=1400 audit(1717483742.695:70): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.691913][ T30] audit: type=1400 audit(1717483742.725:71): avc: denied { mounton } for pid=293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.692092][ T290] cgroup: Unknown subsys name 'devices' [ 19.716584][ T30] audit: type=1400 audit(1717483742.725:72): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.730546][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.745077][ T30] audit: type=1400 audit(1717483742.735:73): avc: denied { setattr } for pid=292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.776668][ T30] audit: type=1400 audit(1717483742.765:74): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.796348][ T30] audit: type=1400 audit(1717483742.765:75): avc: denied { relabelto } for pid=294 comm="mkswap" name="swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.061108][ T290] cgroup: Unknown subsys name 'hugetlb' [ 20.066599][ T290] cgroup: Unknown subsys name 'rlimit' 2024/06/04 06:49:03 starting 5 executor processes [ 20.860714][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.867675][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.875122][ T308] device bridge_slave_0 entered promiscuous mode [ 20.891931][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.898778][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.906216][ T308] device bridge_slave_1 entered promiscuous mode [ 20.956760][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.963704][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.970892][ T307] device bridge_slave_0 entered promiscuous mode [ 20.983614][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.990529][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.997765][ T307] device bridge_slave_1 entered promiscuous mode [ 21.022571][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.029453][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.036830][ T309] device bridge_slave_0 entered promiscuous mode [ 21.043639][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.050535][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.057639][ T309] device bridge_slave_1 entered promiscuous mode [ 21.071810][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.078991][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.086240][ T310] device bridge_slave_0 entered promiscuous mode [ 21.103694][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.110901][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.118130][ T310] device bridge_slave_1 entered promiscuous mode [ 21.167302][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.174208][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.181529][ T311] device bridge_slave_0 entered promiscuous mode [ 21.196951][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.203822][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.211145][ T311] device bridge_slave_1 entered promiscuous mode [ 21.325264][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.332138][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.339262][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.346000][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.383954][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.390835][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.397951][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.404740][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.440199][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.447082][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.454200][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.461072][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.502255][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.509140][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.516230][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.523122][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.532854][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.541256][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.549717][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.557307][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.565590][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.573790][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.580917][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.587907][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.595167][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.603030][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.610987][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.619388][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.626586][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.653143][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.661465][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.669642][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.695548][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.704028][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.712374][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.720222][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.727390][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.734795][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.742755][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.749608][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.756778][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.764939][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.772019][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.784566][ T307] device veth0_vlan entered promiscuous mode [ 21.792035][ T308] device veth0_vlan entered promiscuous mode [ 21.799450][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.807278][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.814721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.829180][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.837081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.855838][ T307] device veth1_macvtap entered promiscuous mode [ 21.870829][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.879434][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.888480][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.896803][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.913352][ T308] device veth1_macvtap entered promiscuous mode [ 21.927505][ T309] device veth0_vlan entered promiscuous mode [ 21.956407][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.965812][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.974317][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.982037][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.989548][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.997362][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.005549][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.013066][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.021372][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.029747][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.038180][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.045067][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.052384][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.060748][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.068797][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.075665][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.083025][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.091065][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.098910][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.106947][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.115032][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.122333][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.143869][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.152453][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.160920][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.170116][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.178342][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.186696][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.194921][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.201799][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.209060][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.217329][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.225512][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.232389][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.239791][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.265201][ T310] device veth0_vlan entered promiscuous mode [ 22.278992][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.286941][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.296089][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.304056][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.311962][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.320218][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.328415][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.336583][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.352371][ T311] device veth0_vlan entered promiscuous mode [ 22.368928][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.376188][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.385568][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.394052][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.402948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.410867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.421127][ T309] device veth1_macvtap entered promiscuous mode [ 22.439048][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.446375][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.454289][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.462890][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.471694][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.484324][ T311] device veth1_macvtap entered promiscuous mode [ 22.492337][ T344] BUG: unable to handle page fault for address: ffffffffff600000 [ 22.495138][ T310] device veth1_macvtap entered promiscuous mode [ 22.499878][ T344] #PF: supervisor read access in kernel mode [ 22.499890][ T344] #PF: error_code(0x0001) - permissions violation 2024/06/04 06:49:05 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 22.499902][ T344] PGD 6812067 P4D 6812067 PUD 6814067 PMD 6816067 PTE 8000000006809165 [ 22.526093][ T344] Oops: 0001 [#1] PREEMPT SMP KASAN [ 22.531214][ T344] CPU: 0 PID: 344 Comm: syz-executor.1 Not tainted 5.15.149-syzkaller-00131-g79bd336c7a94 #0 [ 22.541192][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 22.551188][ T344] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0 [ 22.557251][ T344] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 22.576695][ T344] RSP: 0018:ffffc90000b37030 EFLAGS: 00010292 [ 22.582683][ T344] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff88810b1493c0 [ 22.590492][ T344] RDX: ffff88810b149f50 RSI: 0000000000000008 RDI: 0000000000000007 [ 22.598300][ T344] RBP: ffffc90000b37068 R08: ffffffff8199a795 R09: ffffed1021629279 [ 22.606112][ T344] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 22.613928][ T344] R13: 0000000000000000 R14: ffffc90000b370c8 R15: ffffc90000b370d0 [ 22.621