Warning: Permanently added '[localhost]:34299' (ED25519) to the list of known hosts. [ 50.942491][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 50.942509][ T42] audit: type=1400 audit(1785599708.268:138): avc: denied { execute } for pid=5729 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.953844][ T42] audit: type=1400 audit(1785599708.268:139): avc: denied { execute_no_trans } for pid=5729 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/08/01 15:55:09 parsed 1 programs 2026/08/01 15:55:09 serving rpc on tcp://46551 [ 52.001967][ T42] audit: type=1400 audit(1785599709.328:140): avc: denied { node_bind } for pid=5729 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.010048][ T42] audit: type=1400 audit(1785599709.328:141): avc: denied { node_bind } for pid=5729 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 55.082238][ T42] audit: type=1400 audit(1785599712.408:142): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.090715][ T42] audit: type=1400 audit(1785599712.418:143): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.093889][ T5739] cgroup: Unknown subsys name 'net' [ 55.105418][ T42] audit: type=1400 audit(1785599712.428:144): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.273693][ T5739] cgroup: Unknown subsys name 'cpuset' [ 55.279839][ T5739] cgroup: Unknown subsys name 'rlimit' [ 55.507600][ T42] audit: type=1400 audit(1785599712.828:145): avc: denied { setattr } for pid=5739 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.515389][ T42] audit: type=1400 audit(1785599712.828:146): avc: denied { create } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.522096][ T42] audit: type=1400 audit(1785599712.828:147): avc: denied { write } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.585414][ T5742] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 56.702633][ T5739] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.600745][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 58.600759][ T42] audit: type=1400 audit(1785599715.928:159): avc: denied { execmem } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.608860][ T42] audit: type=1400 audit(1785599715.928:160): avc: denied { read } for pid=5747 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.615577][ T42] audit: type=1400 audit(1785599715.928:161): avc: denied { open } for pid=5747 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.624203][ T42] audit: type=1400 audit(1785599715.928:162): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.696966][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.700828][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.725693][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.728251][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.737718][ T42] audit: type=1400 audit(1785599716.058:163): avc: denied { mount } for pid=5747 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.746578][ T42] audit: type=1400 audit(1785599716.058:164): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/syzkaller.OT21dh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.755685][ T42] audit: type=1400 audit(1785599716.058:165): avc: denied { mount } for pid=5747 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.763226][ T42] audit: type=1400 audit(1785599716.058:166): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/syzkaller.OT21dh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.773437][ T42] audit: type=1400 audit(1785599716.058:167): avc: denied { mounton } for pid=5747 comm="syz-executor" path="/syzkaller.OT21dh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 58.783612][ T42] audit: type=1400 audit(1785599716.078:168): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.795916][ T5747] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.731421][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.735859][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.739087][ T5797] bridge_slave_0: entered allmulticast mode [ 60.743007][ T5797] bridge_slave_0: entered promiscuous mode [ 60.749135][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.751373][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.753650][ T5797] bridge_slave_1: entered allmulticast mode [ 60.756642][ T5797] bridge_slave_1: entered promiscuous mode [ 60.784251][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.790595][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.806835][ T5797] team0: Port device team_slave_0 added [ 60.811991][ T5797] team0: Port device team_slave_1 added [ 60.835755][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.838110][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.846991][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.852116][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.854523][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.862859][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.889563][ T5797] hsr_slave_0: entered promiscuous mode [ 60.892289][ T5797] hsr_slave_1: entered promiscuous mode [ 61.020279][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.030230][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.034743][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.040812][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.043574][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.048975][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.052128][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.055931][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.133879][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.155581][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.166488][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.170019][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.183553][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.186681][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.462062][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.495878][ T5797] veth0_vlan: entered promiscuous mode [ 61.505647][ T5797] veth1_vlan: entered promiscuous mode [ 61.531703][ T5797] veth0_macvtap: entered promiscuous mode [ 61.536802][ T5797] veth1_macvtap: entered promiscuous mode [ 61.550875][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.560096][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.609235][ T5755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.615385][ T5755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.619268][ T5755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.625877][ T5755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.679572][ T5755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.783991][ T5755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.849439][ T5755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.956464][ T5755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.979364][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.982604][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.985409][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.989436][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.992173][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/08/01 15:55:19 executed programs: 0 [ 62.562658][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.566278][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.569134][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.572666][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.575339][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.983250][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.986365][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.989647][ T5872] bridge_slave_0: entered allmulticast mode [ 62.993627][ T5872] bridge_slave_0: entered promiscuous mode [ 62.998813][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.001921][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.004995][ T5872] bridge_slave_1: entered allmulticast mode [ 63.009733][ T5872] bridge_slave_1: entered promiscuous mode [ 63.037844][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.044299][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.071056][ T5872] team0: Port device team_slave_0 added [ 63.075357][ T5872] team0: Port device team_slave_1 added [ 63.099669][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.102886][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.113332][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.119480][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.122361][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.132517][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.169498][ T5872] hsr_slave_0: entered promiscuous mode [ 63.172621][ T5872] hsr_slave_1: entered promiscuous mode [ 63.175605][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 63.178131][ T5872] Cannot create hsr debugfs directory [ 64.313926][ T5755] bridge_slave_1: left allmulticast mode [ 64.316386][ T5755] bridge_slave_1: left promiscuous mode [ 64.320406][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.330419][ T5755] bridge_slave_0: left allmulticast mode [ 64.332879][ T5755] bridge_slave_0: left promiscuous mode [ 64.335280][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.362558][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 64.362575][ T42] audit: type=1400 audit(1785599721.688:189): avc: denied { write } for pid=5890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.374795][ T42] audit: type=1400 audit(1785599721.698:190): avc: denied { create } for pid=5890 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.384767][ T42] audit: type=1400 audit(1785599721.698:191): avc: denied { write } for pid=5890 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2018 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.394343][ T42] audit: type=1400 audit(1785599721.698:192): avc: denied { append } for pid=5890 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2018 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.428453][ T42] audit: type=1400 audit(1785599721.748:193): avc: denied { write } for pid=5893 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.435341][ T42] audit: type=1400 audit(1785599721.748:194): avc: denied { unlink } for pid=5893 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2018 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.490705][ T5755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.495375][ T5755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.499808][ T5755] bond0 (unregistering): Released all slaves [ 64.507779][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 64.595597][ T42] audit: type=1400 audit(1785599721.918:195): avc: denied { write } for pid=5896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.599211][ T64] Bluetooth: hci0: command tx timeout [ 64.620224][ T5755] hsr_slave_0: left promiscuous mode [ 64.622902][ T5755] hsr_slave_1: left promiscuous mode [ 64.625439][ T5755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.628276][ T5755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.632188][ T5755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.634595][ T5755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.642919][ T5755] veth1_macvtap: left promiscuous mode [ 64.645057][ T5755] veth0_macvtap: left promiscuous mode [ 64.646901][ T5755] veth1_vlan: left promiscuous mode [ 64.649917][ T42] audit: type=1400 audit(1785599721.978:196): avc: denied { write } for pid=5899 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.652966][ T5755] veth0_vlan: left promiscuous mode [ 64.805149][ T5755] team0 (unregistering): Port device team_slave_1 removed [ 64.815618][ T5755] team0 (unregistering): Port device team_slave_0 removed [ 64.911798][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.994209][ T42] audit: type=1400 audit(1785599722.318:197): avc: denied { write } for pid=5902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.043225][ T42] audit: type=1400 audit(1785599722.368:198): avc: denied { write } for pid=5905 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.203030][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.213238][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.217199][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.227365][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.231290][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.239212][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.242795][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.249584][ T5872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.315504][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.334834][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.343771][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.346495][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.355914][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.358323][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.772426][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.800364][ T5872] veth0_vlan: entered promiscuous mode [ 65.806941][ T5872] veth1_vlan: entered promiscuous mode [ 65.823335][ T5872] veth0_macvtap: entered promiscuous mode [ 65.827272][ T5872] veth1_macvtap: entered promiscuous mode [ 65.838234][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.846658][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.889968][ T5761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.893272][ T5761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.907808][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.909303][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.910782][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.913852][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.941646][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.944100][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.977966][ T5928] FAULT_INJECTION: forcing a failure. [ 65.977966][ T5928] name failslab, interval 1, probability 0, space 0, times 1 [ 65.982424][ T5928] CPU: 2 UID: 0 PID: 5928 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 65.982443][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.982458][ T5928] Call Trace: [ 65.982472][ T5928] [ 65.982477][ T5928] dump_stack_lvl+0x100/0x190 [ 65.982500][ T5928] should_fail_ex.cold+0x5/0xa [ 65.982518][ T5928] should_failslab+0xc2/0x120 [ 65.982537][ T5928] __kmalloc_cache_noprof+0x91/0x6c0 [ 65.982561][ T5928] ? vkms_plane_duplicate_state+0x87/0x130 [ 65.982582][ T5928] vkms_plane_duplicate_state+0x87/0x130 [ 65.982599][ T5928] drm_atomic_get_plane_state+0x279/0x7d0 [ 65.982618][ T5928] drm_atomic_add_affected_planes+0x2fe/0x450 [ 65.982639][ T5928] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 65.982658][ T5928] vkms_crtc_atomic_check+0x12a/0x7c0 [ 65.982682][ T5928] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 65.982700][ T5928] drm_atomic_helper_check_planes+0x4dc/0x900 [ 65.982721][ T5928] drm_atomic_helper_check+0xae/0x190 [ 65.982738][ T5928] vkms_atomic_check+0x1d9/0x250 [ 65.982753][ T5928] ? __pfx_vkms_atomic_check+0x10/0x10 [ 65.982769][ T5928] drm_atomic_check_only+0x19ea/0x31b0 [ 65.982793][ T5928] drm_atomic_commit+0x132/0x300 [ 65.982807][ T5928] ? __pfx_drm_atomic_commit+0x10/0x10 [ 65.982822][ T5928] ? __pfx___drm_printfn_info+0x10/0x10 [ 65.982841][ T5928] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 65.982858][ T5928] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 65.982877][ T5928] drm_atomic_helper_update_plane+0x314/0x400 [ 65.982897][ T5928] __setplane_atomic+0x22d/0x350 [ 65.982919][ T5928] drm_mode_cursor_universal+0x5e9/0xe20 [ 65.982942][ T5928] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 65.982965][ T5928] ? __pfx_drm_lease_held+0x10/0x10 [ 65.982981][ T5928] ? modeset_lock+0x114/0x6d0 [ 65.982998][ T5928] drm_mode_cursor_common+0x308/0x970 [ 65.983018][ T5928] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 65.983035][ T5928] ? avc_has_extended_perms+0x33a/0x1080 [ 65.983062][ T5928] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 65.983082][ T5928] drm_mode_cursor_ioctl+0xd4/0x110 [ 65.983100][ T5928] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 65.983117][ T5928] ? do_raw_spin_lock+0x128/0x260 [ 65.983136][ T5928] ? find_held_lock+0x2b/0x80 [ 65.983151][ T5928] ? do_raw_spin_unlock+0x145/0x1e0 [ 65.983172][ T5928] drm_ioctl_kernel+0x1f3/0x3e0 [ 65.983186][ T5928] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 65.983205][ T5928] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 65.983227][ T5928] drm_ioctl+0x5e6/0xc60 [ 65.983245][ T5928] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 65.983263][ T5928] ? __pfx_drm_ioctl+0x10/0x10 [ 65.983277][ T5928] ? __seccomp_filter+0x89d/0x1140 [ 65.983306][ T5928] ? selinux_file_ioctl+0x13b/0x290 [ 65.983327][ T5928] ? selinux_file_ioctl+0xb6/0x290 [ 65.983349][ T5928] ? __pfx_drm_ioctl+0x10/0x10 [ 65.983373][ T5928] __x64_sys_ioctl+0x18e/0x210 [ 65.983396][ T5928] do_syscall_64+0x115/0x870 [ 65.983414][ T5928] ? clear_bhb_loop+0x40/0x90 [ 65.983432][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.983446][ T5928] RIP: 0033:0x7f52ae99e019 [ 65.983459][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.983471][ T5928] RSP: 002b:00007ffd9a1fd898 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.983486][ T5928] RAX: ffffffffffffffda RBX: 00007f52aec25fa0 RCX: 00007f52ae99e019 [ 65.983495][ T5928] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 65.983503][ T5928] RBP: 00007ffd9a1fd900 R08: 0000000000000000 R09: 0000000000000000 [ 65.983511][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.983518][ T5928] R13: 00007f52aec25fac R14: 00007f52aec25fa0 R15: 00007f52aec25fa0 [ 65.983537][ T5928] [ 66.136095][ T5929] FAULT_INJECTION: forcing a failure. [ 66.136095][ T5929] name failslab, interval 1, probability 0, space 0, times 0 [ 66.140404][ T5929] CPU: 2 UID: 0 PID: 5929 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 66.140419][ T5929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.140425][ T5929] Call Trace: [ 66.140429][ T5929] [ 66.140433][ T5929] dump_stack_lvl+0x100/0x190 [ 66.140452][ T5929] should_fail_ex.cold+0x5/0xa [ 66.140466][ T5929] should_failslab+0xc2/0x120 [ 66.140484][ T5929] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 66.140499][ T5929] ? __get_vm_area_node+0x101/0x330 [ 66.140516][ T5929] __get_vm_area_node+0x101/0x330 [ 66.140534][ T5929] __vmalloc_node_range_noprof+0x228/0x1630 [ 66.140553][ T5929] ? system_heap_vmap+0x227/0x5d0 [ 66.140577][ T5929] ? system_heap_vmap+0x227/0x5d0 [ 66.140593][ T5929] ? system_heap_vmap+0xab/0x5d0 [ 66.140611][ T5929] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 66.140631][ T5929] ? __pfx___mutex_lock+0x10/0x10 [ 66.140651][ T5929] ? check_prev_add+0xfe/0xe60 [ 66.140664][ T5929] ? check_prev_add+0xfe/0xe60 [ 66.140680][ T5929] ? system_heap_vmap+0x227/0x5d0 [ 66.140691][ T5929] __vmalloc_node_noprof+0xad/0xf0 [ 66.140706][ T5929] ? system_heap_vmap+0x227/0x5d0 [ 66.140719][ T5929] system_heap_vmap+0x227/0x5d0 [ 66.140734][ T5929] ? __pfx_system_heap_vmap+0x10/0x10 [ 66.140746][ T5929] ? trace_contention_end+0x126/0x160 [ 66.140764][ T5929] dma_buf_vmap+0x275/0x430 [ 66.140775][ T5929] ? __pfx_system_heap_vmap+0x10/0x10 [ 66.140787][ T5929] ? __pfx_dma_buf_vmap+0x10/0x10 [ 66.140802][ T5929] drm_gem_shmem_vmap_locked+0x113/0x860 [ 66.140820][ T5929] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 66.140839][ T5929] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 66.140855][ T5929] drm_gem_vmap_locked+0xc8/0x1c0 [ 66.140872][ T5929] drm_gem_vmap+0x4a/0xa0 [ 66.140888][ T5929] drm_gem_fb_vmap+0xc7/0x450 [ 66.140903][ T5929] vkms_prepare_fb+0x87/0xb0 [ 66.140916][ T5929] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 66.140929][ T5929] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 66.140944][ T5929] drm_atomic_helper_commit+0x191/0x380 [ 66.140958][ T5929] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 66.140972][ T5929] drm_atomic_commit+0x230/0x300 [ 66.140984][ T5929] ? __pfx_drm_atomic_commit+0x10/0x10 [ 66.141019][ T5929] ? __pfx___drm_printfn_info+0x10/0x10 [ 66.141035][ T5929] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 66.141048][ T5929] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 66.141062][ T5929] drm_atomic_helper_update_plane+0x314/0x400 [ 66.141078][ T5929] __setplane_atomic+0x22d/0x350 [ 66.141094][ T5929] drm_mode_cursor_universal+0x5e9/0xe20 [ 66.141112][ T5929] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 66.141140][ T5929] ? __pfx_drm_lease_held+0x10/0x10 [ 66.141153][ T5929] ? modeset_lock+0x114/0x6d0 [ 66.141170][ T5929] drm_mode_cursor_common+0x308/0x970 [ 66.141187][ T5929] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 66.141200][ T5929] ? avc_has_extended_perms+0x33a/0x1080 [ 66.141221][ T5929] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 66.141237][ T5929] drm_mode_cursor_ioctl+0xd4/0x110 [ 66.141252][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.141265][ T5929] ? do_raw_spin_lock+0x128/0x260 [ 66.141280][ T5929] ? find_held_lock+0x2b/0x80 [ 66.141292][ T5929] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.141309][ T5929] drm_ioctl_kernel+0x1f3/0x3e0 [ 66.141320][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.141335][ T5929] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 66.141351][ T5929] drm_ioctl+0x5e6/0xc60 [ 66.141364][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.141379][ T5929] ? __pfx_drm_ioctl+0x10/0x10 [ 66.141390][ T5929] ? __seccomp_filter+0x89d/0x1140 [ 66.141411][ T5929] ? selinux_file_ioctl+0x13b/0x290 [ 66.141427][ T5929] ? selinux_file_ioctl+0xb6/0x290 [ 66.141443][ T5929] ? __pfx_drm_ioctl+0x10/0x10 [ 66.141456][ T5929] __x64_sys_ioctl+0x18e/0x210 [ 66.141472][ T5929] do_syscall_64+0x115/0x870 [ 66.141485][ T5929] ? clear_bhb_loop+0x40/0x90 [ 66.141499][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.141509][ T5929] RIP: 0033:0x7f52ae99e019 [ 66.141519][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.141529][ T5929] RSP: 002b:00007ffd9a1fd898 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.141540][ T5929] RAX: ffffffffffffffda RBX: 00007f52aec25fa0 RCX: 00007f52ae99e019 [ 66.141546][ T5929] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 66.141553][ T5929] RBP: 00007ffd9a1fd900 R08: 0000000000000000 R09: 0000000000000000 [ 66.141559][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.141564][ T5929] R13: 00007f52aec25fac R14: 00007f52aec25fa0 R15: 00007f52aec25fa0 [ 66.141578][ T5929] [ 66.141685][ T5929] syz.0.18: vmalloc error: size 264, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 66.325558][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 66.325581][ T5929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.325592][ T5929] Call Trace: [ 66.325600][ T5929] [ 66.325607][ T5929] dump_stack_lvl+0x100/0x190 [ 66.325636][ T5929] warn_alloc.cold+0x94/0xa8 [ 66.325656][ T5929] ? __pfx_warn_alloc+0x10/0x10 [ 66.325671][ T5929] ? __kasan_kmalloc+0x8a/0xb0 [ 66.325702][ T5929] ? __get_vm_area_node+0x208/0x330 [ 66.325732][ T5929] __vmalloc_node_range_noprof+0xccd/0x1630 [ 66.325765][ T5929] ? system_heap_vmap+0x227/0x5d0 [ 66.325787][ T5929] ? system_heap_vmap+0xab/0x5d0 [ 66.325817][ T5929] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 66.325842][ T5929] ? __pfx___mutex_lock+0x10/0x10 [ 66.325865][ T5929] ? check_prev_add+0xfe/0xe60 [ 66.325885][ T5929] ? check_prev_add+0xfe/0xe60 [ 66.325913][ T5929] ? system_heap_vmap+0x227/0x5d0 [ 66.325932][ T5929] __vmalloc_node_noprof+0xad/0xf0 [ 66.325957][ T5929] ? system_heap_vmap+0x227/0x5d0 [ 66.325981][ T5929] system_heap_vmap+0x227/0x5d0 [ 66.326008][ T5929] ? __pfx_system_heap_vmap+0x10/0x10 [ 66.326024][ T5929] ? trace_contention_end+0x126/0x160 [ 66.326051][ T5929] dma_buf_vmap+0x275/0x430 [ 66.326070][ T5929] ? __pfx_system_heap_vmap+0x10/0x10 [ 66.326090][ T5929] ? __pfx_dma_buf_vmap+0x10/0x10 [ 66.326118][ T5929] drm_gem_shmem_vmap_locked+0x113/0x860 [ 66.326149][ T5929] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 66.326181][ T5929] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 66.326209][ T5929] drm_gem_vmap_locked+0xc8/0x1c0 [ 66.326238][ T5929] drm_gem_vmap+0x4a/0xa0 [ 66.326263][ T5929] drm_gem_fb_vmap+0xc7/0x450 [ 66.326289][ T5929] vkms_prepare_fb+0x87/0xb0 [ 66.326312][ T5929] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 66.326334][ T5929] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 66.326361][ T5929] drm_atomic_helper_commit+0x191/0x380 [ 66.326388][ T5929] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 66.326412][ T5929] drm_atomic_commit+0x230/0x300 [ 66.326434][ T5929] ? __pfx_drm_atomic_commit+0x10/0x10 [ 66.326453][ T5929] ? __pfx___drm_printfn_info+0x10/0x10 [ 66.326478][ T5929] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 66.326500][ T5929] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 66.326525][ T5929] drm_atomic_helper_update_plane+0x314/0x400 [ 66.326553][ T5929] __setplane_atomic+0x22d/0x350 [ 66.326584][ T5929] drm_mode_cursor_universal+0x5e9/0xe20 [ 66.326616][ T5929] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 66.326647][ T5929] ? __pfx_drm_lease_held+0x10/0x10 [ 66.326669][ T5929] ? modeset_lock+0x114/0x6d0 [ 66.326691][ T5929] drm_mode_cursor_common+0x308/0x970 [ 66.326719][ T5929] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 66.326741][ T5929] ? avc_has_extended_perms+0x33a/0x1080 [ 66.326776][ T5929] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 66.326808][ T5929] drm_mode_cursor_ioctl+0xd4/0x110 [ 66.326832][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.326854][ T5929] ? do_raw_spin_lock+0x128/0x260 [ 66.326877][ T5929] ? find_held_lock+0x2b/0x80 [ 66.326898][ T5929] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.326925][ T5929] drm_ioctl_kernel+0x1f3/0x3e0 [ 66.326945][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.326969][ T5929] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 66.326996][ T5929] drm_ioctl+0x5e6/0xc60 [ 66.327016][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.327039][ T5929] ? __pfx_drm_ioctl+0x10/0x10 [ 66.327057][ T5929] ? __seccomp_filter+0x89d/0x1140 [ 66.327089][ T5929] ? selinux_file_ioctl+0x13b/0x290 [ 66.327115][ T5929] ? selinux_file_ioctl+0xb6/0x290 [ 66.327139][ T5929] ? __pfx_drm_ioctl+0x10/0x10 [ 66.327160][ T5929] __x64_sys_ioctl+0x18e/0x210 [ 66.327187][ T5929] do_syscall_64+0x115/0x870 [ 66.327206][ T5929] ? clear_bhb_loop+0x40/0x90 [ 66.327229][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.327247][ T5929] RIP: 0033:0x7f52ae99e019 [ 66.327263][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.327279][ T5929] RSP: 002b:00007ffd9a1fd898 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.327296][ T5929] RAX: ffffffffffffffda RBX: 00007f52aec25fa0 RCX: 00007f52ae99e019 [ 66.327307][ T5929] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 66.327318][ T5929] RBP: 00007ffd9a1fd900 R08: 0000000000000000 R09: 0000000000000000 [ 66.327328][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.327338][ T5929] R13: 00007f52aec25fac R14: 00007f52aec25fa0 R15: 00007f52aec25fa0 [ 66.327362][ T5929] [ 66.327370][ T5929] Mem-Info: [ 66.518819][ T5929] active_anon:38957 inactive_anon:0 isolated_anon:0 [ 66.518819][ T5929] active_file:0 inactive_file:57087 isolated_file:0 [ 66.518819][ T5929] unevictable:1768 dirty:125 writeback:0 [ 66.518819][ T5929] slab_reclaimable:11693 slab_unreclaimable:55428 [ 66.518819][ T5929] mapped:10372 shmem:2322 pagetables:878 [ 66.518819][ T5929] sec_pagetables:298 bounce:0 [ 66.518819][ T5929] kernel_misc_reclaimable:0 [ 66.518819][ T5929] free:496895 free_pcp:11848 free_cma:0 [ 66.535402][ T5929] Node 0 active_anon:155828kB inactive_anon:0kB active_file:0kB inactive_file:228148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41488kB dirty:488kB writeback:0kB shmem:5752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11360kB pagetables:3348kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 66.546940][ T5929] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 66.557585][ T5929] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 66.567371][ T5929] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 66.571183][ T5929] Node 0 DMA32 free:311048kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:155828kB inactive_anon:0kB active_file:0kB inactive_file:228148kB unevictable:3536kB writepending:488kB zspages:0kB present:2080628kB managed:1255188kB mlocked:0kB bounce:0kB free_pcp:47284kB local_pcp:8232kB free_cma:0kB [ 66.586034][ T5929] lowmem_reserve[]: 0 0 0 0 0 [ 66.588143][ T5929] Node 1 Normal free:1661172kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:428kB local_pcp:144kB free_cma:0kB [ 66.600231][ T5929] lowmem_reserve[]: 0 0 0 0 0 [ 66.602281][ T5929] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 66.607266][ T5929] Node 0 DMA32: 286*4kB (UME) 396*8kB (UM) 7*16kB (UME) 100*32kB (UME) 12*64kB (UM) 7*128kB (UM) 2*256kB (ME) 4*512kB (ME) 4*1024kB (UME) 4*2048kB (ME) 70*4096kB (UM) = 310856kB [ 66.614284][ T5929] Node 1 Normal: 6*4kB (UM) 2*8kB (U) 3*16kB (UM) 7*32kB (UM) 7*64kB (UM) 4*128kB (UM) 2*256kB (U) 3*512kB (M) 1*1024kB (U) 1*2048kB (M) 404*4096kB (M) = 1661176kB [ 66.620632][ T5929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 66.624616][ T5929] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 66.628482][ T5929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 66.632457][ T5929] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 66.636282][ T5929] 59404 total pagecache pages [ 66.638290][ T5929] 0 pages in swap cache [ 66.640189][ T5929] Free swap = 124996kB [ 66.641959][ T5929] Total swap = 124996kB [ 66.643728][ T5929] 1048443 pages RAM [ 66.644965][ T5929] 0 pages HighMem/MovableOnly [ 66.646667][ T5929] 285335 pages reserved [ 66.648282][ T5929] 0 pages cma reserved [ 66.650014][ T5929] ------------[ cut here ]------------ [ 66.651925][ T5929] ret [ 66.651933][ T5929] WARNING: drivers/dma-buf/dma-buf.c:1653 at dma_buf_vmap+0x3c5/0x430, CPU#0: syz.0.18/5929 [ 66.655922][ T5929] Modules linked in: [ 66.657242][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 66.660192][ T5929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.663350][ T5929] RIP: 0010:dma_buf_vmap+0x3c5/0x430 [ 66.665028][ T5929] Code: fb e9 22 fd ff ff 48 8b 3c 24 e8 d6 8c fb fb e9 30 ff ff ff e8 2c 02 8b fb 90 0f 0b e8 24 02 8b fb 90 0f 0b e8 1c 02 8b fb 90 <0f> 0b 90 e9 3f fe ff ff e8 ae 4b 3c 05 4c 89 ff e8 e6 8b fb fb e9 [ 66.674871][ T5929] RSP: 0018:ffffc900035473f8 EFLAGS: 00010293 [ 66.676797][ T5929] RAX: 0000000000000000 RBX: ffff8880406fb000 RCX: ffffffff867f5e81 [ 66.678783][ T64] Bluetooth: hci0: command tx timeout [ 66.680193][ T5929] RDX: ffff88802b942540 RSI: ffffffff867f5fc4 RDI: ffff88802b942540 [ 66.684289][ T5929] RBP: ffffc90003547498 R08: 0000000000000005 R09: 0000000000000000 [ 66.686848][ T5929] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff8880406fb4d0 [ 66.689379][ T5929] R13: 1ffff920006a8e82 R14: 00000000fffffff4 R15: ffff8880406fb030 [ 66.691960][ T5929] FS: 000055557bf3e500(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 66.694864][ T5929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.697178][ T5929] CR2: 000055fad5a23388 CR3: 00000000331fc000 CR4: 0000000000352ef0 [ 66.700158][ T5929] Call Trace: [ 66.701247][ T5929] [ 66.702174][ T5929] ? __pfx_system_heap_vmap+0x10/0x10 [ 66.703925][ T5929] ? __pfx_dma_buf_vmap+0x10/0x10 [ 66.705524][ T5929] drm_gem_shmem_vmap_locked+0x113/0x860 [ 66.707289][ T5929] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 66.709667][ T5929] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 66.712204][ T5929] drm_gem_vmap_locked+0xc8/0x1c0 [ 66.714314][ T5929] drm_gem_vmap+0x4a/0xa0 [ 66.715593][ T5929] drm_gem_fb_vmap+0xc7/0x450 [ 66.717015][ T5929] vkms_prepare_fb+0x87/0xb0 [ 66.718314][ T5929] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 66.720296][ T5929] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 66.721875][ T5929] drm_atomic_helper_commit+0x191/0x380 [ 66.723633][ T5929] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 66.725561][ T5929] drm_atomic_commit+0x230/0x300 [ 66.726960][ T5929] ? __pfx_drm_atomic_commit+0x10/0x10 [ 66.728784][ T5929] ? __pfx___drm_printfn_info+0x10/0x10 [ 66.730545][ T5929] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 66.732473][ T5929] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 66.734387][ T5929] drm_atomic_helper_update_plane+0x314/0x400 [ 66.736327][ T5929] __setplane_atomic+0x22d/0x350 [ 66.737913][ T5929] drm_mode_cursor_universal+0x5e9/0xe20 [ 66.739780][ T5929] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 66.741744][ T5929] ? __pfx_drm_lease_held+0x10/0x10 [ 66.743405][ T5929] ? modeset_lock+0x114/0x6d0 [ 66.744906][ T5929] drm_mode_cursor_common+0x308/0x970 [ 66.746623][ T5929] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 66.748570][ T5929] ? avc_has_extended_perms+0x33a/0x1080 [ 66.750359][ T5929] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 66.752238][ T5929] drm_mode_cursor_ioctl+0xd4/0x110 [ 66.753922][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.755760][ T5929] ? do_raw_spin_lock+0x128/0x260 [ 66.757375][ T5929] ? find_held_lock+0x2b/0x80 [ 66.759051][ T5929] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.760683][ T5929] drm_ioctl_kernel+0x1f3/0x3e0 [ 66.762286][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.764161][ T5929] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 66.765968][ T5929] drm_ioctl+0x5e6/0xc60 [ 66.767317][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.769329][ T5929] ? __pfx_drm_ioctl+0x10/0x10 [ 66.770852][ T5929] ? __seccomp_filter+0x89d/0x1140 [ 66.772541][ T5929] ? selinux_file_ioctl+0x13b/0x290 [ 66.774187][ T5929] ? selinux_file_ioctl+0xb6/0x290 [ 66.775854][ T5929] ? __pfx_drm_ioctl+0x10/0x10 [ 66.777373][ T5929] __x64_sys_ioctl+0x18e/0x210 [ 66.778949][ T5929] do_syscall_64+0x115/0x870 [ 66.780438][ T5929] ? clear_bhb_loop+0x40/0x90 [ 66.781967][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.783847][ T5929] RIP: 0033:0x7f52ae99e019 [ 66.785327][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.791420][ T5929] RSP: 002b:00007ffd9a1fd898 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.794073][ T5929] RAX: ffffffffffffffda RBX: 00007f52aec25fa0 RCX: 00007f52ae99e019 [ 66.796581][ T5929] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 66.799246][ T5929] RBP: 00007ffd9a1fd900 R08: 0000000000000000 R09: 0000000000000000 [ 66.802012][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.804584][ T5929] R13: 00007f52aec25fac R14: 00007f52aec25fa0 R15: 00007f52aec25fa0 [ 66.807117][ T5929] [ 66.808115][ T5929] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 66.810848][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 66.813809][ T5929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.816966][ T5929] Call Trace: [ 66.818356][ T5929] [ 66.819472][ T5929] dump_stack_lvl+0x100/0x190 [ 66.820972][ T5929] vpanic+0x552/0x970 [ 66.822340][ T5929] ? __pfx_vpanic+0x10/0x10 [ 66.823833][ T5929] panic+0xd1/0xe0 [ 66.825103][ T5929] ? __pfx_panic+0x10/0x10 [ 66.826602][ T5929] ? check_panic_on_warn+0x1f/0x90 [ 66.828369][ T5929] check_panic_on_warn.cold+0x19/0x34 [ 66.830290][ T5929] ? dma_buf_vmap+0x3c5/0x430 [ 66.831876][ T5929] __warn.cold+0x191/0x318 [ 66.833327][ T5929] __report_bug+0x30f/0x440 [ 66.834808][ T5929] ? dma_buf_vmap+0x3c5/0x430 [ 66.836353][ T5929] ? __pfx___report_bug+0x10/0x10 [ 66.837997][ T5929] ? __mutex_unlock_slowpath+0x35d/0x930 [ 66.840071][ T5929] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 66.842131][ T5929] ? system_heap_vmap+0x227/0x5d0 [ 66.843718][ T5929] ? __vmalloc_node_noprof+0xad/0xf0 [ 66.845382][ T5929] ? dma_buf_vmap+0x3c5/0x430 [ 66.846878][ T5929] report_bug+0xb2/0x220 [ 66.848227][ T5929] ? dma_buf_vmap+0x3c5/0x430 [ 66.850057][ T5929] handle_bug+0x16a/0x2a0 [ 66.851877][ T5929] exc_invalid_op+0x17/0x50 [ 66.853786][ T5929] asm_exc_invalid_op+0x1a/0x20 [ 66.855394][ T5929] RIP: 0010:dma_buf_vmap+0x3c5/0x430 [ 66.857074][ T5929] Code: fb e9 22 fd ff ff 48 8b 3c 24 e8 d6 8c fb fb e9 30 ff ff ff e8 2c 02 8b fb 90 0f 0b e8 24 02 8b fb 90 0f 0b e8 1c 02 8b fb 90 <0f> 0b 90 e9 3f fe ff ff e8 ae 4b 3c 05 4c 89 ff e8 e6 8b fb fb e9 [ 66.863688][ T5929] RSP: 0018:ffffc900035473f8 EFLAGS: 00010293 [ 66.865840][ T5929] RAX: 0000000000000000 RBX: ffff8880406fb000 RCX: ffffffff867f5e81 [ 66.868704][ T5929] RDX: ffff88802b942540 RSI: ffffffff867f5fc4 RDI: ffff88802b942540 [ 66.871889][ T5929] RBP: ffffc90003547498 R08: 0000000000000005 R09: 0000000000000000 [ 66.874836][ T5929] R10: 00000000fffffff4 R11: 0000000000000000 R12: ffff8880406fb4d0 [ 66.877545][ T5929] R13: 1ffff920006a8e82 R14: 00000000fffffff4 R15: ffff8880406fb030 [ 66.880430][ T5929] ? dma_buf_vmap+0x281/0x430 [ 66.881950][ T5929] ? dma_buf_vmap+0x3c4/0x430 [ 66.883510][ T5929] ? dma_buf_vmap+0x3c4/0x430 [ 66.885030][ T5929] ? __pfx_system_heap_vmap+0x10/0x10 [ 66.886722][ T5929] ? __pfx_dma_buf_vmap+0x10/0x10 [ 66.888493][ T5929] drm_gem_shmem_vmap_locked+0x113/0x860 [ 66.890467][ T5929] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 66.892741][ T5929] ? __pfx_drm_gem_shmem_object_vmap+0x10/0x10 [ 66.895355][ T5929] drm_gem_vmap_locked+0xc8/0x1c0 [ 66.897095][ T5929] drm_gem_vmap+0x4a/0xa0 [ 66.898655][ T5929] drm_gem_fb_vmap+0xc7/0x450 [ 66.900598][ T5929] vkms_prepare_fb+0x87/0xb0 [ 66.902469][ T5929] drm_atomic_helper_prepare_planes+0x1f2/0xbe0 [ 66.905100][ T5929] ? __pfx_vkms_prepare_fb+0x10/0x10 [ 66.907145][ T5929] drm_atomic_helper_commit+0x191/0x380 [ 66.909482][ T5929] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 66.912033][ T5929] drm_atomic_commit+0x230/0x300 [ 66.914176][ T5929] ? __pfx_drm_atomic_commit+0x10/0x10 [ 66.916464][ T5929] ? __pfx___drm_printfn_info+0x10/0x10 [ 66.918901][ T5929] ? drm_atomic_set_fb_for_plane+0x144/0x280 [ 66.921423][ T5929] ? drm_atomic_set_fb_for_plane+0x186/0x280 [ 66.923895][ T5929] drm_atomic_helper_update_plane+0x314/0x400 [ 66.926464][ T5929] __setplane_atomic+0x22d/0x350 [ 66.928548][ T5929] drm_mode_cursor_universal+0x5e9/0xe20 [ 66.930691][ T5929] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 66.933396][ T5929] ? __pfx_drm_lease_held+0x10/0x10 [ 66.935615][ T5929] ? modeset_lock+0x114/0x6d0 [ 66.937743][ T5929] drm_mode_cursor_common+0x308/0x970 [ 66.940127][ T5929] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 66.942650][ T5929] ? avc_has_extended_perms+0x33a/0x1080 [ 66.945031][ T5929] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 66.947475][ T5929] drm_mode_cursor_ioctl+0xd4/0x110 [ 66.949677][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.952115][ T5929] ? do_raw_spin_lock+0x128/0x260 [ 66.954307][ T5929] ? find_held_lock+0x2b/0x80 [ 66.956307][ T5929] ? do_raw_spin_unlock+0x145/0x1e0 [ 66.958248][ T5929] drm_ioctl_kernel+0x1f3/0x3e0 [ 66.960313][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.962790][ T5929] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 66.965053][ T5929] drm_ioctl+0x5e6/0xc60 [ 66.966849][ T5929] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 66.969281][ T5929] ? __pfx_drm_ioctl+0x10/0x10 [ 66.971213][ T5929] ? __seccomp_filter+0x89d/0x1140 [ 66.972954][ T5929] ? selinux_file_ioctl+0x13b/0x290 [ 66.974684][ T5929] ? selinux_file_ioctl+0xb6/0x290 [ 66.976331][ T5929] ? __pfx_drm_ioctl+0x10/0x10 [ 66.977849][ T5929] __x64_sys_ioctl+0x18e/0x210 [ 66.979400][ T5929] do_syscall_64+0x115/0x870 [ 66.980859][ T5929] ? clear_bhb_loop+0x40/0x90 [ 66.982320][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.984153][ T5929] RIP: 0033:0x7f52ae99e019 [ 66.985566][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.991587][ T5929] RSP: 002b:00007ffd9a1fd898 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.994271][ T5929] RAX: ffffffffffffffda RBX: 00007f52aec25fa0 RCX: 00007f52ae99e019 [ 66.996746][ T5929] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 66.999280][ T5929] RBP: 00007ffd9a1fd900 R08: 0000000000000000 R09: 0000000000000000 [ 67.001730][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.004611][ T5929] R13: 00007f52aec25fac R14: 00007f52aec25fa0 R15: 00007f52aec25fa0 [ 67.007727][ T5929] [ 67.009690][ T5929] Kernel Offset: disabled [ 67.011344][ T5929] Rebooting in 86400 seconds..