Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 247.793562][ T29] audit: type=1400 audit(1716864636.450:87): avc: denied { execmem } for pid=5095 comm="syz-executor398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 247.834254][ T29] audit: type=1400 audit(1716864636.480:88): avc: denied { mounton } for pid=5101 comm="syz-executor398" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 247.926466][ T29] audit: type=1400 audit(1716864636.480:89): avc: denied { mount } for pid=5101 comm="syz-executor398" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 247.985491][ T29] audit: type=1400 audit(1716864636.480:90): avc: denied { mounton } for pid=5101 comm="syz-executor398" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 248.215487][ T29] audit: type=1400 audit(1716864636.870:91): avc: denied { create } for pid=5101 comm="syz-executor398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.246368][ T29] audit: type=1400 audit(1716864636.870:92): avc: denied { write } for pid=5101 comm="syz-executor398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.268212][ T29] audit: type=1400 audit(1716864636.870:93): avc: denied { read } for pid=5101 comm="syz-executor398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.407178][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.415690][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.479696][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.494170][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.569527][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.591305][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.597861][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.608039][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 248.635476][ T29] audit: type=1400 audit(1716864637.290:94): avc: denied { mounton } for pid=5101 comm="syz-executor398" path="/dev/binderfs" dev="devtmpfs" ino=2322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 248.665568][ T29] audit: type=1400 audit(1716864637.300:95): avc: denied { mount } for pid=5101 comm="syz-executor398" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 248.696453][ T29] audit: type=1400 audit(1716864637.310:96): avc: denied { read write } for pid=5112 comm="syz-executor398" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.757640][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.773229][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 248.820206][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.829304][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.896626][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.904659][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.935762][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd executing program [ 248.957974][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.976122][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 249.018909][ T2760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.042338][ T2760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 249.102600][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.110946][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.136827][ T45] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.146951][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 249.154980][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.164976][ T45] usb 4-1: Product: syz [ 249.169515][ T45] usb 4-1: Manufacturer: syz [ 249.174288][ T45] usb 4-1: SerialNumber: syz [ 249.204248][ T45] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.250656][ T5115] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 249.306591][ T784] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 249.343214][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.352546][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.360863][ T25] usb 1-1: Product: syz [ 249.365311][ T25] usb 1-1: Manufacturer: syz [ 249.370140][ T25] usb 1-1: SerialNumber: syz [ 249.375495][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 249.398468][ T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.425917][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 249.432635][ T45] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 249.473452][ C1] hrtimer: interrupt took 12583422 ns [ 249.518166][ T784] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.554491][ T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 executing program [ 249.590852][ T4733] usb 4-1: USB disconnect, device number 2 [ 249.602274][ T784] usb 2-1: Product: syz [ 249.636910][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.653209][ T784] usb 2-1: Manufacturer: syz [ 249.659254][ T784] usb 2-1: SerialNumber: syz [ 249.664169][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.682541][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.715074][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.726775][ T784] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.735073][ T9] usb 5-1: Product: syz [ 249.749264][ T9] usb 5-1: Manufacturer: syz [ 249.758514][ T8] usb 3-1: Product: syz executing program [ 249.806370][ T9] usb 5-1: SerialNumber: syz [ 249.812866][ T8] usb 3-1: Manufacturer: syz [ 249.824806][ T8] usb 3-1: SerialNumber: syz [ 249.928415][ T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.958450][ T784] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 250.125252][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 343.997616][ T5115] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 353.633842][ T45] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 355.788920][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 355.796120][ C1] rcu: (detected by 1, t=10502 jiffies, g=9993, q=77 ncpus=2) [ 355.803703][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 1800 (4294972632-4294970832), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 355.817024][ C1] rcu: rcu_preempt kthread starved for 1800 jiffies! g9993 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 355.828095][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 355.838098][ C1] rcu: RCU grace-period kthread stack dump: [ 355.844011][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 355.855818][ C1] Call Trace: [ 355.859126][ C1] [ 355.862191][ C1] __schedule+0xf15/0x5d00 [ 355.866756][ C1] ? __pfx___schedule+0x10/0x10 [ 355.871956][ C1] ? lock_acquire+0x1b1/0x560 [ 355.876802][ C1] ? irqentry_exit+0x3b/0x90 [ 355.881454][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.886762][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 355.892187][ C1] preempt_schedule_common+0x44/0xc0 [ 355.897590][ C1] preempt_schedule_thunk+0x1a/0x30 [ 355.902840][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 355.908552][ C1] rcu_gp_fqs_loop+0x217/0xb00 [ 355.913399][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 355.918833][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 355.924089][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 355.929954][ C1] rcu_gp_kthread+0x271/0x380 [ 355.934691][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.939944][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.945218][ C1] ? __kthread_parkme+0x148/0x220 [ 355.950328][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.955585][ C1] kthread+0x2c1/0x3a0 [ 355.959703][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.964955][ C1] ? __pfx_kthread+0x10/0x10 [ 355.969593][ C1] ret_from_fork+0x45/0x80 [ 355.974093][ C1] ? __pfx_kthread+0x10/0x10 [ 355.978735][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.983560][ C1] [ 355.986610][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 355.992974][ C1] CPU: 1 PID: 34 Comm: kcompactd0 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 356.002905][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 356.013012][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 356.019578][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 68 80 f6 48 89 df e8 0e e5 80 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 27 72 f6 65 8b 05 b6 86 18 75 85 c0 74 16 5b [ 356.039318][ C1] RSP: 0018:ffffc90000a18248 EFLAGS: 00000246 [ 356.045543][ C1] RAX: 0000000000000006 RBX: ffffffff94ca7948 RCX: 1ffffffff2857134 [ 356.053622][ C1] RDX: 0000000000000000 RSI: ffffffff8b2cade0 RDI: ffffffff8b8fffc0 [ 356.061640][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: fffffbfff284d670 [ 356.069652][ C1] R10: ffffffff9426b387 R11: 0000000000000002 R12: ffffffff94ca7940 [ 356.077681][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888059c72800 [ 356.085722][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 356.094697][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.101325][ C1] CR2: 00007fff8f455d78 CR3: 0000000049512000 CR4: 00000000003506f0 [ 356.109340][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.117350][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.125403][ C1] Call Trace: [ 356.128738][ C1] [ 356.131624][ C1] ? show_regs+0x8c/0xa0 [ 356.135929][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 356.142407][ C1] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 356.147962][ C1] ? __pfx_lock_release+0x10/0x10 [ 356.153112][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 356.158843][ C1] ? __asan_memcpy+0x3c/0x60 [ 356.163539][ C1] ? update_process_times+0x175/0x220 [ 356.168971][ C1] ? __pfx_update_process_times+0x10/0x10 [ 356.174767][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 356.180275][ C1] ? update_wall_time+0x1c/0x40 [ 356.185275][ C1] ? tick_nohz_handler+0x376/0x530 [ 356.190436][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 356.195944][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 356.201369][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 356.207228][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 356.213358][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 356.218535][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 356.224783][ C1] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 356.230669][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.236890][ C1] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 356.242765][ C1] debug_check_no_obj_freed+0x328/0x600 [ 356.248368][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 356.254686][ C1] ? cfg80211_update_known_bss+0x39f/0x1150 [ 356.260650][ C1] kfree+0x284/0x3b0 [ 356.264610][ C1] ? ieee80211_inform_bss+0x76e/0x1140 [ 356.270119][ C1] ieee80211_inform_bss+0x76e/0x1140 [ 356.275501][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 356.281285][ C1] ? trace_kmalloc+0x2d/0xe0 [ 356.285935][ C1] ? __kmalloc_noprof+0x20b/0x410 [ 356.291024][ C1] ? cfg80211_inform_single_bss_data+0x114f/0x1f70 [ 356.297580][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 356.303353][ C1] cfg80211_inform_single_bss_data+0x893/0x1f70 [ 356.309648][ C1] ? hlock_class+0x4e/0x130 [ 356.314289][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 356.321021][ C1] ? __pfx_mark_lock+0x10/0x10 [ 356.325843][ C1] ? hlock_class+0x4e/0x130 [ 356.330411][ C1] ? cfg80211_inform_bss_data+0x205/0x39d0 [ 356.336289][ C1] cfg80211_inform_bss_data+0x205/0x39d0 [ 356.341985][ C1] ? __pfx_mark_lock+0x10/0x10 [ 356.346843][ C1] ? __lock_acquire+0x14f4/0x3b30 [ 356.351937][ C1] ? hlock_class+0x4e/0x130 [ 356.356493][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 356.362613][ C1] ? hlock_class+0x4e/0x130 [ 356.367167][ C1] ? hlock_class+0x4e/0x130 [ 356.371720][ C1] ? __lock_acquire+0xc5d/0x3b30 [ 356.376742][ C1] ? lock_acquire+0x1b1/0x560 [ 356.381494][ C1] ? find_held_lock+0x2d/0x110 [ 356.386313][ C1] ? ieee80211_bss_info_update+0x2cb/0xab0 [ 356.392188][ C1] cfg80211_inform_bss_frame_data+0x271/0x7c0 [ 356.398331][ C1] ieee80211_bss_info_update+0x311/0xab0 [ 356.404030][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 356.410241][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 356.415663][ C1] ? ieee80211_get_channel_khz+0x14d/0x1e0 [ 356.421534][ C1] ieee80211_scan_rx+0x47c/0xad0 [ 356.426525][ C1] ieee80211_rx_list+0x1be1/0x2e90 [ 356.431700][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 356.437304][ C1] ? lock_acquire+0x1b1/0x560 [ 356.442051][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 356.447322][ C1] ieee80211_rx_napi+0xdd/0x400 [ 356.452251][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 356.457765][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 356.463629][ C1] ieee80211_tasklet_handler+0xd6/0x130 [ 356.469248][ C1] tasklet_action_common.constprop.0+0x24c/0x3e0 [ 356.475652][ C1] handle_softirqs+0x216/0x8f0 [ 356.480683][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 356.486022][ C1] irq_exit_rcu+0xbb/0x120 [ 356.490489][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 356.496183][ C1] [ 356.499146][ C1] [ 356.502108][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.508143][ C1] RIP: 0010:debug_object_free+0x294/0x500 [ 356.513955][ C1] Code: 4d 89 6c 24 08 48 8b 7c 24 10 48 89 ce 48 b8 00 01 00 00 00 00 ad de 48 89 03 48 83 c0 22 48 89 43 08 e8 ff 6b 61 06 48 89 df e7 d0 ff ff 0f b6 05 e0 df 3f 10 84 c0 0f 85 13 fe ff ff 8b 05 [ 356.533793][ C1] RSP: 0018:ffffc90000aa7bb0 EFLAGS: 00000286 [ 356.539911][ C1] RAX: 0000000080000000 RBX: ffff88805aa2d070 RCX: 0000000000000000 [ 356.547922][ C1] RDX: 0000000000000001 RSI: ffffffff8b2cade0 RDI: ffff88805aa2d070 [ 356.555931][ C1] RBP: ffffc90000aa7ca0 R08: 0000000000000001 R09: 0000000000000001 [ 356.563941][ C1] R10: ffffffff8fe45e57 R11: 0000000000000000 R12: ffff888021d9be00 [ 356.572059][ C1] R13: ffffffff94d302d8 R14: ffffc90000aa7cd0 R15: 1ffff92000154f7a [ 356.580092][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 356.585390][ C1] ? __pfx_debug_object_free+0x10/0x10 [ 356.590915][ C1] ? __try_to_del_timer_sync+0x116/0x170 [ 356.596655][ C1] schedule_timeout+0x14f/0x2a0 [ 356.601564][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 356.607000][ C1] ? __pfx_process_timeout+0x10/0x10 [ 356.612361][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 356.618237][ C1] ? prepare_to_wait_event+0xcb/0x690 [ 356.623678][ C1] kcompactd+0xad3/0xde0 [ 356.628081][ C1] ? __pfx_kcompactd+0x10/0x10 [ 356.632933][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 356.639103][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 356.644387][ C1] ? __kthread_parkme+0x148/0x220 [ 356.649468][ C1] ? __pfx_kcompactd+0x10/0x10 [ 356.654298][ C1] kthread+0x2c1/0x3a0 [ 356.658418][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.663674][ C1] ? __pfx_kthread+0x10/0x10 [ 356.668314][ C1] ret_from_fork+0x45/0x80 [ 356.672788][ C1] ? __pfx_kthread+0x10/0x10 [ 356.677430][ C1] ret_from_fork_asm+0x1a/0x30 [ 356.682273][ C1]