Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 182.786950][ T28] audit: type=1400 audit(1706953563.860:86): avc: denied { execmem } for pid=5075 comm="syz-executor336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 182.817711][ T28] audit: type=1400 audit(1706953563.860:87): avc: denied { mounton } for pid=5082 comm="syz-executor336" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 182.854848][ T28] audit: type=1400 audit(1706953563.860:88): avc: denied { mount } for pid=5082 comm="syz-executor336" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 182.878037][ T28] audit: type=1400 audit(1706953563.890:89): avc: denied { create } for pid=5082 comm="syz-executor336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.899371][ T28] audit: type=1400 audit(1706953563.890:90): avc: denied { read write } for pid=5082 comm="syz-executor336" name="vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.923422][ T28] audit: type=1400 audit(1706953563.890:91): avc: denied { open } for pid=5078 comm="syz-executor336" path="/dev/vhci" dev="devtmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.948789][ T28] audit: type=1400 audit(1706953563.920:92): avc: denied { ioctl } for pid=5078 comm="syz-executor336" path="socket:[3854]" dev="sockfs" ino=3854 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.950514][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.983094][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.991580][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.993561][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.000161][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.006328][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.014642][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.020889][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.027842][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.033778][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.040950][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.048341][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.055508][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.062766][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.069156][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.076397][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 183.083436][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.089726][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.103912][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.104254][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.115336][ T5099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.119088][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.132176][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.133085][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.139749][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.157708][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 183.165173][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.169917][ T28] audit: type=1400 audit(1706953564.230:93): avc: denied { mounton } for pid=5082 comm="syz-executor336" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 183.194273][ T5099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.214261][ T5092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 183.224963][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.393499][ T28] audit: type=1400 audit(1706953564.470:94): avc: denied { mounton } for pid=5083 comm="syz-executor336" path="/dev/binderfs" dev="devtmpfs" ino=2322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 183.426371][ T28] audit: type=1400 audit(1706953564.500:95): avc: denied { mount } for pid=5083 comm="syz-executor336" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 288.507377][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 288.514487][ C1] rcu: (detected by 1, t=10502 jiffies, g=7353, q=8 ncpus=2) [ 288.521966][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294965924-4294955421), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 288.535350][ C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g7353 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 288.546487][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 288.556483][ C1] rcu: RCU grace-period kthread stack dump: [ 288.562380][ C1] task:rcu_preempt state:R running task stack:28736 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 288.574143][ C1] Call Trace: [ 288.577436][ C1] [ 288.580392][ C1] __schedule+0xf12/0x5c60 [ 288.584968][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 288.590313][ C1] ? __pfx___schedule+0x10/0x10 [ 288.595193][ C1] ? schedule+0x200/0x280 [ 288.599552][ C1] ? __pfx_lock_release+0x10/0x10 [ 288.604968][ C1] ? __pfx___mod_timer+0x10/0x10 [ 288.610137][ C1] ? lock_acquire+0x1ae/0x520 [ 288.614876][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 288.620542][ C1] schedule+0xe9/0x280 [ 288.624643][ C1] schedule_timeout+0x137/0x2a0 [ 288.629577][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 288.634986][ C1] ? __pfx_process_timeout+0x10/0x10 [ 288.640297][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 288.646135][ C1] ? prepare_to_swait_event+0xf4/0x470 [ 288.651686][ C1] rcu_gp_fqs_loop+0x1ec/0xb20 [ 288.656510][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 288.661826][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 288.667675][ C1] rcu_gp_kthread+0x24b/0x380 [ 288.672384][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 288.677603][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 288.682905][ C1] ? __kthread_parkme+0x14b/0x220 [ 288.687986][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 288.693209][ C1] kthread+0x2c6/0x3b0 [ 288.697309][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.702886][ C1] ? __pfx_kthread+0x10/0x10 [ 288.707508][ C1] ret_from_fork+0x45/0x80 [ 288.711985][ C1] ? __pfx_kthread+0x10/0x10 [ 288.716601][ C1] ret_from_fork_asm+0x1b/0x30 [ 288.721416][ C1] [ 288.724446][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 288.730782][ C1] CPU: 1 PID: 5105 Comm: syz-executor336 Not tainted 6.8.0-rc2-syzkaller-00251-g6897cea71837 #0 [ 288.741228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 288.751307][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 288.757157][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 ea 97 a3 f6 48 89 df e8 d2 12 a4 f6 e8 5d 40 cb f6 fb bf 01 00 00 00 82 5f 95 f6 65 8b 05 f3 ad 3c 75 85 c0 74 06 5b c3 cc cc cc cc [ 288.776799][ C1] RSP: 0018:ffffc900035efcf8 EFLAGS: 00000206 [ 288.782893][ C1] RAX: 0000000003a79cd1 RBX: ffff888029bf0000 RCX: 1ffffffff1f3a301 [ 288.790883][ C1] RDX: 0000000000000000 RSI: ffffffff8b0cb240 RDI: 0000000000000001 [ 288.798874][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 288.806861][ C1] R10: ffffffff8f9d4a97 R11: 0000000000000000 R12: ffff888029bf0498 [ 288.814854][ C1] R13: 0000000000000021 R14: ffff888029bf0400 R15: 1ffff920006bdfae [ 288.822846][ C1] FS: 0000555555bfd3c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 288.831796][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.838401][ C1] CR2: 000000002006b000 CR3: 000000002c1e8000 CR4: 00000000003506f0 [ 288.846390][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.854378][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.862368][ C1] Call Trace: [ 288.865662][ C1] [ 288.868515][ C1] ? show_regs+0x8f/0xa0 [ 288.872831][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 288.879183][ C1] ? rcu_sched_clock_irq+0x22a1/0x3100 [ 288.884672][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 288.890338][ C1] ? hrtimer_run_queues+0x97/0x440 [ 288.895487][ C1] ? rcu_read_lock_sched_held+0x3e/0x70 [ 288.901133][ C1] ? __pfx_tick_nohz_highres_handler+0x10/0x10 [ 288.907374][ C1] ? update_process_times+0x17b/0x220 [ 288.912770][ C1] ? __pfx_update_process_times+0x10/0x10 [ 288.918514][ C1] ? read_tsc+0x9/0x20 [ 288.922611][ C1] ? tick_sched_handle+0x8e/0x170 [ 288.927669][ C1] ? tick_nohz_highres_handler+0xed/0x120 [ 288.933418][ C1] ? __hrtimer_run_queues+0x64a/0xc30 [ 288.938826][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 288.944572][ C1] ? ktime_get_update_offsets_now+0x3bd/0x620 [ 288.950665][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 288.955812][ C1] ? __sysvec_apic_timer_interrupt+0x108/0x400 [ 288.961998][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 288.967835][ C1] [ 288.970776][ C1] [ 288.973720][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 288.980001][ C1] ? _raw_spin_unlock_irq+0x29/0x50 [ 288.985226][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.990458][ C1] get_signal+0x189d/0x2790 [ 288.995006][ C1] ? __pfx_get_signal+0x10/0x10 [ 288.999881][ C1] ? do_sigaltstack.constprop.0+0x550/0x810 [ 289.005816][ C1] arch_do_signal_or_restart+0x90/0x7f0 [ 289.011389][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 289.017576][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.022802][ C1] ? __do_sys_rt_sigreturn+0x168/0x230 [ 289.028288][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 289.034124][ C1] syscall_exit_to_user_mode+0x156/0x2b0 [ 289.039793][ C1] do_syscall_64+0xe5/0x270 [ 289.044314][ C1] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 289.050239][ C1] RIP: 0033:0x7f1edba0903e [ 289.054676][ C1] Code: 3c 25 10 b0 06 20 31 c0 bf df 00 00 00 48 c7 04 25 08 b0 06 20 08 00 00 00 48 c7 04 25 18 b0 06 20 09 00 00 00 e8 22 4e 03 00 <89> df 83 c3 01 e8 68 3f 03 00 83 fb 1e 75 f1 31 ff e8 ac 7a 00 00 [ 289.074389][ C1] RSP: 002b:00007fff43d956f0 EFLAGS: 00010217 [ 289.080482][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f1edba3de79 [ 289.088470][ C1] RDX: 000000002006b000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.096464][ C1] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000 [ 289.104457][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000555555bfd370 [ 289.112498][ C1] R13: 0000000000000002 R14: 00007fff43d95760 R15: 00007fff43d95750 [ 289.120491][ C1]