last executing test programs: 784.59379ms ago: executing program 0 (id=888): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) 664.375743ms ago: executing program 1 (id=901): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104905, 0x4, 0x0, 0x4, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdir(&(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 664.331863ms ago: executing program 0 (id=902): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x8000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 640.299824ms ago: executing program 0 (id=905): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffc27, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec9b2a7a", 0xd}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r1) 640.039494ms ago: executing program 2 (id=906): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xfff, 0x1800000000}, 0x0, 0x4, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 536.335706ms ago: executing program 1 (id=909): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x828, 0x4, 0x0, 0xc, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x200000000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 520.738577ms ago: executing program 0 (id=910): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 492.445637ms ago: executing program 4 (id=911): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 444.559369ms ago: executing program 4 (id=913): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) 444.497399ms ago: executing program 2 (id=914): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg(r0, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x102c0) 444.217839ms ago: executing program 2 (id=916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 441.167869ms ago: executing program 1 (id=917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 430.971209ms ago: executing program 4 (id=919): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="010020004e0b"}) 428.655259ms ago: executing program 0 (id=920): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071181e000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 365.017191ms ago: executing program 2 (id=921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r3) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r4}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r5) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030611bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 364.805131ms ago: executing program 4 (id=923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x0, 0x76}, {0x20, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x5}, {0x6, 0xda, 0x9}]}) 364.606661ms ago: executing program 0 (id=924): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xa) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x2100, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000001040)={'vlan1\x00', 0x200}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_tracing={0x1a, 0x5, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7fffffff}]}, &(0x7f00000010c0)='GPL\x00', 0x6, 0x75, &(0x7f0000001100)=""/117, 0x41000, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000011c0)={0x4, 0x3, 0x4, 0x9}, 0x10, 0x32d9, 0xffffffffffffffff, 0x4, &(0x7f0000001200)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000001240)=[{0x5, 0x3, 0x6, 0x1}, {0x9, 0x5, 0x5, 0x9}, {0x4, 0x3, 0xa, 0x1}, {0x3, 0x5, 0x3, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003400)={r3, 0x0, 0x38, 0x1000, &(0x7f0000001340)="62bdf3d050cf9073ae4c002bf860f569f7955726b714cfc3bc0ea5f748b93cf4d6622e70170ee1172dd6baa418502c92ce5a2116cdca65fe", &(0x7f0000001380)=""/4096, 0x3, 0x0, 0x0, 0x77, 0x0, &(0x7f0000003380)="07fdf1612ca05ffcaf860d58dcd716eae969752a88c7e1fbc72590d209a758138c8918bdb0cc23f122cf617203747a864926d5a5d7592b4433baa4fddd0d042d95dea2cd01692a582036e4339a15febb7fa8c60585e0aabc71de04568f30c380cc08b36e529c2e0c4b8468652e1f6d15b4e4cc9c0d6fe2", 0x1, 0x0, 0xb}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8991, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x4, 0xaa526, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000003480), 0x8}, 0x0, 0x6, 0x0, 0x5, 0x5, 0x400000, 0x1ff, 0x0, 0x0, 0x0, 0x84}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 364.515411ms ago: executing program 3 (id=925): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018630000e8ff000000000000bf0b00008520000003fe"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x8003, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x63, 0x11, 0x3e}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) 256.014253ms ago: executing program 4 (id=926): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aafe8000000000000227bfa7b09303960e2f81"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 239.110554ms ago: executing program 3 (id=927): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0x2a8, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffff9, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 218.015994ms ago: executing program 1 (id=928): perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xa, 0xfc, 0x0, 0x3, 0x4041, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x3d96, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 160.669416ms ago: executing program 3 (id=929): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0x14, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 160.503996ms ago: executing program 2 (id=930): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x5c, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x6}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 160.428146ms ago: executing program 1 (id=931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 145.903686ms ago: executing program 3 (id=932): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 108.346947ms ago: executing program 3 (id=933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.679759ms ago: executing program 1 (id=934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x45, 0xfe, 0x3, 0x80000000}]}) 32.477869ms ago: executing program 3 (id=935): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 29.322349ms ago: executing program 4 (id=936): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80d00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 22.098821][ T28] audit: type=1400 audit(1786165820.611:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.099864][ T279] cgroup: Unknown subsys name 'net' [ 22.121662][ T28] audit: type=1400 audit(1786165820.611:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.149005][ T28] audit: type=1400 audit(1786165820.641:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.149161][ T279] cgroup: Unknown subsys name 'devices' [ 22.291317][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.297092][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.408927][ T28] audit: type=1400 audit(1786165820.921:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.432957][ T28] audit: type=1400 audit(1786165820.921:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.453270][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.457976][ T28] audit: type=1400 audit(1786165820.921:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.489424][ T28] audit: type=1400 audit(1786165820.981:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.503168][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.514912][ T28] audit: type=1400 audit(1786165820.981:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.549030][ T28] audit: type=1400 audit(1786165821.011:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.574530][ T28] audit: type=1400 audit(1786165821.011:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.178521][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.185732][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.193317][ T288] device bridge_slave_0 entered promiscuous mode [ 23.201229][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.208253][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.215652][ T288] device bridge_slave_1 entered promiscuous mode [ 23.236398][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.243468][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.250871][ T287] device bridge_slave_0 entered promiscuous mode [ 23.258528][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.265592][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.273035][ T287] device bridge_slave_1 entered promiscuous mode [ 23.371564][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.378611][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.386033][ T293] device bridge_slave_0 entered promiscuous mode [ 23.406537][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.413666][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.421108][ T293] device bridge_slave_1 entered promiscuous mode [ 23.454125][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.461212][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.468616][ T289] device bridge_slave_0 entered promiscuous mode [ 23.477126][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.484185][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.491664][ T289] device bridge_slave_1 entered promiscuous mode [ 23.587952][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.595131][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.602585][ T292] device bridge_slave_0 entered promiscuous mode [ 23.620592][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.627812][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.635235][ T292] device bridge_slave_1 entered promiscuous mode [ 23.662237][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.669372][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.676690][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.683726][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.713769][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.720933][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.728187][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.735235][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.744016][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.751078][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.758331][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.765453][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.791491][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.798532][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.805822][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.812858][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.833659][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.840996][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.848197][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.855659][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.863563][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.871431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.879807][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.887219][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.894505][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.921624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.930008][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.937025][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.971231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.979147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.987257][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.994876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.002409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.010016][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.017360][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.025545][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.032572][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.039950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.048060][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.055168][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.062523][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.070742][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.077746][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.101088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.109256][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.116290][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.124050][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.132241][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.140487][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.163508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.171456][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.180102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.188009][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.196332][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.203369][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.212325][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.232935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.240526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.248232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.256701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.265015][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.272067][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.279782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.288065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.296272][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.303289][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.310729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.318974][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.327463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.335876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.344044][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.351060][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.361911][ T287] device veth0_vlan entered promiscuous mode [ 24.372749][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.380758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.388646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.397267][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.405879][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.413562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.428816][ T287] device veth1_macvtap entered promiscuous mode [ 24.442507][ T288] device veth0_vlan entered promiscuous mode [ 24.449096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.457197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.465429][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.473762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.481881][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.490288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.498356][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.506059][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.514133][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.522310][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.530271][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.538198][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.545920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.554934][ T293] device veth0_vlan entered promiscuous mode [ 24.562150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.570090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.578059][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.586168][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.596052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.603962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.614376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.622717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.631206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.639400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.654790][ T293] device veth1_macvtap entered promiscuous mode [ 24.670095][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.678267][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.686700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.694496][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.703013][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.711498][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.719925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.735171][ T292] device veth0_vlan entered promiscuous mode [ 24.744475][ T288] device veth1_macvtap entered promiscuous mode [ 24.751637][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.759510][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.767683][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.775834][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.783807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.792176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.800350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.808407][ T289] device veth0_vlan entered promiscuous mode [ 24.820977][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 24.830180][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.837688][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.845782][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.853852][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.861397][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.869548][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.877834][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.886203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.894729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.902933][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.913859][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.922158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.934224][ T292] device veth1_macvtap entered promiscuous mode [ 24.950847][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.973385][ T289] device veth1_macvtap entered promiscuous mode [ 24.983867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.997485][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.007483][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.033568][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.059582][ C0] hrtimer: interrupt took 27421 ns [ 25.102628][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.172477][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.240158][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.248748][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.278360][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.317456][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.325856][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.591976][ T327] device syzkaller0 entered promiscuous mode [ 25.851274][ C1] Illegal XDP return value 16128 on prog (id 5) dev veth1_macvtap, expect packet loss! [ 27.392136][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 27.392151][ T28] audit: type=1400 audit(1786165825.911:114): avc: denied { create } for pid=359 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 27.546163][ T28] audit: type=1400 audit(1786165826.051:115): avc: denied { write } for pid=359 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.809451][ T378] device syzkaller0 entered promiscuous mode [ 27.835901][ T365] device syzkaller0 entered promiscuous mode [ 27.870340][ T381] GPL: port 1(erspan0) entered blocking state [ 27.879757][ T381] GPL: port 1(erspan0) entered disabled state [ 27.886532][ T381] device erspan0 entered promiscuous mode [ 27.904654][ T381] GPL: port 1(erspan0) entered blocking state [ 27.910846][ T381] GPL: port 1(erspan0) entered forwarding state [ 28.126497][ T389] GPL: port 1(erspan0) entered disabled state [ 28.181137][ T28] audit: type=1400 audit(1786165826.701:116): avc: denied { read } for pid=393 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.314711][ T399] device batadv_slave_1 entered promiscuous mode [ 28.906898][ T409] device macsec0 entered promiscuous mode [ 29.480952][ T426] device sit0 entered promiscuous mode [ 30.274830][ T445] device syzkaller0 entered promiscuous mode [ 30.927001][ T460] bridge0: port 3(vlan1) entered blocking state [ 30.990068][ T460] bridge0: port 3(vlan1) entered disabled state [ 31.076418][ T460] device vlan1 entered promiscuous mode [ 31.115536][ T460] bridge0: port 3(vlan1) entered blocking state [ 31.121871][ T460] bridge0: port 3(vlan1) entered forwarding state [ 31.204013][ T28] audit: type=1400 audit(1786165829.721:117): avc: denied { create } for pid=468 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 31.271536][ T478] device syzkaller0 entered promiscuous mode [ 32.209478][ T520] device erspan0 left promiscuous mode [ 32.216480][ T520] GPL: port 1(erspan0) entered disabled state [ 32.833631][ T535] tap0: tun_chr_ioctl cmd 1074025677 [ 32.839074][ T535] tap0: linktype set to 778 [ 33.056156][ T545] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 33.819416][ T578] FAULT_INJECTION: forcing a failure. [ 33.819416][ T578] name failslab, interval 1, probability 0, space 0, times 1 [ 33.836966][ T578] CPU: 1 PID: 578 Comm: syz.2.76 Not tainted syzkaller #0 [ 33.844129][ T578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.854201][ T578] Call Trace: [ 33.857477][ T578] [ 33.860405][ T578] __dump_stack+0x21/0x24 [ 33.864739][ T578] dump_stack_lvl+0x110/0x170 [ 33.869457][ T578] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.874483][ T578] dump_stack+0x15/0x24 [ 33.878638][ T578] should_fail_ex+0x3bf/0x510 [ 33.883313][ T578] __should_failslab+0xac/0xf0 [ 33.888079][ T578] should_failslab+0x9/0x20 [ 33.892582][ T578] kmem_cache_alloc_node+0x42/0x330 [ 33.897788][ T578] ? __alloc_skb+0xe8/0x4a0 [ 33.902291][ T578] __alloc_skb+0xe8/0x4a0 [ 33.906619][ T578] __pskb_copy_fclone+0xa7/0xf60 [ 33.911562][ T578] ? kfree+0x6f/0xf0 [ 33.915627][ T578] ? tipc_dest_pop+0x1ce/0x260 [ 33.920391][ T578] tipc_sk_mcast_rcv+0x5e9/0xf10 [ 33.925327][ T578] ? __kasan_check_write+0x14/0x20 [ 33.930438][ T578] ? __cfi_tipc_sk_mcast_rcv+0x10/0x10 [ 33.935894][ T578] ? __pskb_copy_fclone+0x8f3/0xf60 [ 33.941187][ T578] tipc_mcast_xmit+0x1154/0x1790 [ 33.946143][ T578] ? __cfi_tipc_mcast_xmit+0x10/0x10 [ 33.951437][ T578] ? __kasan_check_write+0x14/0x20 [ 33.956571][ T578] ? tipc_msg_build+0x3bf/0xf60 [ 33.961419][ T578] ? __check_object_size+0x90/0x600 [ 33.967268][ T578] ? memcpy+0x56/0x70 [ 33.971426][ T578] ? tipc_msg_build+0x440/0xf60 [ 33.976276][ T578] ? tipc_nametbl_lookup_mcast_nodes+0x3f1/0x960 [ 33.982605][ T578] __tipc_sendmsg+0x1e44/0x2860 [ 33.987463][ T578] ? rht_lock+0x120/0x120 [ 33.991793][ T578] ? __cfi_woken_wake_function+0x10/0x10 [ 33.997431][ T578] ? __cfi_avc_has_perm+0x10/0x10 [ 34.002469][ T578] ? __kasan_check_write+0x14/0x20 [ 34.007579][ T578] ? _raw_spin_lock_bh+0x94/0xf0 [ 34.012516][ T578] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 34.017984][ T578] ? __local_bh_enable_ip+0x58/0x80 [ 34.023194][ T578] ? lock_sock_nested+0x212/0x290 [ 34.028224][ T578] ? __cfi_lock_sock_nested+0x10/0x10 [ 34.033604][ T578] ? stack_trace_save+0xa6/0xf0 [ 34.038484][ T578] ? __stack_depot_save+0x36/0x490 [ 34.043599][ T578] tipc_sendmsg+0x55/0x70 [ 34.047934][ T578] ? __cfi_tipc_sendmsg+0x10/0x10 [ 34.052970][ T578] ____sys_sendmsg+0x5fb/0x9c0 [ 34.057738][ T578] ? __sys_sendmsg_sock+0x40/0x40 [ 34.062763][ T578] ? import_iovec+0x7c/0xb0 [ 34.067263][ T578] ___sys_sendmsg+0x2a2/0x360 [ 34.071940][ T578] ? __sys_sendmsg+0x290/0x290 [ 34.076707][ T578] ? __kasan_check_write+0x14/0x20 [ 34.081811][ T578] ? proc_fail_nth_write+0x180/0x200 [ 34.087093][ T578] ? vfs_write+0xa51/0xd00 [ 34.091510][ T578] ? __fdget+0x19c/0x220 [ 34.095759][ T578] __x64_sys_sendmsg+0x20d/0x2e0 [ 34.100706][ T578] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 34.106173][ T578] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 34.112249][ T578] x64_sys_call+0x171/0x9a0 [ 34.116756][ T578] do_syscall_64+0x4c/0xa0 [ 34.121178][ T578] ? clear_bhb_loop+0x30/0x80 [ 34.125854][ T578] ? clear_bhb_loop+0x30/0x80 [ 34.130552][ T578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.136460][ T578] RIP: 0033:0x7fb1c7b9e0d9 [ 34.140879][ T578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.160581][ T578] RSP: 002b:00007fb1c8995028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.169014][ T578] RAX: ffffffffffffffda RBX: 00007fb1c7e25fa0 RCX: 00007fb1c7b9e0d9 [ 34.176998][ T578] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000008 [ 34.184978][ T578] RBP: 00007fb1c8995090 R08: 0000000000000000 R09: 0000000000000000 [ 34.192954][ T578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 34.200938][ T578] R13: 00007fb1c7e26038 R14: 00007fb1c7e25fa0 R15: 00007ffc5d654428 [ 34.208927][ T578] [ 34.235279][ T578] tipc: Failed to clone mcast rcv buffer [ 34.248364][ T574] device syzkaller0 entered promiscuous mode [ 35.126133][ T627] device syzkaller0 entered promiscuous mode [ 35.211957][ T28] audit: type=1400 audit(1786165833.731:118): avc: denied { write } for pid=633 comm="syz.2.93" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.595392][ T643] device syzkaller0 entered promiscuous mode [ 35.786898][ T656] device syzkaller0 entered promiscuous mode [ 36.008485][ T671] FAULT_INJECTION: forcing a failure. [ 36.008485][ T671] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.052883][ T671] CPU: 0 PID: 671 Comm: syz.3.105 Not tainted syzkaller #0 [ 36.060112][ T671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.070161][ T671] Call Trace: [ 36.073435][ T671] [ 36.076355][ T671] __dump_stack+0x21/0x24 [ 36.080696][ T671] dump_stack_lvl+0x110/0x170 [ 36.085396][ T671] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.090421][ T671] dump_stack+0x15/0x24 [ 36.094572][ T671] should_fail_ex+0x3bf/0x510 [ 36.099244][ T671] should_fail+0xb/0x10 [ 36.103392][ T671] should_fail_usercopy+0x1a/0x20 [ 36.108408][ T671] _copy_to_user+0x1e/0x90 [ 36.112861][ T671] simple_read_from_buffer+0xe9/0x160 [ 36.118233][ T671] proc_fail_nth_read+0x1a6/0x220 [ 36.123260][ T671] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 36.128822][ T671] ? security_file_permission+0x94/0xb0 [ 36.134382][ T671] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 36.139932][ T671] vfs_read+0x286/0x930 [ 36.144113][ T671] ? __cfi_vfs_read+0x10/0x10 [ 36.148794][ T671] ? __kasan_check_write+0x14/0x20 [ 36.153912][ T671] ? mutex_lock+0x93/0x1b0 [ 36.158330][ T671] ? __cfi_mutex_lock+0x10/0x10 [ 36.163182][ T671] ? __fdget_pos+0x2cd/0x380 [ 36.167765][ T671] ? ksys_read+0x70/0x260 [ 36.172089][ T671] ksys_read+0x14a/0x260 [ 36.176328][ T671] ? __cfi_ksys_read+0x10/0x10 [ 36.181087][ T671] ? fput+0x15b/0x1a0 [ 36.185068][ T671] ? debug_smp_processor_id+0x17/0x20 [ 36.190435][ T671] __x64_sys_read+0x7b/0x90 [ 36.194945][ T671] x64_sys_call+0x2f/0x9a0 [ 36.199363][ T671] do_syscall_64+0x4c/0xa0 [ 36.203785][ T671] ? clear_bhb_loop+0x30/0x80 [ 36.208467][ T671] ? clear_bhb_loop+0x30/0x80 [ 36.213145][ T671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.219036][ T671] RIP: 0033:0x7f791475e90e [ 36.223444][ T671] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 36.243044][ T671] RSP: 002b:00007f79156ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.251455][ T671] RAX: ffffffffffffffda RBX: 00007f79156ed6c0 RCX: 00007f791475e90e [ 36.259426][ T671] RDX: 000000000000000f RSI: 00007f79156ed0a0 RDI: 0000000000000003 [ 36.267390][ T671] RBP: 00007f79156ed090 R08: 0000000000000000 R09: 0000000000000000 [ 36.275355][ T671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.283315][ T671] R13: 00007f7914a26038 R14: 00007f7914a25fa0 R15: 00007fff7f0a70f8 [ 36.291284][ T671] [ 36.348280][ T674] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 36.365207][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 37.477975][ T704] device sit0 entered promiscuous mode [ 37.833356][ T28] audit: type=1400 audit(1786165836.351:119): avc: denied { create } for pid=712 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.520085][ T28] audit: type=1400 audit(1786165837.041:120): avc: denied { create } for pid=727 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.697454][ T28] audit: type=1400 audit(1786165837.111:121): avc: denied { ioctl } for pid=727 comm="syz.4.121" path="socket:[16308]" dev="sockfs" ino=16308 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.603125][ T743] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 39.678760][ T743] syzkaller0: linktype set to 1 [ 40.595972][ T28] audit: type=1400 audit(1786165839.111:122): avc: denied { setattr } for pid=761 comm="syz.0.132" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.483891][ T773] GPL: port 1(erspan0) entered blocking state [ 41.539738][ T773] GPL: port 1(erspan0) entered disabled state [ 41.588210][ T773] device erspan0 entered promiscuous mode [ 41.670029][ T772] GPL: port 1(erspan0) entered blocking state [ 41.676134][ T772] GPL: port 1(erspan0) entered forwarding state [ 41.853735][ T791] device syzkaller0 entered promiscuous mode [ 42.024033][ T799] device syzkaller0 entered promiscuous mode [ 42.293520][ T810] device GPL entered promiscuous mode [ 42.294185][ T803] sock: sock_set_timeout: `syz.4.144' (pid 803) tries to set negative timeout [ 43.195615][ T803] device syzkaller0 entered promiscuous mode [ 43.380841][ T825] syz.3.149 (825) used greatest stack depth: 21760 bytes left [ 43.449029][ T28] audit: type=1400 audit(1786165841.961:123): avc: denied { setattr } for pid=832 comm="syz.2.154" path="/net/tun" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 45.039568][ C1] sched: RT throttling activated [ 45.045981][ T839] device macsec0 entered promiscuous mode [ 46.032106][ T838] device syzkaller0 entered promiscuous mode [ 46.043818][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 47.131619][ T850] device syzkaller0 entered promiscuous mode [ 47.697673][ T874] device syzkaller0 entered promiscuous mode [ 48.250651][ T885] device syzkaller0 entered promiscuous mode [ 49.063519][ T28] audit: type=1400 audit(1786165847.571:124): avc: denied { create } for pid=895 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.069780][ T905] device syzkaller0 entered promiscuous mode [ 49.114140][ T912] syz.0.174 (912) used obsolete PPPIOCDETACH ioctl [ 49.343968][ T924] device syzkaller0 entered promiscuous mode [ 49.351666][ T916] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 49.357694][ T916] syzkaller0: linktype set to 1 [ 50.003594][ T956] device syzkaller0 entered promiscuous mode [ 50.098237][ T28] audit: type=1400 audit(1786165848.611:125): avc: denied { create } for pid=963 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.343170][ T973] device syzkaller0 entered promiscuous mode [ 50.481786][ T986] cgroup: fork rejected by pids controller in /syz4 [ 50.669545][ T995] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 50.676315][ T995] syzkaller0: linktype set to 1 [ 51.395882][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.427965][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.437252][ T1009] device bridge_slave_0 entered promiscuous mode [ 51.459837][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.466893][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.474621][ T1009] device bridge_slave_1 entered promiscuous mode [ 51.813049][ T309] device bridge_slave_1 left promiscuous mode [ 51.819214][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.827199][ T309] device bridge_slave_0 left promiscuous mode [ 51.888674][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.950976][ T309] device veth1_macvtap left promiscuous mode [ 51.959686][ T309] device veth0_vlan left promiscuous mode [ 52.104417][ T1027] device sit0 entered promiscuous mode [ 52.389478][ T28] audit: type=1400 audit(1786165850.901:126): avc: denied { create } for pid=1009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.529726][ T28] audit: type=1400 audit(1786165850.961:127): avc: denied { write } for pid=1009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.800034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.836054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.846645][ T28] audit: type=1400 audit(1786165850.961:128): avc: denied { read } for pid=1009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.037356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.147081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.203612][ T28] audit: type=1400 audit(1786165851.121:129): avc: denied { create } for pid=1050 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.299810][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.306879][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.491618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.630038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.681005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.722702][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.729786][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.755773][ T1044] device syzkaller0 entered promiscuous mode [ 54.149108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.167109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.712283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.725074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.733358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.742150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.766209][ T1009] device veth0_vlan entered promiscuous mode [ 54.817564][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.827409][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.846849][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.854492][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.867912][ T1009] device veth1_macvtap entered promiscuous mode [ 54.875264][ T1064] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 54.881556][ T1064] syzkaller0: linktype set to 1 [ 54.919366][ T1070] device sit0 left promiscuous mode [ 55.057782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.066183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.074516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.131329][ T1071] device sit0 entered promiscuous mode [ 55.272618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.281154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.304412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.312885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.357386][ T1110] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 56.363359][ T1110] syzkaller0: linktype set to 1 [ 56.481646][ T28] audit: type=1400 audit(1786165855.001:130): avc: denied { create } for pid=1124 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.697780][ T1141] device syzkaller0 entered promiscuous mode [ 56.952346][ T1162] device lo entered promiscuous mode [ 57.126223][ T1174] device syzkaller0 entered promiscuous mode [ 57.722827][ T1199] device syzkaller0 entered promiscuous mode [ 60.634344][ T1243] device syzkaller0 entered promiscuous mode [ 62.110113][ T28] audit: type=1400 audit(1786165860.601:131): avc: denied { create } for pid=1290 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.432658][ T1311] device sit0 entered promiscuous mode [ 62.629441][ T28] audit: type=1400 audit(1786165861.141:132): avc: denied { create } for pid=1313 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.819434][ T1324] device erspan0 left promiscuous mode [ 62.853827][ T1324] GPL: port 1(erspan0) entered disabled state [ 62.898559][ T1342] device syzkaller0 entered promiscuous mode [ 63.822125][ T1385] device syzkaller0 entered promiscuous mode [ 64.495705][ T1392] device syzkaller0 entered promiscuous mode [ 64.613486][ T1396] device syzkaller0 entered promiscuous mode [ 65.078980][ T1409] cgroup: fork rejected by pids controller in /syz0 [ 65.159094][ T1412] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 65.187229][ T1412] syzkaller0: linktype set to 1 [ 66.494890][ T287] syz-executor (287) used greatest stack depth: 21024 bytes left [ 67.237067][ T1462] device syzkaller0 entered promiscuous mode [ 67.306721][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.364679][ T1456] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.395395][ T1456] device bridge_slave_0 entered promiscuous mode [ 67.513140][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.521266][ T1456] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.530321][ T1456] device bridge_slave_1 entered promiscuous mode [ 67.744722][ T309] device vlan1 left promiscuous mode [ 67.750210][ T309] bridge0: port 3(vlan1) entered disabled state [ 67.756782][ T309] device bridge_slave_1 left promiscuous mode [ 67.762936][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.770374][ T309] device bridge_slave_0 left promiscuous mode [ 67.776509][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.784860][ T309] device veth1_macvtap left promiscuous mode [ 67.791293][ T309] device veth0_vlan left promiscuous mode [ 67.913879][ T1090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.921726][ T1090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.935522][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.949970][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.981768][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.988848][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.009514][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.033694][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.049915][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.056997][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.108281][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.122819][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.159882][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.192729][ T1456] device veth0_vlan entered promiscuous mode [ 68.199020][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.207681][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.216299][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.223980][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.239459][ T1456] device veth1_macvtap entered promiscuous mode [ 68.247851][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.378955][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.390044][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.458825][ T1516] device syzkaller0 entered promiscuous mode [ 68.497599][ T1523] device syzkaller0 entered promiscuous mode [ 70.087106][ T1585] device syzkaller0 entered promiscuous mode [ 70.111800][ T1574] device macsec0 entered promiscuous mode [ 70.856737][ T28] audit: type=1400 audit(1786165869.371:133): avc: denied { create } for pid=1600 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 71.772847][ T28] audit: type=1400 audit(1786165870.291:134): avc: denied { create } for pid=1653 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 74.194594][ T1688] cgroup: fork rejected by pids controller in /syz3 [ 75.256418][ T1721] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.263665][ T1721] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.307210][ T1721] device bridge_slave_0 entered promiscuous mode [ 75.321677][ T1721] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.336297][ T1721] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.351378][ T1721] device bridge_slave_1 entered promiscuous mode [ 75.499730][ T1721] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.506789][ T1721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.514080][ T1721] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.521205][ T1721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.928824][ T309] device bridge_slave_1 left promiscuous mode [ 75.935178][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.945807][ T309] device bridge_slave_0 left promiscuous mode [ 75.956577][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.006686][ T309] device veth1_macvtap left promiscuous mode [ 76.032992][ T28] audit: type=1400 audit(1786165874.551:135): avc: denied { append } for pid=1753 comm="syz.2.453" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.033056][ T309] device veth0_vlan left promiscuous mode [ 76.202860][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.210197][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.243206][ T1765] device syzkaller0 entered promiscuous mode [ 76.258494][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.266329][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.311343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.333225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.353432][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.360520][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.414443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.422904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.431143][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.438172][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.445685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.453917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.489235][ T1781] device syzkaller0 entered promiscuous mode [ 76.496834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.505083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.532709][ T1768] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 76.555954][ T1768] device syzkaller0 entered promiscuous mode [ 76.579374][ T1721] device veth0_vlan entered promiscuous mode [ 76.598485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.607414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.616559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.640694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.667528][ T1721] device veth1_macvtap entered promiscuous mode [ 76.674391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.681938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.689478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.697947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.706382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.740721][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.749946][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.776855][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.794745][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.857907][ T1832] device syzkaller0 entered promiscuous mode [ 79.385126][ T28] audit: type=1400 audit(1786165877.901:136): avc: denied { create } for pid=1886 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 79.795514][ T1910] device syzkaller0 entered promiscuous mode [ 82.519522][ T28] audit: type=1400 audit(1786165881.031:137): avc: denied { setattr } for pid=1954 comm="syz.2.519" path="pipe:[13817]" dev="pipefs" ino=13817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 84.136511][ T2037] device syzkaller0 entered promiscuous mode [ 84.232205][ T2040] device syzkaller0 entered promiscuous mode [ 84.263154][ T2050] device syzkaller0 entered promiscuous mode [ 84.373727][ T2062] FAULT_INJECTION: forcing a failure. [ 84.373727][ T2062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.389830][ T2062] CPU: 1 PID: 2062 Comm: syz.1.538 Not tainted syzkaller #0 [ 84.397219][ T2062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.407278][ T2062] Call Trace: [ 84.410633][ T2062] [ 84.413546][ T2062] __dump_stack+0x21/0x24 [ 84.417865][ T2062] dump_stack_lvl+0x110/0x170 [ 84.422530][ T2062] ? __cfi_dump_stack_lvl+0x8/0x8 [ 84.427535][ T2062] ? has_cap_mac_admin+0x370/0x370 [ 84.432638][ T2062] dump_stack+0x15/0x24 [ 84.436774][ T2062] should_fail_ex+0x3bf/0x510 [ 84.441430][ T2062] should_fail+0xb/0x10 [ 84.445563][ T2062] should_fail_usercopy+0x1a/0x20 [ 84.450578][ T2062] _copy_from_user+0x1e/0xc0 [ 84.455153][ T2062] get_user_ifreq+0x6c/0x180 [ 84.459724][ T2062] sock_ioctl+0x619/0x700 [ 84.464037][ T2062] ? __cfi_sock_ioctl+0x10/0x10 [ 84.468875][ T2062] ? security_file_ioctl+0x95/0xc0 [ 84.473982][ T2062] ? __cfi_sock_ioctl+0x10/0x10 [ 84.478819][ T2062] __se_sys_ioctl+0x12f/0x1b0 [ 84.483475][ T2062] __x64_sys_ioctl+0x7b/0x90 [ 84.488132][ T2062] x64_sys_call+0x58b/0x9a0 [ 84.492623][ T2062] do_syscall_64+0x4c/0xa0 [ 84.497020][ T2062] ? clear_bhb_loop+0x30/0x80 [ 84.501765][ T2062] ? clear_bhb_loop+0x30/0x80 [ 84.506551][ T2062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.512442][ T2062] RIP: 0033:0x7ff29f99e0d9 [ 84.516954][ T2062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.536547][ T2062] RSP: 002b:00007ff2a0844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.544942][ T2062] RAX: ffffffffffffffda RBX: 00007ff29fc25fa0 RCX: 00007ff29f99e0d9 [ 84.552892][ T2062] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 84.560843][ T2062] RBP: 00007ff2a0844090 R08: 0000000000000000 R09: 0000000000000000 [ 84.568831][ T2062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.577055][ T2062] R13: 00007ff29fc26038 R14: 00007ff29fc25fa0 R15: 00007ffdf3b5d318 [ 84.585021][ T2062] [ 84.813225][ T2088] device syzkaller0 entered promiscuous mode [ 84.921801][ T2096] FAULT_INJECTION: forcing a failure. [ 84.921801][ T2096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.974383][ T2096] CPU: 1 PID: 2096 Comm: syz.0.551 Not tainted syzkaller #0 [ 84.981710][ T2096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.991947][ T2096] Call Trace: [ 84.995231][ T2096] [ 84.998171][ T2096] __dump_stack+0x21/0x24 [ 85.002512][ T2096] dump_stack_lvl+0x110/0x170 [ 85.007194][ T2096] ? __cfi_dump_stack_lvl+0x8/0x8 [ 85.012225][ T2096] ? avc_has_extended_perms+0x9d5/0xed0 [ 85.017783][ T2096] dump_stack+0x15/0x24 [ 85.021947][ T2096] should_fail_ex+0x3bf/0x510 [ 85.026632][ T2096] should_fail+0xb/0x10 [ 85.030790][ T2096] should_fail_usercopy+0x1a/0x20 [ 85.035818][ T2096] _copy_from_user+0x1e/0xc0 [ 85.040509][ T2096] vti6_siocdevprivate+0x3b3/0xd90 [ 85.045638][ T2096] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 85.051280][ T2096] ? __cfi_vti6_siocdevprivate+0x10/0x10 [ 85.056926][ T2096] ? full_name_hash+0xba/0xf0 [ 85.061611][ T2096] dev_ifsioc+0xa8b/0xd90 [ 85.065948][ T2096] ? dev_ioctl+0xcf0/0xcf0 [ 85.070370][ T2096] ? __kasan_check_write+0x14/0x20 [ 85.075484][ T2096] ? mutex_lock+0x93/0x1b0 [ 85.079909][ T2096] ? __cfi_mutex_lock+0x10/0x10 [ 85.084770][ T2096] ? dev_get_by_name_rcu+0xe5/0x130 [ 85.089974][ T2096] dev_ioctl+0x5d9/0xcf0 [ 85.094233][ T2096] sock_ioctl+0x673/0x700 [ 85.098578][ T2096] ? __cfi_sock_ioctl+0x10/0x10 [ 85.103443][ T2096] ? security_file_ioctl+0x95/0xc0 [ 85.108562][ T2096] ? __cfi_sock_ioctl+0x10/0x10 [ 85.113421][ T2096] __se_sys_ioctl+0x12f/0x1b0 [ 85.118201][ T2096] __x64_sys_ioctl+0x7b/0x90 [ 85.122889][ T2096] x64_sys_call+0x58b/0x9a0 [ 85.127678][ T2096] do_syscall_64+0x4c/0xa0 [ 85.132110][ T2096] ? clear_bhb_loop+0x30/0x80 [ 85.136795][ T2096] ? clear_bhb_loop+0x30/0x80 [ 85.141474][ T2096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.147361][ T2096] RIP: 0033:0x7fa442b9e0d9 [ 85.151755][ T2096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.171342][ T2096] RSP: 002b:00007fa443b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.179767][ T2096] RAX: ffffffffffffffda RBX: 00007fa442e25fa0 RCX: 00007fa442b9e0d9 [ 85.187732][ T2096] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 85.195685][ T2096] RBP: 00007fa443b45090 R08: 0000000000000000 R09: 0000000000000000 [ 85.203675][ T2096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.211639][ T2096] R13: 00007fa442e26038 R14: 00007fa442e25fa0 R15: 00007ffff624c198 [ 85.219608][ T2096] [ 85.891545][ T2140] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 85.913055][ T24] syzkaller0: tun_net_xmit 90 [ 85.924041][ T2140] syzkaller0: Linktype set failed because interface is up [ 85.933178][ T2151] FAULT_INJECTION: forcing a failure. [ 85.933178][ T2151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.012563][ T2151] CPU: 1 PID: 2151 Comm: syz.0.569 Not tainted syzkaller #0 [ 86.019890][ T2151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.029945][ T2151] Call Trace: [ 86.033305][ T2151] [ 86.036230][ T2151] __dump_stack+0x21/0x24 [ 86.040569][ T2151] dump_stack_lvl+0x110/0x170 [ 86.045269][ T2151] ? __cfi_dump_stack_lvl+0x8/0x8 [ 86.050293][ T2151] dump_stack+0x15/0x24 [ 86.054624][ T2151] should_fail_ex+0x3bf/0x510 [ 86.059299][ T2151] should_fail+0xb/0x10 [ 86.063447][ T2151] should_fail_usercopy+0x1a/0x20 [ 86.068469][ T2151] _copy_to_user+0x1e/0x90 [ 86.072895][ T2151] simple_read_from_buffer+0xe9/0x160 [ 86.078277][ T2151] proc_fail_nth_read+0x1a6/0x220 [ 86.083303][ T2151] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 86.088848][ T2151] ? security_file_permission+0x94/0xb0 [ 86.094396][ T2151] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 86.099938][ T2151] vfs_read+0x286/0x930 [ 86.104091][ T2151] ? __cfi_vfs_read+0x10/0x10 [ 86.108758][ T2151] ? __kasan_check_write+0x14/0x20 [ 86.113867][ T2151] ? mutex_lock+0x93/0x1b0 [ 86.118372][ T2151] ? __cfi_mutex_lock+0x10/0x10 [ 86.123234][ T2151] ? __fdget_pos+0x2cd/0x380 [ 86.127822][ T2151] ? ksys_read+0x70/0x260 [ 86.132147][ T2151] ksys_read+0x14a/0x260 [ 86.136395][ T2151] ? __cfi_ksys_read+0x10/0x10 [ 86.141156][ T2151] ? fpregs_restore_userregs+0x128/0x260 [ 86.146873][ T2151] __x64_sys_read+0x7b/0x90 [ 86.151368][ T2151] x64_sys_call+0x2f/0x9a0 [ 86.155782][ T2151] do_syscall_64+0x4c/0xa0 [ 86.160194][ T2151] ? clear_bhb_loop+0x30/0x80 [ 86.164868][ T2151] ? clear_bhb_loop+0x30/0x80 [ 86.169537][ T2151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.175427][ T2151] RIP: 0033:0x7fa442b5e90e [ 86.179836][ T2151] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.199437][ T2151] RSP: 002b:00007fa443b44fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.207938][ T2151] RAX: ffffffffffffffda RBX: 00007fa443b456c0 RCX: 00007fa442b5e90e [ 86.215912][ T2151] RDX: 000000000000000f RSI: 00007fa443b450a0 RDI: 0000000000000005 [ 86.223876][ T2151] RBP: 00007fa443b45090 R08: 0000000000000000 R09: 0000000000000000 [ 86.231839][ T2151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.239802][ T2151] R13: 00007fa442e26038 R14: 00007fa442e25fa0 R15: 00007ffff624c198 [ 86.247770][ T2151] [ 86.409091][ T2157] device syzkaller0 entered promiscuous mode [ 86.911633][ T2175] device syzkaller0 entered promiscuous mode [ 87.368557][ T28] audit: type=1400 audit(1786165885.881:138): avc: denied { create } for pid=2213 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 87.546587][ T2224] device wg2 entered promiscuous mode [ 87.578125][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.643162][ T2235] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.652144][ T2235] device bridge0 entered promiscuous mode [ 87.720641][ T2243] syz.3.607 uses obsolete (PF_INET,SOCK_PACKET) [ 88.608408][ T2353] device syzkaller0 entered promiscuous mode [ 88.667280][ T2360] @0Ù: renamed from bond_slave_1 [ 89.143806][ T28] audit: type=1400 audit(1786165887.661:139): avc: denied { ioctl } for pid=2390 comm="syz.3.679" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.186540][ T2395] device syzkaller0 entered promiscuous mode [ 89.293910][ T2412] device syzkaller0 entered promiscuous mode [ 89.409356][ T2426] device syzkaller0 entered promiscuous mode [ 89.493940][ T2438] tap0: tun_chr_ioctl cmd 2148553947 [ 89.531069][ T28] audit: type=1400 audit(1786165888.051:140): avc: denied { create } for pid=2443 comm="syz.3.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.531700][ T2444] device sit0 entered promiscuous mode [ 89.707493][ T2468] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 89.715198][ T2468] syzkaller0: linktype set to 0 [ 92.112111][ T2510] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.192152][ T2522] device bridge0 left promiscuous mode [ 92.198728][ T2522] device bridge_slave_1 left promiscuous mode [ 92.214214][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.237429][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.307240][ T2544] device syzkaller0 entered promiscuous mode [ 92.611995][ T2605] device syzkaller0 entered promiscuous mode [ 92.850476][ T2638] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.886026][ T2638] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.893114][ T2638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.711862][ T2760] device syzkaller0 entered promiscuous mode [ 94.728948][ T2815] device syzkaller0 entered promiscuous mode [ 94.806518][ T2834] device syzkaller0 entered promiscuous mode [ 95.244000][ T2909] device syzkaller0 entered promiscuous mode [ 95.264455][ T2905] device syzkaller0 entered promiscuous mode [ 95.656842][ T2941] ================================================================== [ 95.664978][ T2941] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6fa/0x960 [ 95.672795][ T2941] Write of size 48 at addr ffff88811dc77d90 by task syz.4.936/2941 [ 95.680688][ T2941] [ 95.683011][ T2941] CPU: 1 PID: 2941 Comm: syz.4.936 Not tainted syzkaller #0 [ 95.690312][ T2941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.700364][ T2941] Call Trace: [ 95.703647][ T2941] [ 95.706578][ T2941] __dump_stack+0x21/0x24 [ 95.710912][ T2941] dump_stack_lvl+0x110/0x170 [ 95.715594][ T2941] ? __cfi_dump_stack_lvl+0x8/0x8 [ 95.720625][ T2941] ? __bpf_get_stackid+0x6fa/0x960 [ 95.725744][ T2941] print_address_description+0x71/0x200 [ 95.731296][ T2941] print_report+0x4a/0x60 [ 95.735630][ T2941] kasan_report+0x122/0x150 [ 95.740138][ T2941] ? __bpf_get_stackid+0x6fa/0x960 [ 95.745255][ T2941] kasan_check_range+0x249/0x2a0 [ 95.750202][ T2941] ? __bpf_get_stackid+0x6fa/0x960 [ 95.755317][ T2941] memcpy+0x44/0x70 [ 95.759126][ T2941] __bpf_get_stackid+0x6fa/0x960 [ 95.764070][ T2941] bpf_get_stackid_pe+0x2ee/0x400 [ 95.769100][ T2941] bpf_prog_6611c23d801ea08d+0x21/0x36 [ 95.774557][ T2941] bpf_overflow_handler+0x3c7/0x5e0 [ 95.779766][ T2941] ? __cfi_bpf_overflow_handler+0x10/0x10 [ 95.785488][ T2941] ? __this_cpu_preempt_check+0x13/0x20 [ 95.791048][ T2941] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 95.797296][ T2941] __perf_event_overflow+0x458/0x640 [ 95.802588][ T2941] perf_swevent_event+0x243/0x440 [ 95.807621][ T2941] ? perf_tp_event+0xa20/0xa20 [ 95.812387][ T2941] ? __cfi_perf_event_namespaces+0x10/0x10 [ 95.818199][ T2941] ___perf_sw_event+0x3bf/0x500 [ 95.823062][ T2941] ? __cfi____perf_sw_event+0x10/0x10 [ 95.828441][ T2941] ? wakeup_preempt_entity+0xb0/0xb0 [ 95.833733][ T2941] ? perf_event_fork+0x170/0x1c0 [ 95.838677][ T2941] ? __cfi_perf_event_fork+0x10/0x10 [ 95.843972][ T2941] ? uprobe_copy_process+0x125/0x550 [ 95.849267][ T2941] __perf_sw_event+0x134/0x270 [ 95.854041][ T2941] do_user_addr_fault+0xfe9/0x1030 [ 95.859161][ T2941] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 95.864633][ T2941] exc_page_fault+0x51/0xb0 [ 95.869140][ T2941] asm_exc_page_fault+0x27/0x30 [ 95.874000][ T2941] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 95.879726][ T2941] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 95.899357][ T2941] RSP: 0018:ffffc90008d0fcb8 EFLAGS: 00050297 [ 95.905435][ T2941] RAX: 0000000000000189 RBX: 00007fffffffeffd RCX: 0000000000000000 [ 95.913421][ T2941] RDX: ffffc90000d99000 RSI: 000000000003f933 RDI: 000000000003f934 [ 95.921405][ T2941] RBP: ffffc90008d0fdb0 R08: ffff88811e77fc03 R09: 1ffff11023ceff80 [ 95.929387][ T2941] R10: dffffc0000000000 R11: ffffed1023ceff81 R12: 0000000041980000 [ 95.937370][ T2941] R13: 0000000000000000 R14: ffff888153a5d100 R15: dffffc0000000000 [ 95.945353][ T2941] ? kernel_clone+0x2ca/0x7f0 [ 95.950047][ T2941] ? __cfi_kernel_clone+0x10/0x10 [ 95.955083][ T2941] ? __sys_bpf+0x57b/0x850 [ 95.959512][ T2941] __x64_sys_clone+0x193/0x200 [ 95.964282][ T2941] ? __cfi___x64_sys_clone+0x10/0x10 [ 95.969578][ T2941] ? __kasan_check_write+0x14/0x20 [ 95.974693][ T2941] ? fpregs_restore_userregs+0x128/0x260 [ 95.980331][ T2941] ? switch_fpu_return+0xe/0x10 [ 95.985189][ T2941] x64_sys_call+0x990/0x9a0 [ 95.989695][ T2941] do_syscall_64+0x4c/0xa0 [ 95.994200][ T2941] ? clear_bhb_loop+0x30/0x80 [ 95.998872][ T2941] ? clear_bhb_loop+0x30/0x80 [ 96.003545][ T2941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.009530][ T2941] RIP: 0033:0x7fa6a819e0d9 [ 96.013946][ T2941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.033556][ T2941] RSP: 002b:00007fa6a9147fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 96.042017][ T2941] RAX: ffffffffffffffda RBX: 00007fa6a8425fa0 RCX: 00007fa6a819e0d9 [ 96.049999][ T2941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041980000 [ 96.057973][ T2941] RBP: 00007fa6a8235024 R08: 0000000000000000 R09: 0000000000000000 [ 96.065967][ T2941] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 96.074295][ T2941] R13: 00007fa6a8426038 R14: 00007fa6a8425fa0 R15: 00007ffebabdb3d8 [ 96.082284][ T2941] [ 96.085315][ T2941] [ 96.087634][ T2941] Allocated by task 2941: [ 96.091952][ T2941] kasan_set_track+0x4b/0x70 [ 96.096553][ T2941] kasan_save_alloc_info+0x1f/0x30 [ 96.101661][ T2941] __kasan_kmalloc+0x95/0xb0 [ 96.106251][ T2941] __kmalloc_node+0xb2/0x1e0 [ 96.110834][ T2941] bpf_map_area_alloc+0x4b/0xe0 [ 96.115685][ T2941] prealloc_elems_and_freelist+0x8a/0x1e0 [ 96.121418][ T2941] stack_map_alloc+0x398/0x520 [ 96.126199][ T2941] map_create+0x467/0xcf0 [ 96.130529][ T2941] __sys_bpf+0x34e/0x850 [ 96.135105][ T2941] __x64_sys_bpf+0x7c/0x90 [ 96.139521][ T2941] x64_sys_call+0x488/0x9a0 [ 96.144017][ T2941] do_syscall_64+0x4c/0xa0 [ 96.148419][ T2941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.154329][ T2941] [ 96.156635][ T2941] The buggy address belongs to the object at ffff88811dc77d80 [ 96.156635][ T2941] which belongs to the cache kmalloc-64 of size 64 [ 96.170580][ T2941] The buggy address is located 16 bytes inside of [ 96.170580][ T2941] 64-byte region [ffff88811dc77d80, ffff88811dc77dc0) [ 96.183693][ T2941] [ 96.185999][ T2941] The buggy address belongs to the physical page: [ 96.192416][ T2941] page:ffffea0004771dc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11dc77 [ 96.203158][ T2941] flags: 0x4000000000000200(slab|zone=1) [ 96.208782][ T2941] raw: 4000000000000200 ffffea0004cda5c0 dead000000000002 ffff888100042780 [ 96.217349][ T2941] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 96.225995][ T2941] page dumped because: kasan: bad access detected [ 96.232387][ T2941] page_owner tracks the page as allocated [ 96.238092][ T2941] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 486, tgid 485 (syz.0.45), ts 33869095764, free_ts 33842106457 [ 96.255872][ T2941] post_alloc_hook+0x1f5/0x210 [ 96.260901][ T2941] prep_new_page+0x1c/0x110 [ 96.265394][ T2941] get_page_from_freelist+0x2ca9/0x2d20 [ 96.270924][ T2941] __alloc_pages+0x1fa/0x610 [ 96.275505][ T2941] alloc_slab_page+0x6e/0xf0 [ 96.280074][ T2941] new_slab+0x98/0x3e0 [ 96.284122][ T2941] ___slab_alloc+0x70f/0xb70 [ 96.288694][ T2941] __slab_alloc+0x5e/0xa0 [ 96.293007][ T2941] __kmem_cache_alloc_node+0x204/0x2d0 [ 96.298452][ T2941] __kmalloc+0xa4/0x1e0 [ 96.302588][ T2941] kobject_get_path+0xbf/0x200 [ 96.307337][ T2941] kobject_uevent_env+0x29f/0x720 [ 96.312344][ T2941] kobject_uevent+0x1d/0x30 [ 96.316828][ T2941] __kobject_del+0xd3/0x2c0 [ 96.321323][ T2941] kobject_put+0x1ee/0x280 [ 96.325725][ T2941] netdev_queue_update_kobjects+0x3de/0x470 [ 96.331631][ T2941] page last free stack trace: [ 96.336291][ T2941] free_unref_page_prepare+0x80c/0x820 [ 96.341735][ T2941] free_unref_page+0x93/0x530 [ 96.346395][ T2941] __free_pages+0x67/0x100 [ 96.350795][ T2941] __free_slab+0xc7/0x1a0 [ 96.355107][ T2941] __unfreeze_partials+0x15a/0x190 [ 96.360198][ T2941] put_cpu_partial+0xa9/0x100 [ 96.364860][ T2941] __slab_free+0x1c4/0x280 [ 96.369259][ T2941] ___cache_free+0xbf/0xd0 [ 96.373658][ T2941] qlist_free_all+0xc6/0x140 [ 96.378402][ T2941] kasan_quarantine_reduce+0x14a/0x170 [ 96.383839][ T2941] __kasan_slab_alloc+0x24/0x80 [ 96.388671][ T2941] slab_post_alloc_hook+0x4f/0x2d0 [ 96.393777][ T2941] kmem_cache_alloc_node+0x179/0x330 [ 96.399046][ T2941] __alloc_skb+0xe8/0x4a0 [ 96.403355][ T2941] rtmsg_ifinfo_build_skb+0x75/0x180 [ 96.408622][ T2941] unregister_netdevice_many+0x10e4/0x1910 [ 96.414414][ T2941] [ 96.416717][ T2941] Memory state around the buggy address: [ 96.422325][ T2941] ffff88811dc77c80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 96.430452][ T2941] ffff88811dc77d00: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 96.438488][ T2941] >ffff88811dc77d80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 96.446524][ T2941] ^ [ 96.451870][ T2941] ffff88811dc77e00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 96.459908][ T2941] ffff88811dc77e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 96.467950][ T2941] ================================================================== [ 96.475985][ T2941] Disabling lock debugging due to kernel taint [ 96.494498][ T28] audit: type=1400 audit(1786165895.011:141): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 96.538200][ T28] audit: type=1400 audit(1786165895.011:142): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.577036][ T28] audit: type=1400 audit(1786165895.011:143): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.627325][ T28] audit: type=1400 audit(1786165895.011:144): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.648557][ T28] audit: type=1400 audit(1786165895.011:145): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.669123][ T28] audit: type=1400 audit(1786165895.011:146): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.692055][ T28] audit: type=1400 audit(1786165895.011:147): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1