------------[ cut here ]------------ WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x33f/0x3d0, CPU#1: syz-executor.4/50955 Modules linked in: CPU: 1 UID: 0 PID: 50955 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251106 #1 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:nsproxy_ns_active_get+0x33f/0x3d0 Code: ab ff 90 0f 0b 90 eb ee e8 de a2 ab ff 90 0f 0b 90 e9 3f fd ff ff e8 d0 a2 ab ff 90 0f 0b 90 e9 92 fd ff ff e8 c2 a2 ab ff 90 <0f> 0b 90 e9 e5 fd ff ff e8 b4 a2 ab ff 90 0f 0b 90 e9 38 fe ff ff RSP: 0018:ffff888052807e08 EFLAGS: 00010216 RAX: 0000000000000cf6 RBX: ffff88804a3b3e38 RCX: ffffc90006abf000 RDX: 0000000000040000 RSI: ffffffff81c92b5e RDI: 0000000000000001 RBP: ffff888015654001 R08: 0000000000000001 R09: ffffed1002aca941 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888015e0a1c0 R13: 0000000000000000 R14: ffff888057843780 R15: ffff888052807e98 FS: 00007f0bbbedb700(0000) GS:ffff8880e549c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0bbea79018 CR3: 0000000057be1000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: switch_task_namespaces+0x3d/0x110 __do_sys_setns+0x6b0/0x19a0 do_syscall_64+0xbf/0x430 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0bbe967107 Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0bbbedb128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 RAX: ffffffffffffffda RBX: 00007f0bbea78f60 RCX: 00007f0bbe967107 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd8d46734f R14: 00007f0bbbedb300 R15: 0000000000022000 irq event stamp: 603 hardirqs last enabled at (611): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (620): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (564): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (549): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x35b/0x3d0, CPU#1: syz-executor.4/50955 Modules linked in: CPU: 1 UID: 0 PID: 50955 Comm: syz-executor.4 Tainted: G W 6.18.0-rc4-next-20251106 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:nsproxy_ns_active_get+0x35b/0x3d0 Code: 0f 0b 90 e9 92 fd ff ff e8 c2 a2 ab ff 90 0f 0b 90 e9 e5 fd ff ff e8 b4 a2 ab ff 90 0f 0b 90 e9 38 fe ff ff e8 a6 a2 ab ff 90 <0f> 0b 90 e9 8b fe ff ff e8 98 a2 ab ff 90 0f 0b 90 e9 de fe ff ff RSP: 0018:ffff888052807e08 EFLAGS: 00010216 RAX: 000000000001e731 RBX: ffff88804a3b3e38 RCX: ffffc90006abf000 RDX: 0000000000040000 RSI: ffffffff81c92b7a RDI: 0000000000000001 RBP: ffff88801f80e001 R08: 0000000000000001 R09: ffffed1003f01c17 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888015e0a1c0 R13: 0000000000000000 R14: ffff888057843780 R15: ffff888052807e98 FS: 00007f0bbbedb700(0000) GS:ffff8880e549c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f0bbea79018 CR3: 0000000057be1000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: switch_task_namespaces+0x3d/0x110 __do_sys_setns+0x6b0/0x19a0 do_syscall_64+0xbf/0x430 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0bbe967107 Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0bbbedb128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 RAX: ffffffffffffffda RBX: 00007f0bbea78f60 RCX: 00007f0bbe967107 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd8d46734f R14: 00007f0bbbedb300 R15: 0000000000022000 irq event stamp: 1035 hardirqs last enabled at (1043): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (1052): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (564): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (549): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x369/0x3d0, CPU#1: syz-executor.4/50955 Modules linked in: CPU: 1 UID: 0 PID: 50955 Comm: syz-executor.4 Tainted: G W 6.18.0-rc4-next-20251106 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:nsproxy_ns_active_get+0x369/0x3d0 Code: 0f 0b 90 e9 e5 fd ff ff e8 b4 a2 ab ff 90 0f 0b 90 e9 38 fe ff ff e8 a6 a2 ab ff 90 0f 0b 90 e9 8b fe ff ff e8 98 a2 ab ff 90 <0f> 0b 90 e9 de fe ff ff e8 8a a2 ab ff 90 0f 0b 90 e9 31 ff ff ff RSP: 0018:ffff888052807e08 EFLAGS: 00010246 RAX: 0000000000040000 RBX: ffff88804a3b3af8 RCX: ffffc90006abf000 RDX: 0000000000040000 RSI: ffffffff81c92b88 RDI: 0000000000000001 RBP: ffff88801aceb001 R08: 0000000000000001 R09: ffffed100359d652 R10: 0000000000000001 R11: 0000000000000001 R12: ffff888015e828c0 R13: 0000000000000000 R14: ffff888057843780 R15: ffff888052807e98 FS: 00007f0bbbedb700(0000) GS:ffff8880e549c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa28203a542 CR3: 0000000057be1000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: switch_task_namespaces+0x3d/0x110 __do_sys_setns+0x6b0/0x19a0 do_syscall_64+0xbf/0x430 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0bbe967107 Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0bbbedb128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0bbe967107 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0bbbedb6bc R13: 000000000000000e R14: 00007f0bbbedb300 R15: 0000000000022000 irq event stamp: 1827 hardirqs last enabled at (1837): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (1844): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (1566): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (1511): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- cgroup: fork rejected by pids controller in /syz5 cgroup: fork rejected by pids controller in /syz2 netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. sr 1:0:0:0: [sr0] tag#0 unaligned transfer blk_print_req_error: 6 callbacks suppressed I/O error, dev sr0, sector 8 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 Buffer I/O error on dev sr0, logical block 8, lost async page write Buffer I/O error on dev sr0, logical block 9, lost async page write Buffer I/O error on dev sr0, logical block 10, lost async page write Buffer I/O error on dev sr0, logical block 11, lost async page write Buffer I/O error on dev sr0, logical block 12, lost async page write Buffer I/O error on dev sr0, logical block 13, lost async page write Buffer I/O error on dev sr0, logical block 14, lost async page write Buffer I/O error on dev sr0, logical block 15, lost async page write Buffer I/O error on dev sr0, logical block 16, lost async page write Buffer I/O error on dev sr0, logical block 17, lost async page write sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 135 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 262 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 389 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 516 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 643 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 770 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 897 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 1024 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer I/O error, dev sr0, sector 1151 op 0x1:(WRITE) flags 0x104000 phys_seg 127 prio class 2 sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 unaligned transfer sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fe 00 00 0a 00 netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. audit: type=1326 audit(1762417382.298:112): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55874 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bbe965b19 code=0x0