last executing test programs: kernel console output (not intermixed with test programs): [ 73.134074][ T40] audit: type=1400 audit(1776685071.236:59): avc: denied { write } for pid=5848 comm="sh" path="pipe:[7281]" dev="pipefs" ino=7281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 73.142795][ T40] audit: type=1400 audit(1776685071.236:60): avc: denied { rlimitinh } for pid=5848 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.150461][ T40] audit: type=1400 audit(1776685071.236:61): avc: denied { siginh } for pid=5848 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:50153' (ED25519) to the list of known hosts. [ 75.178023][ T40] audit: type=1400 audit(1776685073.286:62): avc: denied { name_bind } for pid=5857 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 75.225062][ T40] audit: type=1400 audit(1776685073.336:63): avc: denied { execute } for pid=5858 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.232158][ T40] audit: type=1400 audit(1776685073.336:64): avc: denied { execute_no_trans } for pid=5858 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.509147][ T40] audit: type=1400 audit(1776685075.616:65): avc: denied { mounton } for pid=5858 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 77.518694][ T40] audit: type=1400 audit(1776685075.626:66): avc: denied { mount } for pid=5858 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 77.521010][ T5858] cgroup: Unknown subsys name 'net' [ 77.702463][ T5858] cgroup: Unknown subsys name 'cpuset' [ 77.707365][ T5858] cgroup: Unknown subsys name 'rlimit' [ 77.892931][ T5913] BUG: sleeping function called from invalid context at mm/memory.c:2007 [ 77.895688][ T5913] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5913, name: cmp [ 77.898258][ T5913] preempt_count: 0, expected: 0 [ 77.900082][ T5913] RCU nest depth: 1, expected: 0 [ 77.901619][ T5913] 2 locks held by cmp/5913: [ 77.903364][ T5913] #0: ffff88801b8cc078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa10 [ 77.906147][ T5913] #1: ffffffff8e7e5460 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 77.909363][ T5913] CPU: 3 UID: 0 PID: 5913 Comm: cmp Not tainted syzkaller #0 PREEMPT(full) [ 77.909376][ T5913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.909383][ T5913] Call Trace: [ 77.909387][ T5913] [ 77.909391][ T5913] dump_stack_lvl+0x100/0x190 [ 77.909408][ T5913] __might_resched.cold+0x1ec/0x232 [ 77.909424][ T5913] ? __pfx___might_resched+0x10/0x10 [ 77.909440][ T5913] ? __zap_vma_range+0x22dc/0x4bf0 [ 77.909454][ T5913] __zap_vma_range+0x184b/0x4bf0 [ 77.909476][ T5913] ? __pfx___zap_vma_range+0x10/0x10 [ 77.909489][ T5913] ? find_held_lock+0x2b/0x80 [ 77.909503][ T5913] unmap_vmas+0x299/0x5f0 [ 77.909516][ T5913] ? __pfx_unmap_vmas+0x10/0x10 [ 77.909528][ T5913] ? mas_next_slot+0x10a3/0x1960 [ 77.909548][ T5913] exit_mmap+0x1ef/0xa10 [ 77.909562][ T5913] ? __pfx_exit_mmap+0x10/0x10 [ 77.909574][ T5913] ? trace_contention_end+0x122/0x170 [ 77.909590][ T5913] ? uprobe_clear_state+0x5f/0x260 [ 77.909607][ T5913] ? uprobe_clear_state+0x5f/0x260 [ 77.909626][ T5913] ? __lock_acquire+0x4a5/0x2630 [ 77.909645][ T5913] ? arch_uprobe_clear_state+0x107/0x150 [ 77.909662][ T5913] __mmput+0x12a/0x410 [ 77.909680][ T5913] mmput+0x67/0x80 [ 77.909694][ T5913] do_exit+0x833/0x2a60 [ 77.909707][ T5913] ? do_raw_spin_lock+0x128/0x260 [ 77.909723][ T5913] ? __pfx_do_exit+0x10/0x10 [ 77.909733][ T5913] ? do_group_exit+0x1bd/0x2a0 [ 77.909744][ T5913] ? rcu_is_watching+0x12/0xc0 [ 77.909767][ T5913] do_group_exit+0xd5/0x2a0 [ 77.909779][ T5913] __x64_sys_exit_group+0x3e/0x50 [ 77.909791][ T5913] x64_sys_call+0x102c/0x1530 [ 77.909806][ T5913] do_syscall_64+0x10b/0xf80 [ 77.909816][ T5913] ? clear_bhb_loop+0x40/0x90 [ 77.909829][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.909840][ T5913] RIP: 0033:0x7fedcf5c96c5 [ 77.909849][ T5913] Code: Unable to access opcode bytes at 0x7fedcf5c969b. [ 77.909854][ T5913] RSP: 002b:00007ffd9f5f73c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 77.909864][ T5913] RAX: ffffffffffffffda RBX: 00007fedcf6cafe8 RCX: 00007fedcf5c96c5 [ 77.909871][ T5913] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 77.909877][ T5913] RBP: 0000000000000001 R08: 00007ffd9f5f7358 R09: 0000000000000000 [ 77.909883][ T5913] R10: 00007ffd9f5f71f0 R11: 0000000000000202 R12: 0000000000000000 [ 77.909889][ T5913] R13: 0000000000000000 R14: 00007fedcf6c9680 R15: 00007fedcf6cb000 [ 77.909902][ T5913] [ 77.910171][ T5913] [ 77.999690][ T5913] ============================= [ 78.001164][ T5913] [ BUG: Invalid wait context ] [ 78.002688][ T5913] syzkaller #0 Tainted: G W [ 78.004652][ T5913] ----------------------------- [ 78.006195][ T5913] cmp/5913 is trying to lock: [ 78.007691][ T5913] ffff88801b8cc078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa10 [ 78.010386][ T5913] other info that might help us debug this: [ 78.012258][ T5913] context-{5:5} [ 78.013383][ T5913] 1 lock held by cmp/5913: [ 78.014832][ T5913] #0: ffffffff8e7e5460 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 78.017797][ T5913] stack backtrace: [ 78.019009][ T5913] CPU: 3 UID: 0 PID: 5913 Comm: cmp Tainted: G W syzkaller #0 PREEMPT(full) [ 78.019025][ T5913] Tainted: [W]=WARN [ 78.019028][ T5913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.019035][ T5913] Call Trace: [ 78.019040][ T5913] [ 78.019045][ T5913] dump_stack_lvl+0x100/0x190 [ 78.019060][ T5913] __lock_acquire+0xfa4/0x2630 [ 78.019074][ T5913] ? __lock_acquire+0x4a5/0x2630 [ 78.019088][ T5913] lock_acquire+0x1b1/0x370 [ 78.019100][ T5913] ? exit_mmap+0x22c/0xa10 [ 78.019112][ T5913] ? __pfx___might_resched+0x10/0x10 [ 78.019128][ T5913] down_write+0x8b/0x1f0 [ 78.019140][ T5913] ? exit_mmap+0x22c/0xa10 [ 78.019151][ T5913] ? __pfx_down_write+0x10/0x10 [ 78.019163][ T5913] exit_mmap+0x22c/0xa10 [ 78.019190][ T5913] ? __pfx_exit_mmap+0x10/0x10 [ 78.019202][ T5913] ? trace_contention_end+0x122/0x170 [ 78.019217][ T5913] ? uprobe_clear_state+0x5f/0x260 [ 78.019233][ T5913] ? uprobe_clear_state+0x5f/0x260 [ 78.019250][ T5913] ? __lock_acquire+0x4a5/0x2630 [ 78.019264][ T5913] ? arch_uprobe_clear_state+0x107/0x150 [ 78.019280][ T5913] __mmput+0x12a/0x410 [ 78.019296][ T5913] mmput+0x67/0x80 [ 78.019310][ T5913] do_exit+0x833/0x2a60 [ 78.019320][ T5913] ? do_raw_spin_lock+0x128/0x260 [ 78.019335][ T5913] ? __pfx_do_exit+0x10/0x10 [ 78.019344][ T5913] ? do_group_exit+0x1bd/0x2a0 [ 78.019354][ T5913] ? rcu_is_watching+0x12/0xc0 [ 78.019372][ T5913] do_group_exit+0xd5/0x2a0 [ 78.019383][ T5913] __x64_sys_exit_group+0x3e/0x50 [ 78.019393][ T5913] x64_sys_call+0x102c/0x1530 [ 78.019408][ T5913] do_syscall_64+0x10b/0xf80 [ 78.019418][ T5913] ? clear_bhb_loop+0x40/0x90 [ 78.019430][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.019441][ T5913] RIP: 0033:0x7fedcf5c96c5 [ 78.019449][ T5913] Code: Unable to access opcode bytes at 0x7fedcf5c969b. [ 78.019454][ T5913] RSP: 002b:00007ffd9f5f73c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 78.019464][ T5913] RAX: ffffffffffffffda RBX: 00007fedcf6cafe8 RCX: 00007fedcf5c96c5 [ 78.019470][ T5913] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 78.019476][ T5913] RBP: 0000000000000001 R08: 00007ffd9f5f7358 R09: 0000000000000000 [ 78.019482][ T5913] R10: 00007ffd9f5f71f0 R11: 0000000000000202 R12: 0000000000000000 [ 78.019488][ T5913] R13: 0000000000000000 R14: 00007fedcf6c9680 R15: 00007fedcf6cb000 [ 78.019497][ T5913] [ 78.057044][ T5914] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 78.727426][ T5858] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.315859][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 81.315877][ T40] audit: type=1400 audit(1776685079.426:85): avc: denied { execmem } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.359532][ T10] cfg80211: failed to load regulatory.db