last executing test programs: 3.509077655s ago: executing program 2 (id=43): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/sys/net/ipv4/conf/syz_tun/rp_filter\x00', 0x1, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r0, 0x12) 3.479937677s ago: executing program 2 (id=45): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x100, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000050) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={0x8, 0x4}) 3.447833258s ago: executing program 2 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) write$binfmt_format(r0, &(0x7f0000000040)='0\x00', 0x2) 3.39982672s ago: executing program 2 (id=51): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 3.340185543s ago: executing program 2 (id=53): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000c80)="1a189c005b17ba0041", 0x9, 0x20004084, 0x0, 0x0) 3.211821919s ago: executing program 2 (id=56): syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}, @period={0x5a, 0x1000, 0x0, 0x401, 0x2, {0x8001, 0x8, 0xff9, 0x7}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/30) 3.146631112s ago: executing program 32 (id=56): syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}, @period={0x5a, 0x1000, 0x0, 0x401, 0x2, {0x8001, 0x8, 0xff9, 0x7}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/30) 1.819868835s ago: executing program 0 (id=103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.723528119s ago: executing program 0 (id=108): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) epoll_create1(0x80000) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="0392d804e0"], 0x0) 866.775289ms ago: executing program 3 (id=141): setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x80000001, 0x6}) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0x0) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 807.262282ms ago: executing program 3 (id=145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f00000000c0)=0x91) 785.757653ms ago: executing program 3 (id=146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) 538.919484ms ago: executing program 3 (id=157): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 386.271092ms ago: executing program 4 (id=165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 334.096574ms ago: executing program 4 (id=169): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 272.698377ms ago: executing program 0 (id=170): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000340)={0x0, 0x92d1, 0x400, 0x2, 0x165}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ec5, 0x8, 0x2, 0x2f8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7dd8, 0x8, 0x1, 0x264, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa92, 0x8, 0x0, 0x67, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x97fb, 0x1000, 0x1, 0x38b}}], 0x4, &(0x7f0000001a40)={0x2e, 0x10, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x0, 0x81c, 0x0, 0x0}}, &(0x7f0000001ac0)) 272.179627ms ago: executing program 4 (id=171): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) 232.208199ms ago: executing program 0 (id=173): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 232.025029ms ago: executing program 4 (id=174): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = mmap$binder(&(0x7f000015f000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x100000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x64, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r0}, @free_buffer={0x40086303, r2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x6, 0x2, 0x24}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}, 0x400}], 0x63, 0x0, &(0x7f0000000500)="0660fde193a32b5337afc512daf7a3a51d02b179eb189c2c8441a2acfbe4a5b02daff7fe539be62f995d3423494fa7019117d171b8df80804d789af784c6483d65bdd3a3da17cd4b6a170353d831633a39e643551fea536f47433d9a793fb67f368448"}) 220.980829ms ago: executing program 1 (id=175): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x0) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)="212a6838fa5de65531da837d823a", 0xe) 193.912051ms ago: executing program 0 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x2, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f0000000040)) 169.395262ms ago: executing program 4 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 159.682962ms ago: executing program 1 (id=178): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 143.165783ms ago: executing program 0 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 132.181313ms ago: executing program 1 (id=180): mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='drop=0', 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 120.690134ms ago: executing program 4 (id=181): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = dup(r0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6, 0x0, 0x1}}], 0x30}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={0x8, 0x4}) 101.866965ms ago: executing program 1 (id=182): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x5, 0xff, 0x0, 0x4}, {0x8, 0x0, 0x81, 0x7c}]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 78.933666ms ago: executing program 1 (id=183): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000340)={0x0, 0x92d1, 0x400, 0x2, 0x165}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ec5, 0x8, 0x2, 0x2f8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7dd8, 0x8, 0x1, 0x264, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa92, 0x8, 0x0, 0x67, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x97fb, 0x1000, 0x1, 0x38b}}], 0x4, &(0x7f0000001a40)={0x2e, 0x10, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x0, 0x81c, 0x0, 0x0}}, &(0x7f0000001ac0)) 78.830376ms ago: executing program 3 (id=184): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000000)) 60.867326ms ago: executing program 3 (id=185): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1) 0s ago: executing program 1 (id=186): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. [ 30.462888][ T36] audit: type=1400 audit(1790107127.310:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.466363][ T286] cgroup: Unknown subsys name 'net' [ 30.485769][ T36] audit: type=1400 audit(1790107127.310:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.513242][ T36] audit: type=1400 audit(1790107127.340:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.513733][ T286] cgroup: Unknown subsys name 'devices' [ 30.634086][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.639824][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.735736][ T36] audit: type=1400 audit(1790107127.580:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.759226][ T36] audit: type=1400 audit(1790107127.580:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.784023][ T36] audit: type=1400 audit(1790107127.580:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.815487][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.824446][ T36] audit: type=1400 audit(1790107127.670:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.850087][ T36] audit: type=1400 audit(1790107127.670:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.868295][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.876527][ T36] audit: type=1400 audit(1790107127.690:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.910214][ T36] audit: type=1400 audit(1790107127.690:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.756342][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.763555][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.770747][ T293] bridge_slave_0: entered allmulticast mode [ 31.777270][ T293] bridge_slave_0: entered promiscuous mode [ 31.793332][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.800416][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.807710][ T293] bridge_slave_1: entered allmulticast mode [ 31.814214][ T293] bridge_slave_1: entered promiscuous mode [ 31.831350][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.838509][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.845862][ T294] bridge_slave_0: entered allmulticast mode [ 31.852340][ T294] bridge_slave_0: entered promiscuous mode [ 31.860699][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.867842][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.875184][ T294] bridge_slave_1: entered allmulticast mode [ 31.881928][ T294] bridge_slave_1: entered promiscuous mode [ 31.926419][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.933551][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.940740][ T295] bridge_slave_0: entered allmulticast mode [ 31.947216][ T295] bridge_slave_0: entered promiscuous mode [ 31.956487][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.963730][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.970844][ T295] bridge_slave_1: entered allmulticast mode [ 31.977411][ T295] bridge_slave_1: entered promiscuous mode [ 32.073060][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.080240][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.087395][ T296] bridge_slave_0: entered allmulticast mode [ 32.093789][ T296] bridge_slave_0: entered promiscuous mode [ 32.100488][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.107598][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.114874][ T296] bridge_slave_1: entered allmulticast mode [ 32.121191][ T296] bridge_slave_1: entered promiscuous mode [ 32.196066][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.203175][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.210495][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.217566][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.233008][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.240098][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.247455][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.254628][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.267645][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.274933][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.282268][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.289337][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.339067][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.346209][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.353641][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.360697][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.380213][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.388097][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.395595][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.403462][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.411867][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.419132][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.444655][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.451897][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.459555][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.467635][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.476453][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.483563][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.496421][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.503568][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.567523][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.574638][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.583087][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.590169][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.603200][ T293] veth0_vlan: entered promiscuous mode [ 32.619227][ T295] veth0_vlan: entered promiscuous mode [ 32.634330][ T294] veth0_vlan: entered promiscuous mode [ 32.654798][ T294] veth1_macvtap: entered promiscuous mode [ 32.667933][ T296] veth0_vlan: entered promiscuous mode [ 32.676325][ T295] veth1_macvtap: entered promiscuous mode [ 32.683307][ T293] veth1_macvtap: entered promiscuous mode [ 32.720078][ T296] veth1_macvtap: entered promiscuous mode [ 32.735852][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.837789][ T319] FAULT_INJECTION: forcing a failure. [ 32.837789][ T319] name failslab, interval 1, probability 0, space 0, times 1 [ 32.851992][ T319] CPU: 1 UID: 0 PID: 319 Comm: syz.3.4 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 32.852030][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.852054][ T319] Call Trace: [ 32.852062][ T319] [ 32.852071][ T319] __dump_stack+0x21/0x30 [ 32.852119][ T319] dump_stack_lvl+0x140/0x1c0 [ 32.852151][ T319] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.852183][ T319] ? get_random_u32+0x2ef/0x4e0 [ 32.852219][ T319] ? __cfi_get_random_u32+0x10/0x10 [ 32.852254][ T319] dump_stack+0x19/0x20 [ 32.852283][ T319] should_fail_ex+0x3c2/0x510 [ 32.852311][ T319] should_failslab+0xac/0x100 [ 32.852339][ T319] kmem_cache_alloc_node_noprof+0x45/0x420 [ 32.852364][ T319] ? do_kmem_cache_create+0x21c/0x550 [ 32.852401][ T319] do_kmem_cache_create+0x21c/0x550 [ 32.852428][ T319] __kmem_cache_create_args+0x16f/0x310 [ 32.852455][ T319] copy_pid_ns+0x47a/0xa60 [ 32.852487][ T319] ? __cfi_copy_pid_ns+0x10/0x10 [ 32.852529][ T319] ? __kasan_check_write+0x18/0x20 [ 32.852555][ T319] create_new_namespaces+0x275/0x6f0 [ 32.852592][ T319] unshare_nsproxy_namespaces+0x124/0x180 [ 32.852634][ T319] ksys_unshare+0x4f9/0x920 [ 32.852664][ T319] ? fput+0x1a4/0x230 [ 32.852695][ T319] ? __cfi_ksys_unshare+0x10/0x10 [ 32.852726][ T319] ? __kasan_check_write+0x18/0x20 [ 32.852751][ T319] __x64_sys_unshare+0x3c/0x50 [ 32.852781][ T319] x64_sys_call+0x2998/0x2ee0 [ 32.852803][ T319] do_syscall_64+0x57/0xf0 [ 32.852824][ T319] ? clear_bhb_loop+0x50/0xa0 [ 32.852852][ T319] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.852889][ T319] RIP: 0033:0x7f3e8519e159 [ 32.852913][ T319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.852932][ T319] RSP: 002b:00007f3e83be3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 32.852966][ T319] RAX: ffffffffffffffda RBX: 00007f3e85425fa0 RCX: 00007f3e8519e159 [ 32.852984][ T319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 32.852999][ T319] RBP: 00007f3e8523506b R08: 0000000000000000 R09: 0000000000000000 [ 32.853012][ T319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.853025][ T319] R13: 00007f3e85426038 R14: 00007f3e85425fa0 R15: 00007fff4ea0c208 [ 32.853042][ T319] [ 32.853063][ T319] __kmem_cache_create_args(pid_3) failed with error -22 [ 33.101024][ T325] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.123143][ T319] CPU: 1 UID: 0 PID: 319 Comm: syz.3.4 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 33.123178][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.123193][ T319] Call Trace: [ 33.123201][ T319] [ 33.123210][ T319] __dump_stack+0x21/0x30 [ 33.123249][ T319] dump_stack_lvl+0x140/0x1c0 [ 33.123282][ T319] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.123313][ T319] ? mutex_unlock+0x90/0x240 [ 33.123340][ T319] ? __cfi_mutex_unlock+0x10/0x10 [ 33.123368][ T319] dump_stack+0x19/0x20 [ 33.123399][ T319] __kmem_cache_create_args+0x244/0x310 [ 33.123426][ T319] copy_pid_ns+0x47a/0xa60 [ 33.123459][ T319] ? __cfi_copy_pid_ns+0x10/0x10 [ 33.123490][ T319] ? __kasan_check_write+0x18/0x20 [ 33.123515][ T319] create_new_namespaces+0x275/0x6f0 [ 33.123551][ T319] unshare_nsproxy_namespaces+0x124/0x180 [ 33.123586][ T319] ksys_unshare+0x4f9/0x920 [ 33.123617][ T319] ? fput+0x1a4/0x230 [ 33.123649][ T319] ? __cfi_ksys_unshare+0x10/0x10 [ 33.123681][ T319] ? __kasan_check_write+0x18/0x20 [ 33.123712][ T319] __x64_sys_unshare+0x3c/0x50 [ 33.123742][ T319] x64_sys_call+0x2998/0x2ee0 [ 33.123763][ T319] do_syscall_64+0x57/0xf0 [ 33.123784][ T319] ? clear_bhb_loop+0x50/0xa0 [ 33.123813][ T319] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.123840][ T319] RIP: 0033:0x7f3e8519e159 [ 33.123858][ T319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.123876][ T319] RSP: 002b:00007f3e83be3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 33.123902][ T319] RAX: ffffffffffffffda RBX: 00007f3e85425fa0 RCX: 00007f3e8519e159 [ 33.123919][ T319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 33.123933][ T319] RBP: 00007f3e8523506b R08: 0000000000000000 R09: 0000000000000000 [ 33.123946][ T319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.123959][ T319] R13: 00007f3e85426038 R14: 00007f3e85425fa0 R15: 00007fff4ea0c208 [ 33.123978][ T319] [ 33.419159][ T335] FAULT_INJECTION: forcing a failure. [ 33.419159][ T335] name fail_futex, interval 1, probability 0, space 0, times 1 [ 33.432267][ T335] CPU: 0 UID: 0 PID: 335 Comm: syz.0.9 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 33.432303][ T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.432317][ T335] Call Trace: [ 33.432325][ T335] [ 33.432333][ T335] __dump_stack+0x21/0x30 [ 33.432372][ T335] dump_stack_lvl+0x140/0x1c0 [ 33.432404][ T335] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.432437][ T335] dump_stack+0x19/0x20 [ 33.432468][ T335] should_fail_ex+0x3c2/0x510 [ 33.432496][ T335] should_fail+0xf/0x20 [ 33.432521][ T335] get_futex_key+0x178/0x940 [ 33.432550][ T335] ? __cfi_futex_setup_timer+0x10/0x10 [ 33.432577][ T335] ? __cfi_get_futex_key+0x10/0x10 [ 33.432604][ T335] ? futex_lock_pi+0x843/0xa70 [ 33.432639][ T335] futex_lock_pi+0x241/0xa70 [ 33.432673][ T335] ? __cfi_futex_lock_pi+0x10/0x10 [ 33.432705][ T335] ? plist_del+0x3f0/0x410 [ 33.432726][ T335] ? __kasan_check_write+0x18/0x20 [ 33.432749][ T335] ? wake_up_q+0x10a/0x1c0 [ 33.432781][ T335] ? __cfi_futex_wake_mark+0x10/0x10 [ 33.432803][ T335] ? bpf_lsm_file_permission+0xd/0x20 [ 33.432835][ T335] ? vfs_write+0xbcf/0xfd0 [ 33.432861][ T335] do_futex+0x270/0x510 [ 33.432900][ T335] ? __cfi_do_futex+0x10/0x10 [ 33.432930][ T335] ? mutex_unlock+0x90/0x240 [ 33.432959][ T335] __se_sys_futex+0x13c/0x320 [ 33.432989][ T335] ? fput+0x1a4/0x230 [ 33.433018][ T335] ? __x64_sys_futex+0x110/0x110 [ 33.433050][ T335] ? __kasan_check_write+0x18/0x20 [ 33.433073][ T335] __x64_sys_futex+0xe9/0x110 [ 33.433102][ T335] x64_sys_call+0x227f/0x2ee0 [ 33.433123][ T335] do_syscall_64+0x57/0xf0 [ 33.433144][ T335] ? clear_bhb_loop+0x50/0xa0 [ 33.433170][ T335] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.433237][ T335] RIP: 0033:0x7f33f7b9e159 [ 33.433259][ T335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.433277][ T335] RSP: 002b:00007f33f89e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 33.433301][ T335] RAX: ffffffffffffffda RBX: 00007f33f7e25fa0 RCX: 00007f33f7b9e159 [ 33.433318][ T335] RDX: 0000000000000080 RSI: 0000000000000006 RDI: 0000000000000000 [ 33.433331][ T335] RBP: 00007f33f7c3506b R08: 0000000000000000 R09: 00000000ffffffec [ 33.433345][ T335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.433362][ T335] R13: 00007f33f7e26038 R14: 00007f33f7e25fa0 R15: 00007ffc199a4918 [ 33.433380][ T335] [ 33.997694][ T371] FAULT_INJECTION: forcing a failure. [ 33.997694][ T371] name failslab, interval 1, probability 0, space 0, times 0 [ 34.011742][ T371] CPU: 0 UID: 0 PID: 371 Comm: syz.3.27 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 34.011777][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.011792][ T371] Call Trace: [ 34.011800][ T371] [ 34.011808][ T371] __dump_stack+0x21/0x30 [ 34.011847][ T371] dump_stack_lvl+0x140/0x1c0 [ 34.011878][ T371] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.011913][ T371] dump_stack+0x19/0x20 [ 34.011942][ T371] should_fail_ex+0x3c2/0x510 [ 34.011971][ T371] should_failslab+0xac/0x100 [ 34.011998][ T371] __kmalloc_cache_noprof+0x41/0x470 [ 34.012022][ T371] ? refill_pi_state_cache+0xa9/0x210 [ 34.012058][ T371] refill_pi_state_cache+0xa9/0x210 [ 34.012091][ T371] futex_requeue+0x1f3/0x1490 [ 34.012113][ T371] ? __cfi_futex_wake_mark+0x10/0x10 [ 34.012134][ T371] ? __cfi_futex_requeue+0x10/0x10 [ 34.012167][ T371] ? __kasan_check_read+0x15/0x20 [ 34.012192][ T371] ? futex_wait+0x2b8/0x7c0 [ 34.012215][ T371] ? vfs_write+0xbcf/0xfd0 [ 34.012240][ T371] do_futex+0x354/0x510 [ 34.012271][ T371] ? __cfi_do_futex+0x10/0x10 [ 34.012309][ T371] ? mutex_unlock+0x90/0x240 [ 34.012338][ T371] __se_sys_futex+0x13c/0x320 [ 34.012369][ T371] ? fput+0x1a4/0x230 [ 34.012400][ T371] ? __x64_sys_futex+0x110/0x110 [ 34.012438][ T371] ? __kasan_check_write+0x18/0x20 [ 34.012467][ T371] __x64_sys_futex+0xe9/0x110 [ 34.012498][ T371] x64_sys_call+0x227f/0x2ee0 [ 34.012519][ T371] do_syscall_64+0x57/0xf0 [ 34.012539][ T371] ? clear_bhb_loop+0x50/0xa0 [ 34.012567][ T371] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.012594][ T371] RIP: 0033:0x7f3e8519e159 [ 34.012613][ T371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.012632][ T371] RSP: 002b:00007f3e83be3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 34.012656][ T371] RAX: ffffffffffffffda RBX: 00007f3e85425fa0 RCX: 00007f3e8519e159 [ 34.012673][ T371] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 34.012686][ T371] RBP: 00007f3e8523506b R08: 0000200000048000 R09: 0000000000000000 [ 34.012699][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.012711][ T371] R13: 00007f3e85426038 R14: 00007f3e85425fa0 R15: 00007fff4ea0c208 [ 34.012730][ T371] [ 34.301757][ T380] MTRR 1 not used [ 34.519250][ T418] batadv_slave_1: entered promiscuous mode [ 34.527469][ T417] batadv_slave_1: left promiscuous mode [ 34.564071][ T423] ======================================================= [ 34.564071][ T423] WARNING: The mand mount option has been deprecated and [ 34.564071][ T423] and is ignored by this kernel. Remove the mand [ 34.564071][ T423] option from the mount to silence this warning. [ 34.564071][ T423] ======================================================= [ 34.674794][ T46] bridge_slave_1: left allmulticast mode [ 34.680685][ T46] bridge_slave_1: left promiscuous mode [ 34.694963][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.710622][ T46] bridge_slave_0: left allmulticast mode [ 34.722802][ T46] bridge_slave_0: left promiscuous mode [ 34.750248][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.917015][ T46] veth1_macvtap: left promiscuous mode [ 34.927387][ T46] veth0_vlan: left promiscuous mode [ 35.046767][ T454] rust_binder: 453:454 got transaction to invalid handle 2 [ 35.054455][ T454] rust_binder: 453:454 transaction call to 0:0 failed ENOENT, code 0 size 96-24 [ 35.145284][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.163265][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.170497][ T444] bridge_slave_0: entered allmulticast mode [ 35.202088][ T444] bridge_slave_0: entered promiscuous mode [ 35.215693][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.227997][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.236146][ T444] bridge_slave_1: entered allmulticast mode [ 35.244936][ T444] bridge_slave_1: entered promiscuous mode [ 35.321526][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.328671][ T444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.337963][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.345063][ T444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.360908][ T478] kvm: kvm [477]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x4100c0 [ 35.401109][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.409644][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.438487][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.445690][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.459000][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.466394][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.482693][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 35.482711][ T36] audit: type=1400 audit(1790107132.330:177): avc: denied { ioctl } for pid=487 comm="syz.0.81" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.525947][ T36] audit: type=1400 audit(1790107132.330:178): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 35.565311][ T444] veth0_vlan: entered promiscuous mode [ 35.588614][ T36] audit: type=1400 audit(1790107132.430:179): avc: denied { read } for pid=496 comm="syz.3.85" path="socket:[5189]" dev="sockfs" ino=5189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.598403][ T444] veth1_macvtap: entered promiscuous mode [ 35.661598][ T36] audit: type=1400 audit(1790107132.500:180): avc: denied { unmount } for pid=444 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.711675][ T36] audit: type=1400 audit(1790107132.540:181): avc: denied { unlink } for pid=500 comm="syz.0.87" name="#3" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.735095][ T36] audit: type=1400 audit(1790107132.540:182): avc: denied { mount } for pid=500 comm="syz.0.87" name="/" dev="overlay" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.758541][ T36] audit: type=1400 audit(1790107132.580:183): avc: denied { read } for pid=504 comm="syz.4.57" path="socket:[4647]" dev="sockfs" ino=4647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.783780][ T36] audit: type=1400 audit(1790107132.630:184): avc: denied { read write } for pid=507 comm="syz.0.89" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.807326][ T36] audit: type=1400 audit(1790107132.630:185): avc: denied { open } for pid=507 comm="syz.0.89" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.830843][ T65] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 35.874758][ T509] fido_id[509]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.889163][ T36] audit: type=1400 audit(1790107132.720:186): avc: denied { create } for pid=510 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 35.976287][ T517] netlink: 'syz.0.93': attribute type 27 has an invalid length. [ 36.045631][ T528] capability: warning: `syz.1.98' uses 32-bit capabilities (legacy support in use) [ 36.445342][ T579] FAULT_INJECTION: forcing a failure. [ 36.445342][ T579] name failslab, interval 1, probability 0, space 0, times 0 [ 36.459387][ T579] CPU: 0 UID: 0 PID: 579 Comm: syz.1.120 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 36.459425][ T579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.459441][ T579] Call Trace: [ 36.459448][ T579] [ 36.459457][ T579] __dump_stack+0x21/0x30 [ 36.459497][ T579] dump_stack_lvl+0x140/0x1c0 [ 36.459530][ T579] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.459565][ T579] dump_stack+0x19/0x20 [ 36.459609][ T579] should_fail_ex+0x3c2/0x510 [ 36.459639][ T579] should_failslab+0xac/0x100 [ 36.459667][ T579] __kmalloc_cache_noprof+0x41/0x470 [ 36.459692][ T579] ? refill_pi_state_cache+0xa9/0x210 [ 36.459726][ T579] refill_pi_state_cache+0xa9/0x210 [ 36.459760][ T579] futex_requeue+0x1f3/0x1490 [ 36.459783][ T579] ? __cfi_futex_wake_mark+0x10/0x10 [ 36.459804][ T579] ? __cfi_futex_requeue+0x10/0x10 [ 36.459839][ T579] ? __kasan_check_read+0x15/0x20 [ 36.459863][ T579] ? futex_wait+0x2b8/0x7c0 [ 36.459887][ T579] ? vfs_write+0xbcf/0xfd0 [ 36.459911][ T579] do_futex+0x354/0x510 [ 36.459943][ T579] ? __cfi_do_futex+0x10/0x10 [ 36.459973][ T579] ? mutex_unlock+0x90/0x240 [ 36.460002][ T579] __se_sys_futex+0x13c/0x320 [ 36.460034][ T579] ? fput+0x1a4/0x230 [ 36.460065][ T579] ? __x64_sys_futex+0x110/0x110 [ 36.460098][ T579] ? __kasan_check_write+0x18/0x20 [ 36.460122][ T579] __x64_sys_futex+0xe9/0x110 [ 36.460159][ T579] x64_sys_call+0x227f/0x2ee0 [ 36.460181][ T579] do_syscall_64+0x57/0xf0 [ 36.460202][ T579] ? clear_bhb_loop+0x50/0xa0 [ 36.460230][ T579] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.460258][ T579] RIP: 0033:0x7fc5db79e159 [ 36.460277][ T579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.460295][ T579] RSP: 002b:00007fc5dc5fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.460318][ T579] RAX: ffffffffffffffda RBX: 00007fc5dba25fa0 RCX: 00007fc5db79e159 [ 36.460335][ T579] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 36.460349][ T579] RBP: 00007fc5db83506b R08: 0000200000048000 R09: 0000000000000000 [ 36.460363][ T579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.460376][ T579] R13: 00007fc5dba26038 R14: 00007fc5dba25fa0 R15: 00007fff96c33238 [ 36.460394][ T579] [ 36.629751][ T585] MTRR 1 not used [ 36.648831][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.851558][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 36.858013][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.868882][ T65] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.881011][ T65] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.890432][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.903735][ T65] usb 1-1: Product: syz [ 36.908155][ T65] usb 1-1: Manufacturer: syz [ 36.920300][ T65] usb 1-1: SerialNumber: syz [ 37.130363][ T65] usb 1-1: 0:2 : does not exist [ 37.156045][ T65] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 37.177869][ T65] usb 1-1: USB disconnect, device number 2 [ 37.191750][ T634] netlink: 'syz.3.146': attribute type 27 has an invalid length. [ 37.193513][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.275265][ T310] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 37.328094][ T643] fido_id[643]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.526897][ T669] kvm: kvm [668]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x4100c0 [ 37.749156][ T695] rust_binder: 693:695 got transaction to invalid handle 2 [ 37.757425][ T695] rust_binder: 693:695 transaction call to 0:0 failed ENOENT, code 0 size 96-24 [ 37.917453][ T297] ------------[ cut here ]------------ [ 37.923036][ T297] WARNING: CPU: 1 PID: 297 at drivers/block/ublk_drv.c:1583 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 37.933999][ T297] Modules linked in: [ 37.937939][ T297] CPU: 1 UID: 0 PID: 297 Comm: kworker/u8:3 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 37.950158][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.960416][ T297] Workqueue: iou_exit io_ring_exit_work [ 37.966065][ T297] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 37.972540][ T297] Code: 5d e9 93 3c 53 02 cc e8 7d 05 33 fe 0f 0b eb e3 e8 74 05 33 fe 0f 0b eb da e8 6b 05 33 fe 0f 0b e9 4d fe ff ff e8 5f 05 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 37.992575][ T297] RSP: 0000:ffffc9000b6f7990 EFLAGS: 00010293 [ 37.998695][ T297] RAX: ffffffff83547531 RBX: 1ffff11021a74945 RCX: ffff88810b684c00 [ 38.007039][ T297] RDX: 0000000000000000 RSI: 000000000000004b RDI: 0000000000000104 [ 38.015092][ T297] RBP: ffffc9000b6f79e0 R08: 0000000000000003 R09: 0000000000000004 [ 38.023389][ T297] R10: 0000000000000000 R11: ffffffff83546510 R12: ffff888120c35f00 [ 38.031422][ T297] R13: ffff88810d3a4a00 R14: ffff888120f498a8 R15: ffff888120f498b8 [ 38.039647][ T297] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 38.048653][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.055405][ T297] CR2: 000000110c30010a CR3: 0000000120b26000 CR4: 00000000003526b0 [ 38.063449][ T297] Call Trace: [ 38.066756][ T297] [ 38.069717][ T297] ublk_ch_uring_cmd+0x6f/0xa0 [ 38.074736][ T297] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 38.080754][ T297] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 38.086757][ T297] ? io_uring_cancel_generic+0x6eb/0x6eb [ 38.092655][ T297] io_ring_exit_work+0x23d/0x83b [ 38.097689][ T297] ? finish_task_switch+0x139/0x770 [ 38.103026][ T297] ? __cfi_io_ring_exit_work+0x10/0x10 [ 38.108535][ T297] ? kick_pool+0xb9/0x540 [ 38.113056][ T297] process_scheduled_works+0x7f7/0x1060 [ 38.118651][ T297] worker_thread+0xc99/0x13f0 [ 38.123413][ T297] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 38.129218][ T297] ? __kasan_check_read+0x15/0x20 [ 38.134341][ T297] kthread+0x2c7/0x360 [ 38.138460][ T297] ? __cfi_worker_thread+0x10/0x10 [ 38.143665][ T297] ? __cfi_kthread+0x10/0x10 [ 38.148441][ T297] ret_from_fork+0x64/0xa0 [ 38.152952][ T297] ? __cfi_kthread+0x10/0x10 [ 38.157951][ T297] ret_from_fork_asm+0x1a/0x30 [ 38.162974][ T297] [ 38.166029][ T297] ---[ end trace 0000000000000000 ]---