Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 212.337276][ T29] audit: type=1400 audit(1717217847.181:87): avc: denied { execmem } for pid=5095 comm="syz-executor300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 212.371093][ T29] audit: type=1400 audit(1717217847.201:88): avc: denied { mounton } for pid=5100 comm="syz-executor300" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 212.402646][ T29] audit: type=1400 audit(1717217847.211:89): avc: denied { mount } for pid=5100 comm="syz-executor300" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 212.443553][ T29] audit: type=1400 audit(1717217847.211:90): avc: denied { create } for pid=5102 comm="syz-executor300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.478952][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.483592][ T29] audit: type=1400 audit(1717217847.211:91): avc: denied { read write } for pid=5102 comm="syz-executor300" name="vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 212.510371][ T29] audit: type=1400 audit(1717217847.211:92): avc: denied { open } for pid=5102 comm="syz-executor300" path="/dev/vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 212.529736][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.534594][ T29] audit: type=1400 audit(1717217847.241:93): avc: denied { ioctl } for pid=5100 comm="syz-executor300" path="socket:[4365]" dev="sockfs" ino=4365 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.543238][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.575384][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.576132][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.591643][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.594547][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.600312][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.606257][ T5121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.613822][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.622773][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.628782][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.636489][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.642177][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.650558][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.655856][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.665867][ T4477] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.673089][ T5122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.681628][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.690127][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.701735][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.701941][ T29] audit: type=1400 audit(1717217847.541:94): avc: denied { mounton } for pid=5100 comm="syz-executor300" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 212.709623][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.739457][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.739963][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.747069][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.754532][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.769858][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.772724][ T5111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.785266][ T5111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.797007][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 executing program [ 213.197037][ T29] audit: type=1400 audit(1717217848.041:95): avc: denied { mounton } for pid=5104 comm="syz-executor300" path="/dev/binderfs" dev="devtmpfs" ino=2322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 executing program [ 213.259914][ T29] audit: type=1400 audit(1717217848.041:96): avc: denied { mount } for pid=5104 comm="syz-executor300" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 318.329315][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 318.336601][ C0] rcu: (detected by 0, t=10502 jiffies, g=9441, q=10 ncpus=2) [ 318.344188][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294968873-4294958371), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 318.358128][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g9441 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 318.369306][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 318.379401][ C0] rcu: RCU grace-period kthread stack dump: [ 318.385423][ C0] task:rcu_preempt state:R running task stack:28752 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 318.397278][ C0] Call Trace: [ 318.400873][ C0] [ 318.403847][ C0] __schedule+0xf15/0x5d00 [ 318.408369][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 318.413664][ C0] ? __pfx___schedule+0x10/0x10 [ 318.418800][ C0] ? schedule+0x298/0x350 [ 318.423197][ C0] ? __pfx_lock_release+0x10/0x10 [ 318.428287][ C0] ? __pfx___mod_timer+0x10/0x10 [ 318.433389][ C0] ? lock_acquire+0x1b1/0x560 [ 318.438532][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 318.444411][ C0] schedule+0xe7/0x350 [ 318.448648][ C0] schedule_timeout+0x136/0x2a0 [ 318.453644][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 318.459090][ C0] ? __pfx_process_timeout+0x10/0x10 [ 318.464470][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 318.470348][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 318.475887][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 318.480723][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 318.486074][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 318.491335][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 318.497209][ C0] rcu_gp_kthread+0x271/0x380 [ 318.501949][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.507213][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.512475][ C0] ? __kthread_parkme+0x148/0x220 [ 318.517559][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.522856][ C0] kthread+0x2c1/0x3a0 [ 318.526987][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.532248][ C0] ? __pfx_kthread+0x10/0x10 [ 318.536896][ C0] ret_from_fork+0x45/0x80 [ 318.541376][ C0] ? __pfx_kthread+0x10/0x10 [ 318.546031][ C0] ret_from_fork_asm+0x1a/0x30 [ 318.550871][ C0] [ 318.554021][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 318.560435][ C0] Sending NMI from CPU 0 to CPUs 1: [ 318.565716][ C1] NMI backtrace for cpu 1 [ 318.565736][ C1] CPU: 1 PID: 5125 Comm: syz-executor300 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 [ 318.565766][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 318.565783][ C1] RIP: 0010:kvm_set_cpu_l1tf_flush_l1d+0x0/0x20 [ 318.565833][ C1] Code: e8 e5 c8 79 03 e9 fd fd ff ff e8 cb 71 af 00 e9 2f ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> c7 c7 e0 1e 29 8b e8 a4 89 ad 09 65 c6 05 4c a1 c9 7e 01 c3 cc [ 318.565858][ C1] RSP: 0018:ffffc9000321fc28 EFLAGS: 00000046 [ 318.565878][ C1] RAX: 0000000000000000 RBX: ffffc9000321fc48 RCX: ffffffff81952356 [ 318.565896][ C1] RDX: 0000000000000000 RSI: ffffffff8b8fff40 RDI: ffffffff8d4cfb48 [ 318.565913][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1fc8c0a [ 318.565929][ C1] R10: ffffffff8fe46057 R11: 0000000000000000 R12: 0000000000000000 [ 318.565946][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.565962][ C1] FS: 00005555557053c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 318.565988][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.566006][ C1] CR2: 00007f5df458e4c0 CR3: 000000002bb3c000 CR4: 00000000003506f0 [ 318.566023][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.566038][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.566055][ C1] Call Trace: [ 318.566064][ C1] [ 318.566073][ C1] ? show_regs+0x8c/0xa0 [ 318.566110][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 318.566140][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 318.566174][ C1] ? nmi_handle+0x1a9/0x5c0 [ 318.566213][ C1] ? __pfx_kvm_set_cpu_l1tf_flush_l1d+0x10/0x10 [ 318.566253][ C1] ? default_do_nmi+0x6a/0x160 [ 318.566285][ C1] ? exc_nmi+0x170/0x1e0 [ 318.566316][ C1] ? end_repeat_nmi+0xf/0x53 [ 318.566350][ C1] ? trace_irq_disable.constprop.0+0x36/0x130 [ 318.566393][ C1] ? __pfx_kvm_set_cpu_l1tf_flush_l1d+0x10/0x10 [ 318.566433][ C1] ? __pfx_kvm_set_cpu_l1tf_flush_l1d+0x10/0x10 [ 318.566473][ C1] ? __pfx_kvm_set_cpu_l1tf_flush_l1d+0x10/0x10 [ 318.566512][ C1] [ 318.566520][ C1] [ 318.566527][ C1] sysvec_apic_timer_interrupt+0x16/0xb0 [ 318.566568][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.566603][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 318.566640][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 8a 68 80 f6 48 89 df e8 72 e5 80 f6 e8 1d d4 a9 f6 fb bf 01 00 00 00 92 27 72 f6 65 8b 05 23 87 18 75 85 c0 74 06 5b c3 cc cc cc cc [ 318.566671][ C1] RSP: 0018:ffffc9000321fcf0 EFLAGS: 00000202 [ 318.566690][ C1] RAX: 0000000003205b75 RBX: ffff8880285c1bc0 RCX: 1ffffffff1fc83b9 [ 318.566708][ C1] RDX: 0000000000000000 RSI: ffffffff8b2cade0 RDI: 0000000000000001 [ 318.566724][ C1] RBP: ffff8880285c1fc0 R08: 0000000000000001 R09: 0000000000000001 [ 318.566740][ C1] R10: ffffffff8fe46057 R11: 0000000000000000 R12: 0000000000000000 [ 318.566756][ C1] R13: 0000000000000021 R14: ffff8880285c1bc0 R15: ffff8880285c1bc0 [ 318.566779][ C1] get_signal+0x1e3e/0x2710 [ 318.566812][ C1] ? __pfx_get_signal+0x10/0x10 [ 318.566842][ C1] ? do_sigaltstack.constprop.0+0x547/0x800 [ 318.566882][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 318.566914][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 318.566945][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.566981][ C1] ? __do_sys_rt_sigreturn+0x167/0x230 [ 318.567013][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 318.567047][ C1] syscall_exit_to_user_mode+0x14a/0x2a0 [ 318.567090][ C1] do_syscall_64+0xda/0x250 [ 318.567117][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.567148][ C1] RIP: 0033:0x7f5df4576e79 [ 318.567170][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 318.567194][ C1] RSP: 002b:00007ffd9e1e79d8 EFLAGS: 00000246 [ 318.567212][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f5df4576e79 [ 318.567228][ C1] RDX: 000000002006b000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.567244][ C1] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000 [ 318.567260][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000555555705370 [ 318.567276][ C1] R13: 0000000000000002 R14: 00007ffd9e1e7a50 R15: 00007ffd9e1e7a40 [ 318.567297][ C1] [ 318.567306][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.595 msecs