last executing test programs: kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:50819' (ED25519) to the list of known hosts. [ 45.943876][ T40] audit: type=1400 audit(1777439242.953:62): avc: denied { name_bind } for pid=5642 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.974115][ T40] audit: type=1400 audit(1777439242.983:63): avc: denied { execute } for pid=5643 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.982122][ T40] audit: type=1400 audit(1777439242.983:64): avc: denied { execute_no_trans } for pid=5643 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.182938][ T40] audit: type=1400 audit(1777439245.183:65): avc: denied { read } for pid=5664 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.190325][ T40] audit: type=1400 audit(1777439245.193:66): avc: denied { open } for pid=5664 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.192734][ T5643] cgroup: Unknown subsys name 'net' [ 48.385532][ T5643] cgroup: Unknown subsys name 'cpuset' [ 48.391540][ T5643] cgroup: Unknown subsys name 'rlimit' [ 48.394923][ T5672] [ 48.395721][ T5672] ================================================ [ 48.397807][ T5672] WARNING: lock held when returning to user space! [ 48.399851][ T5672] syzkaller #0 Not tainted [ 48.401281][ T5672] ------------------------------------------------ [ 48.403380][ T5672] dhcpcd-run-hook/5672 is leaving the kernel with locks still held! [ 48.405881][ T5672] 1 lock held by dhcpcd-run-hook/5672: [ 48.407652][ T5672] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 48.410747][ T5672] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:323 [ 48.413874][ T5672] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5672, name: dhcpcd-run-hook [ 48.416867][ T5672] preempt_count: 0, expected: 0 [ 48.418424][ T5672] RCU nest depth: 1, expected: 0 [ 48.420012][ T5672] INFO: lockdep is turned off. [ 48.421594][ T5672] CPU: 3 UID: 0 PID: 5672 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 48.421614][ T5672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.421621][ T5672] Call Trace: [ 48.421624][ T5672] [ 48.421628][ T5672] dump_stack_lvl+0x100/0x190 [ 48.421643][ T5672] __might_resched.cold+0x1ec/0x232 [ 48.421657][ T5672] ? __pfx___might_resched+0x10/0x10 [ 48.421672][ T5672] ? lock_release+0x245/0x310 [ 48.421685][ T5672] prepare_alloc_pages+0x44a/0x5f0 [ 48.421698][ T5672] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 48.421714][ T5672] ? __asan_memcpy+0x3c/0x60 [ 48.421728][ T5672] ? desc_read+0x2e2/0x380 [ 48.421741][ T5672] ? panic_on_this_cpu+0x32/0x40 [ 48.421751][ T5672] ? rcu_is_watching+0x12/0xc0 [ 48.421766][ T5672] ? unwind_next_frame+0x3be/0x2090 [ 48.421781][ T5672] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 48.421796][ T5672] ? rcu_is_watching+0x12/0xc0 [ 48.421811][ T5672] ? unwind_next_frame+0x3be/0x2090 [ 48.421826][ T5672] ? rcu_is_watching+0x12/0xc0 [ 48.421841][ T5672] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 48.421852][ T5672] ? rcu_is_watching+0x12/0xc0 [ 48.421867][ T5672] ? is_bpf_text_address+0x8a/0x1a0 [ 48.421879][ T5672] ? lock_release+0x245/0x310 [ 48.421891][ T5672] ? bpf_ksym_find+0x128/0x1c0 [ 48.421905][ T5672] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 48.421916][ T5672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 48.421929][ T5672] ? policy_nodemask+0xed/0x4f0 [ 48.421939][ T5672] alloc_pages_mpol+0x1fb/0x540 [ 48.421949][ T5672] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 48.421960][ T5672] ? rcu_core+0x59d/0x10d0 [ 48.421973][ T5672] folio_alloc_mpol_noprof+0x36/0x260 [ 48.421986][ T5672] vma_alloc_folio_noprof+0xed/0x1d0 [ 48.421999][ T5672] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 48.422012][ T5672] ? rcu_read_unlock+0x2d/0xb0 [ 48.422025][ T5672] ? lock_release+0x245/0x310 [ 48.422037][ T5672] ? kasan_save_track+0x14/0x30 [ 48.422053][ T5672] do_wp_page+0x1ee1/0x4350 [ 48.422065][ T5672] ? rcu_is_watching+0x12/0xc0 [ 48.422080][ T5672] ? __pfx_do_wp_page+0x10/0x10 [ 48.422091][ T5672] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 48.422106][ T5672] ? __pte_offset_map+0x50/0x310 [ 48.422116][ T5672] __handle_mm_fault+0x1ab6/0x2a00 [ 48.422131][ T5672] ? __pfx___handle_mm_fault+0x10/0x10 [ 48.422145][ T5672] ? __pfx_vma_start_read+0x10/0x10 [ 48.422158][ T5672] ? rcu_is_watching+0x12/0xc0 [ 48.422176][ T5672] handle_mm_fault+0x36d/0xa20 [ 48.422190][ T5672] do_user_addr_fault+0x5a3/0x12f0 [ 48.422205][ T5672] exc_page_fault+0x6f/0xd0 [ 48.422217][ T5672] asm_exc_page_fault+0x26/0x30 [ 48.422227][ T5672] RIP: 0033:0x7f1c5c6f72cd [ 48.422235][ T5672] Code: 00 e8 57 b3 ff ff 89 c3 85 c0 0f 85 d5 01 00 00 48 83 05 8d 15 10 00 04 48 8b 1d c6 ac 0f 00 48 8b 83 38 0b 00 00 66 0f ef c0 <48> c7 83 28 0a 00 00 00 00 00 00 0f 11 83 18 0a 00 00 0f 11 83 68 [ 48.422245][ T5672] RSP: 002b:00007fffee5266e0 EFLAGS: 00010202 [ 48.422254][ T5672] RAX: 0000000000000000 RBX: 00007f1c5c902000 RCX: 00007f1c5c660f07 [ 48.422260][ T5672] RDX: 0000000000000000 RSI: 00007fffee5266b8 RDI: 0000000000000002 [ 48.422266][ T5672] RBP: 000055fdd159b810 R08: 00007f1c5c7f3b60 R09: 0000000000000000 [ 48.422271][ T5672] R10: 0000000000000008 R11: 0000000000000246 R12: 000055fdd159f9f0 [ 48.422277][ T5672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.422285][ T5672] [ 48.762154][ T5688] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.297380][ T5643] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.720358][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 51.720373][ T40] audit: type=1400 audit(1777439248.723:86): avc: denied { execmem } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1