last executing test programs: 144.125357ms ago: executing program 1 (id=2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x400, 0x40242) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000def71200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000100020000000800000000faffffff00", "e7460000102000000000e44400000020e40000008bd02800", [0xde, 0x2]}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r4, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x2d, &(0x7f0000000040), &(0x7f0000000080)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, &(0x7f00000002c0)=ANY=[], 0x200002e6) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) rt_sigtimedwait(&(0x7f0000000440)={[0x5]}, 0x0, &(0x7f0000000000), 0x8) fcntl$setpipe(r6, 0x407, 0x7000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r8 = accept$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000100), 0x0) recvfrom$inet(r8, 0x0, 0x0, 0x2042, 0x0, 0x0) writev(r5, &(0x7f0000000240), 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f00006ad000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000001980)={0x0, &(0x7f00000019c0)=[@wr_crn={0x67, 0x20, {0x0, 0x4}}], 0x20}) ioctl$KVM_RUN(r12, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448e4, 0x0) 76.108387ms ago: executing program 2 (id=3): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r3, 0x0, 0x0) fstat(r3, &(0x7f00000002c0)) getuid() mount$overlay(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x4000, 0x0) 65.240239ms ago: executing program 0 (id=1): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, 0x0, 0x0) fstat(r0, &(0x7f00000002c0)) r1 = getuid() setuid(r1) 39.180383ms ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010101}}, 0x1e) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x202, 0x46) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000300)=""/95}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r6 = eventfd(0x8) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000040)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000440)="6567360f01c8c4e2fd32431e3a260f20e035000400000f22e0c4e2b98c870018000066baf80cb84afab384ef66bafc0cb000ee66b813008ed8ca238566b822018ed066ba400066ed", 0x48}], 0x1, 0xb7, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008200140a08000000800024000000002080003400000000224"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000)) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) 0s ago: executing program 0 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0x1, 0x6, {0x8000000000000001, @struct={0x7}, 0x0, 0x6, 0x6, 0xcd7c, 0x5b, 0x5000000000, 0x4, @usage=0x80, 0x4, 0x5, [0xff, 0x3, 0x62a9, 0x5, 0x3, 0x5]}, {0xffffffffffffffff, @usage=0xffffffffffffffff, 0x0, 0x100, 0x2, 0x8, 0x8, 0x3, 0x400, @usage=0x2, 0x6, 0x7, [0xded, 0xffff, 0x3, 0x2, 0x2, 0x6]}, {0x27fc33ba, @usage=0x4, 0x0, 0x1, 0xec8b, 0x3, 0xffffffffffffffff, 0x2, 0x4, @usage=0xb38, 0xff, 0xfffffeff, [0x400, 0x9147, 0x8, 0x7800000000000000, 0x8, 0xffff]}, {0x400, 0x0, 0x4}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000c40)={r2, 0xe2c6, 0x800}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000340)="f081550000a000180f00000f001e48b8feb65a0d000000000f23d00f21f835200000000f23f8be252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966b8f80cb8c087678eef66bac60fc72a45c194710a000000058a3bc4827dbcae009008f2", 0xffffffffffffffe2}], 0x1, 0x4d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000140)=[@cr4={0x1, 0x40be6}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_clone(0x80000080, &(0x7f0000000180)="4f2f550b5f6c00a5744f86f89b7f03fd00acec28afa22a9d8e3e1b8ee90cc97d944234ed8d840560b53ca5b39600f18fb168a6e9e934aa739929db7b445a2911898f11e91bee99f1b73ad576dd608266857ca3e02fcd9a8f23498c41283aa3b15af693d60483e77da1ea38eb482546c24babed533a14932356f018c3ed98f906f0aa8282167fec1eeeac41360839e282ea69b76a9a98bf081a6dcb11811c6447a56ebf8b9b801de34c34", 0xaa, 0x0, &(0x7f0000000280), &(0x7f00000003c0)="1ee805bb1f671969fddd48fbd6a75214d06a393b04d22ad2dfa00ec3f996ad4ddaac75030f98b29470c734411b10a0894e16064b89338e1875f5ebbf3b8af998f0ba39b1b64aa610f88cdcc19bcc82d927693cb5a03f7d72a73e2d") sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r7, &(0x7f0000000800)='- 1', 0x3) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x4, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x29cc, 0xfe, 0x4, 0x1], 0xc000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r8, &(0x7f0000000440)="87fe1cc39966cfc6f6ed7bff1a4cd47fe4a116c62839e3aaff0c85059df3f3535fdd25cf6f255c9877ad180071d4fa594f9bbedf0ab374ce101776c7f586ea62713c3fa4999b1881170920302e8fe085870bddd842d95d85d4385b677e63e60f9568c51e4ccfa768ec3c7e1bb50559c910191a72150e75750721d80fd69b", 0x7e, 0x4020, &(0x7f0000000580)={0x2, 0x4e20, @rand_addr=0x80000001}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}], 0x1}, 0x4000080) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.331776][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 15.331792][ T36] audit: type=1400 audit(1790916916.940:59): avc: denied { transition } for pid=247 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.335804][ T36] audit: type=1400 audit(1790916916.940:60): avc: denied { noatsecure } for pid=247 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.338729][ T36] audit: type=1400 audit(1790916916.940:61): avc: denied { write } for pid=247 comm="sh" path="pipe:[2461]" dev="pipefs" ino=2461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.341871][ T36] audit: type=1400 audit(1790916916.940:62): avc: denied { rlimitinh } for pid=247 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.344496][ T36] audit: type=1400 audit(1790916916.940:63): avc: denied { siginh } for pid=247 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 22.334168][ T36] audit: type=1400 audit(1790916923.940:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.335269][ T287] cgroup: Unknown subsys name 'net' [ 22.356809][ T36] audit: type=1400 audit(1790916923.940:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.384101][ T36] audit: type=1400 audit(1790916923.970:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.384262][ T287] cgroup: Unknown subsys name 'devices' [ 22.510080][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.515714][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.629319][ T36] audit: type=1400 audit(1790916924.240:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.652496][ T36] audit: type=1400 audit(1790916924.240:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.677279][ T36] audit: type=1400 audit(1790916924.240:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.685760][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.709089][ T36] audit: type=1400 audit(1790916924.320:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.734596][ T36] audit: type=1400 audit(1790916924.320:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.767733][ T36] audit: type=1400 audit(1790916924.370:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.793288][ T36] audit: type=1400 audit(1790916924.370:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.793640][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.807102][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.821480][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.828622][ T294] bridge_slave_0: entered allmulticast mode [ 23.835406][ T294] bridge_slave_0: entered promiscuous mode [ 23.841871][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.848922][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.855985][ T294] bridge_slave_1: entered allmulticast mode [ 23.862286][ T294] bridge_slave_1: entered promiscuous mode [ 23.982808][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.989896][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.996942][ T300] bridge_slave_0: entered allmulticast mode [ 24.003436][ T300] bridge_slave_0: entered promiscuous mode [ 24.011314][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.018377][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.025455][ T300] bridge_slave_1: entered allmulticast mode [ 24.031759][ T300] bridge_slave_1: entered promiscuous mode [ 24.085474][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.092604][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.099783][ T298] bridge_slave_0: entered allmulticast mode [ 24.105932][ T298] bridge_slave_0: entered promiscuous mode [ 24.112153][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.119255][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.126345][ T299] bridge_slave_0: entered allmulticast mode [ 24.132526][ T299] bridge_slave_0: entered promiscuous mode [ 24.141103][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.148140][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.155437][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.162476][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.170515][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.177547][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.184671][ T298] bridge_slave_1: entered allmulticast mode [ 24.191020][ T298] bridge_slave_1: entered promiscuous mode [ 24.197024][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.204393][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.211512][ T299] bridge_slave_1: entered allmulticast mode [ 24.217651][ T299] bridge_slave_1: entered promiscuous mode [ 24.320246][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.327522][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.346749][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.353820][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.369640][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.376688][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.443047][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.450212][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.462573][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.469641][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.477102][ T294] veth0_vlan: entered promiscuous mode [ 24.507063][ T294] veth1_macvtap: entered promiscuous mode [ 24.514895][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.521973][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.540379][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.547417][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.555057][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.562088][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.570071][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.577099][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.624356][ T298] veth0_vlan: entered promiscuous mode [ 24.631269][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.632023][ T300] veth0_vlan: entered promiscuous mode [ 24.664772][ T299] veth0_vlan: entered promiscuous mode [ 24.673704][ T300] veth1_macvtap: entered promiscuous mode [ 24.690867][ T298] veth1_macvtap: entered promiscuous mode [ 24.703535][ T299] veth1_macvtap: entered promiscuous mode [ 24.763609][ T320] syz.0.1 (320): drop_caches: 0 [ 24.771741][ T318] FAULT_INJECTION: forcing a failure. [ 24.771741][ T318] name failslab, interval 1, probability 0, space 0, times 1 [ 24.780925][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.804848][ T318] CPU: 1 UID: 0 PID: 318 Comm: syz.2.3 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 24.804882][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.804901][ T318] Call Trace: [ 24.804907][ T318] [ 24.804915][ T318] __dump_stack+0x21/0x30 [ 24.804957][ T318] dump_stack_lvl+0x140/0x1c0 [ 24.804983][ T318] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.805009][ T318] ? __kasan_check_write+0x18/0x20 [ 24.805029][ T318] ? down_write+0xee/0x2b0 [ 24.805055][ T318] dump_stack+0x19/0x20 [ 24.805079][ T318] should_fail_ex+0x3c2/0x510 [ 24.805103][ T318] should_failslab+0xac/0x100 [ 24.805126][ T318] __kmalloc_cache_noprof+0x41/0x470 [ 24.805146][ T318] ? cgroup_mkdir+0xbe2/0x1600 [ 24.805170][ T318] cgroup_mkdir+0xbe2/0x1600 [ 24.805194][ T318] ? __cfi_cgroup_mkdir+0x10/0x10 [ 24.805217][ T318] kernfs_iop_mkdir+0x1be/0x2d0 [ 24.805241][ T318] vfs_mkdir+0x591/0x810 [ 24.805267][ T318] do_mkdirat+0x240/0x530 [ 24.805295][ T318] ? __cfi_do_mkdirat+0x10/0x10 [ 24.805320][ T318] ? __kasan_check_write+0x18/0x20 [ 24.805354][ T318] ? getname_flags+0x203/0x6b0 [ 24.805375][ T318] ? __kasan_check_write+0x18/0x20 [ 24.805396][ T318] __x64_sys_mkdirat+0x8b/0xa0 [ 24.805423][ T318] x64_sys_call+0x2ba8/0x2ee0 [ 24.805440][ T318] do_syscall_64+0x57/0xf0 [ 24.805459][ T318] ? clear_bhb_loop+0x50/0xa0 [ 24.805485][ T318] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.805509][ T318] RIP: 0033:0x7f0601b9e159 [ 24.805535][ T318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.805551][ T318] RSP: 002b:00007f0602a0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 24.805581][ T318] RAX: ffffffffffffffda RBX: 00007f0601e25fa0 RCX: 00007f0601b9e159 [ 24.805596][ T318] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 24.805609][ T318] RBP: 00007f0601c3506b R08: 0000000000000000 R09: 0000000000000000 [ 24.805621][ T318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.805632][ T318] R13: 00007f0601e26038 R14: 00007f0601e25fa0 R15: 00007ffd42ebc668 [ 24.805647][ T318] [ 24.806672][ T318] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 25.035962][ T318] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 25.044382][ T318] CPU: 1 UID: 0 PID: 318 Comm: syz.2.3 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 25.055581][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.065647][ T318] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 25.071137][ T318] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 17 35 61 00 48 8b bb 08 01 00 00 [ 25.086037][ T331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 25.090751][ T318] RSP: 0018:ffffc9000b807c88 EFLAGS: 00010206 [ 25.090777][ T318] RAX: 0aaa0436962a1000 RBX: 0000000000000000 RCX: ffff8881f6f3acc0 [ 25.090792][ T318] RDX: ffff88810eb39a80 RSI: ffff88810f7f3000 RDI: ffff888100042000 [ 25.121440][ T318] RBP: ffffc9000b807d38 R08: ffffffff81dc1178 R09: ffffffff81e02e5f [ 25.129426][ T318] R10: ffffffff81e05944 R11: ffffffff81e0297e R12: 0000000000000021 [ 25.137400][ T318] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff88810f7f3010 [ 25.139272][ T332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 25.145381][ T318] FS: 00007f0602a0f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.145406][ T318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.145419][ T318] CR2: 00007f84d7ffb000 CR3: 000000010eb30000 CR4: 00000000003526b0 [ 25.145437][ T318] Call Trace: [ 25.180717][ T318] [ 25.183653][ T318] ? __cfi_cgroup_mkdir+0x10/0x10 [ 25.188694][ T318] kernfs_iop_mkdir+0x1be/0x2d0 [ 25.193555][ T318] vfs_mkdir+0x591/0x810 [ 25.197820][ T318] do_mkdirat+0x240/0x530 [ 25.202170][ T318] ? __cfi_do_mkdirat+0x10/0x10 [ 25.207029][ T318] ? __kasan_check_write+0x18/0x20 [ 25.212188][ T318] ? getname_flags+0x203/0x6b0 [ 25.216973][ T318] ? __kasan_check_write+0x18/0x20 [ 25.222100][ T318] __x64_sys_mkdirat+0x8b/0xa0 [ 25.226886][ T318] x64_sys_call+0x2ba8/0x2ee0 [ 25.231581][ T318] do_syscall_64+0x57/0xf0 [ 25.236014][ T318] ? clear_bhb_loop+0x50/0xa0 [ 25.240704][ T318] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.246606][ T318] RIP: 0033:0x7f0601b9e159 [ 25.251032][ T318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.270677][ T318] RSP: 002b:00007f0602a0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 25.279111][ T318] RAX: ffffffffffffffda RBX: 00007f0601e25fa0 RCX: 00007f0601b9e159 [ 25.287094][ T318] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 25.295081][ T318] RBP: 00007f0601c3506b R08: 0000000000000000 R09: 0000000000000000 [ 25.303069][ T318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.311052][ T318] R13: 00007f0601e26038 R14: 00007f0601e25fa0 R15: 00007ffd42ebc668 [ 25.319033][ T318] [ 25.322062][ T318] Modules linked in: [ 25.326365][ T318] ---[ end trace 0000000000000000 ]--- [ 25.363485][ T318] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 25.364188][ T335] binder: Bad value for 'max' [ 25.369035][ T318] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 17 35 61 00 48 8b bb 08 01 00 00 [ 25.437580][ T318] RSP: 0018:ffffc9000b807c88 EFLAGS: 00010206 [ 25.449483][ T318] RAX: 0aaa0436962a1000 RBX: 0000000000000000 RCX: ffff8881f6f3acc0 [ 25.468029][ T318] RDX: ffff88810eb39a80 RSI: ffff88810f7f3000 RDI: ffff888100042000 [ 25.478546][ T318] RBP: ffffc9000b807d38 R08: ffffffff81dc1178 R09: ffffffff81e02e5f [ 25.478552][ T335] syz.2.3 (335): drop_caches: 0 [ 25.478570][ T318] R10: ffffffff81e05944 R11: ffffffff81e0297e R12: 0000000000000021 [ 25.518063][ T318] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff88810f7f3010 [ 25.532516][ T318] FS: 00007f0602a0f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.543952][ T318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.550779][ T318] CR2: 00007f0601beb840 CR3: 000000010eb30000 CR4: 00000000003526b0 [ 25.559063][ T318] Kernel panic - not syncing: Fatal exception [ 25.565249][ T318] Kernel Offset: disabled [ 25.569558][ T318] Rebooting in 86400 seconds..