Warning: Permanently added '[localhost]:54997' (ED25519) to the list of known hosts. 2025/08/13 02:31:54 ignoring optional flag "sandboxArg"="0" 2025/08/13 02:31:55 parsed 1 programs [ 81.081039][ T40] audit: type=1400 audit(1755052317.843:117): avc: denied { unlink } for pid=6256 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 81.456110][ T841] cfg80211: failed to load regulatory.db [ 82.189053][ T6256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.893839][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.896383][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.911720][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.914810][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.751345][ T40] audit: type=1401 audit(1755052321.513:118): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 85.206067][ T5327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.209976][ T5327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.213892][ T5327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.221360][ T5327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.224350][ T5327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.819383][ T6365] chnl_net:caif_netlink_parms(): no params data found [ 85.913635][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.916722][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.919784][ T6365] bridge_slave_0: entered allmulticast mode [ 85.923988][ T6365] bridge_slave_0: entered promiscuous mode [ 85.933731][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.936829][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.939266][ T6365] bridge_slave_1: entered allmulticast mode [ 85.943607][ T6365] bridge_slave_1: entered promiscuous mode [ 85.981454][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.986291][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.027278][ T6365] team0: Port device team_slave_0 added [ 86.035231][ T6365] team0: Port device team_slave_1 added [ 86.077977][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.080461][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.091990][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.097099][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.099679][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.108256][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.147040][ T6365] hsr_slave_0: entered promiscuous mode [ 86.149275][ T6365] hsr_slave_1: entered promiscuous mode [ 86.707912][ T6365] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.713182][ T6365] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.717243][ T6365] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.722068][ T6365] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.784830][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.797729][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.803072][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.805820][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.814817][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.817950][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.845224][ T6365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.947770][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.983931][ T6365] veth0_vlan: entered promiscuous mode [ 86.989769][ T6365] veth1_vlan: entered promiscuous mode [ 87.013405][ T6365] veth0_macvtap: entered promiscuous mode [ 87.018129][ T6365] veth1_macvtap: entered promiscuous mode [ 87.031289][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.038513][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.048273][ T1151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.052870][ T1151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.057039][ T1151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.060243][ T1151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.134622][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.211524][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.308771][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.376561][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/13 02:32:04 executed programs: 0 [ 87.720682][ T5327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.725222][ T5327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.728810][ T5327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.732605][ T5327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.735505][ T5327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.834018][ T6450] chnl_net:caif_netlink_parms(): no params data found [ 87.923808][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.926086][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.928339][ T6450] bridge_slave_0: entered allmulticast mode [ 87.931454][ T6450] bridge_slave_0: entered promiscuous mode [ 87.935822][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.938078][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.940345][ T6450] bridge_slave_1: entered allmulticast mode [ 87.943260][ T6450] bridge_slave_1: entered promiscuous mode [ 88.000123][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.007434][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.064509][ T6450] team0: Port device team_slave_0 added [ 88.068253][ T6450] team0: Port device team_slave_1 added [ 88.105538][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.107751][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.117369][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.130550][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.133565][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.142027][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.178875][ T6450] hsr_slave_0: entered promiscuous mode [ 88.181330][ T6450] hsr_slave_1: entered promiscuous mode [ 88.183362][ T6450] debugfs: 'hsr0' already exists in 'hsr' [ 88.185153][ T6450] Cannot create hsr debugfs directory [ 89.781170][ T5327] Bluetooth: hci0: command tx timeout [ 90.709431][ T1145] bridge_slave_1: left allmulticast mode [ 90.712538][ T1145] bridge_slave_1: left promiscuous mode [ 90.715234][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.722211][ T1145] bridge_slave_0: left allmulticast mode [ 90.724625][ T1145] bridge_slave_0: left promiscuous mode [ 90.727119][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.967096][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.971545][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.975465][ T1145] bond0 (unregistering): Released all slaves [ 91.137267][ T1145] hsr_slave_0: left promiscuous mode [ 91.139530][ T1145] hsr_slave_1: left promiscuous mode [ 91.142352][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.144694][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.147377][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.149835][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.162942][ T1145] veth1_macvtap: left promiscuous mode [ 91.164734][ T1145] veth0_macvtap: left promiscuous mode [ 91.166532][ T1145] veth1_vlan: left promiscuous mode [ 91.168227][ T1145] veth0_vlan: left promiscuous mode [ 91.604543][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 91.654021][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 91.861060][ T5327] Bluetooth: hci0: command tx timeout [ 92.105724][ T6450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.110327][ T6450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.114738][ T6450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.119164][ T6450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.172347][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.182395][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.187840][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.191322][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.204665][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.207696][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.349509][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.374500][ T6450] veth0_vlan: entered promiscuous mode [ 92.379346][ T6450] veth1_vlan: entered promiscuous mode [ 92.439862][ T6450] veth0_macvtap: entered promiscuous mode [ 92.447385][ T6450] veth1_macvtap: entered promiscuous mode [ 92.456096][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.465867][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.474090][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.477257][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.481699][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.484491][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.529251][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.533034][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.548016][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.550524][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.672762][ T40] audit: type=1400 audit(1755052329.443:119): avc: denied { create } for pid=6572 comm="syz.0.17" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.681502][ T40] audit: type=1400 audit(1755052329.443:120): avc: denied { ioctl } for pid=6572 comm="syz.0.17" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10188 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.681858][ T6573] FAULT_INJECTION: forcing a failure. [ 92.681858][ T6573] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.696899][ T6573] CPU: 3 UID: 0 PID: 6573 Comm: syz.0.17 Not tainted 6.17.0-rc1-syzkaller-g8742b2d8935f-dirty #0 PREEMPT(full) [ 92.696916][ T6573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.696922][ T6573] Call Trace: [ 92.696928][ T6573] [ 92.696933][ T6573] dump_stack_lvl+0x16c/0x1f0 [ 92.696948][ T6573] should_fail_ex+0x512/0x640 [ 92.696963][ T6573] should_fail_alloc_page+0xe7/0x130 [ 92.696978][ T6573] prepare_alloc_pages+0x3c2/0x610 [ 92.696995][ T6573] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 92.697011][ T6573] ? mas_next_slot+0x12d3/0x21b0 [ 92.697025][ T6573] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 92.697042][ T6573] ? validate_mm+0x40a/0x570 [ 92.697062][ T6573] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.697076][ T6573] ? policy_nodemask+0xea/0x4e0 [ 92.697089][ T6573] alloc_pages_mpol+0x1fb/0x550 [ 92.697102][ T6573] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 92.697119][ T6573] alloc_pages_noprof+0x131/0x390 [ 92.697131][ T6573] pte_alloc_one+0x1c/0x3a0 [ 92.697145][ T6573] __pte_alloc+0x6d/0x3c0 [ 92.697158][ T6573] ? __pfx___pte_alloc+0x10/0x10 [ 92.697172][ T6573] ? up_write+0x1b2/0x520 [ 92.697184][ T6573] move_page_tables+0x2ac5/0x4580 [ 92.697198][ T6573] ? __pfx_copy_vma+0x10/0x10 [ 92.697211][ T6573] ? __pfx_move_page_tables+0x10/0x10 [ 92.697222][ T6573] ? vms_complete_munmap_vmas+0x667/0x970 [ 92.697243][ T6573] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 92.697255][ T6573] copy_vma_and_data+0x24e/0x790 [ 92.697267][ T6573] ? __pfx_copy_vma_and_data+0x10/0x10 [ 92.697280][ T6573] ? __vma_enter_locked+0x163/0x3f0 [ 92.697298][ T6573] ? find_held_lock+0x2b/0x80 [ 92.697311][ T6573] ? move_vma+0x536/0x1780 [ 92.697324][ T6573] move_vma+0x548/0x1780 [ 92.697334][ T6573] ? do_vmi_munmap+0x20c/0x3e0 [ 92.697345][ T6573] ? __pfx_move_vma+0x10/0x10 [ 92.697354][ T6573] ? mm_get_unmapped_area+0x95/0xe0 [ 92.697369][ T6573] ? shmem_get_unmapped_area+0x170/0xa00 [ 92.697386][ T6573] ? selinux_mmap_addr+0x2b/0x110 [ 92.697400][ T6573] ? bpf_lsm_mmap_addr+0x9/0x10 [ 92.697415][ T6573] ? security_mmap_addr+0x6c/0x1e0 [ 92.697431][ T6573] ? __get_unmapped_area+0x267/0x440 [ 92.697446][ T6573] ? vrm_set_new_addr+0x208/0x290 [ 92.697457][ T6573] mremap_to+0x1b7/0x450 [ 92.697468][ T6573] do_mremap+0xfad/0x1f80 [ 92.697478][ T6573] ? get_pid_task+0xfc/0x250 [ 92.697489][ T6573] ? get_pid_task+0x106/0x250 [ 92.697499][ T6573] ? proc_fail_nth_write+0x9f/0x220 [ 92.697512][ T6573] ? find_held_lock+0x2b/0x80 [ 92.697524][ T6573] ? __pfx_do_mremap+0x10/0x10 [ 92.697536][ T6573] ? find_held_lock+0x2b/0x80 [ 92.697549][ T6573] ? ksys_write+0x190/0x250 [ 92.697563][ T6573] __do_sys_mremap+0x119/0x170 [ 92.697574][ T6573] ? __pfx___do_sys_mremap+0x10/0x10 [ 92.697583][ T6573] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.697608][ T6573] do_syscall_64+0xcd/0x4c0 [ 92.697621][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.697632][ T6573] RIP: 0033:0x7f6b5478ebe9 [ 92.697642][ T6573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.697652][ T6573] RSP: 002b:00007f6b53df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 92.697662][ T6573] RAX: ffffffffffffffda RBX: 00007f6b549b5fa0 RCX: 00007f6b5478ebe9 [ 92.697669][ T6573] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 92.697675][ T6573] RBP: 00007f6b53df6090 R08: 0000200000c00000 R09: 0000000000000000 [ 92.697682][ T6573] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 92.697688][ T6573] R13: 00007f6b549b6038 R14: 00007f6b549b5fa0 R15: 00007fff55995d28 [ 92.697701][ T6573] 2025/08/13 02:32:09 executed programs: 3 [ 92.955939][ T6577] FAULT_INJECTION: forcing a failure. [ 92.955939][ T6577] name failslab, interval 1, probability 0, space 0, times 1 [ 92.960563][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.0.18 Not tainted 6.17.0-rc1-syzkaller-g8742b2d8935f-dirty #0 PREEMPT(full) [ 92.960580][ T6577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.960586][ T6577] Call Trace: [ 92.960591][ T6577] [ 92.960596][ T6577] dump_stack_lvl+0x16c/0x1f0 [ 92.960611][ T6577] should_fail_ex+0x512/0x640 [ 92.960623][ T6577] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 92.960636][ T6577] should_failslab+0xc2/0x120 [ 92.960650][ T6577] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 92.960661][ T6577] ? ptlock_alloc+0x1f/0x70 [ 92.960679][ T6577] ptlock_alloc+0x1f/0x70 [ 92.960695][ T6577] pte_alloc_one+0x82/0x3a0 [ 92.960708][ T6577] __pte_alloc+0x6d/0x3c0 [ 92.960722][ T6577] ? __pfx___pte_alloc+0x10/0x10 [ 92.960740][ T6577] ? up_write+0x1b2/0x520 [ 92.960753][ T6577] move_page_tables+0x2ac5/0x4580 [ 92.960767][ T6577] ? __pfx_copy_vma+0x10/0x10 [ 92.960781][ T6577] ? __pfx_move_page_tables+0x10/0x10 [ 92.960791][ T6577] ? vms_complete_munmap_vmas+0x667/0x970 [ 92.960808][ T6577] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 92.960820][ T6577] copy_vma_and_data+0x24e/0x790 [ 92.960832][ T6577] ? __pfx_copy_vma_and_data+0x10/0x10 [ 92.960863][ T6577] ? __vma_enter_locked+0x163/0x3f0 [ 92.960883][ T6577] ? find_held_lock+0x2b/0x80 [ 92.960896][ T6577] ? move_vma+0x536/0x1780 [ 92.960909][ T6577] move_vma+0x548/0x1780 [ 92.960920][ T6577] ? do_vmi_munmap+0x20c/0x3e0 [ 92.960930][ T6577] ? __pfx_move_vma+0x10/0x10 [ 92.960940][ T6577] ? mm_get_unmapped_area+0x95/0xe0 [ 92.960957][ T6577] ? shmem_get_unmapped_area+0x170/0xa00 [ 92.960975][ T6577] ? selinux_mmap_addr+0x2b/0x110 [ 92.960988][ T6577] ? bpf_lsm_mmap_addr+0x9/0x10 [ 92.961002][ T6577] ? security_mmap_addr+0x6c/0x1e0 [ 92.961019][ T6577] ? __get_unmapped_area+0x267/0x440 [ 92.961034][ T6577] ? vrm_set_new_addr+0x208/0x290 [ 92.961045][ T6577] mremap_to+0x1b7/0x450 [ 92.961056][ T6577] do_mremap+0xfad/0x1f80 [ 92.961065][ T6577] ? get_pid_task+0xfc/0x250 [ 92.961077][ T6577] ? get_pid_task+0x106/0x250 [ 92.961087][ T6577] ? proc_fail_nth_write+0x9f/0x220 [ 92.961100][ T6577] ? find_held_lock+0x2b/0x80 [ 92.961112][ T6577] ? __pfx_do_mremap+0x10/0x10 [ 92.961124][ T6577] ? find_held_lock+0x2b/0x80 [ 92.961137][ T6577] ? ksys_write+0x190/0x250 [ 92.961152][ T6577] __do_sys_mremap+0x119/0x170 [ 92.961162][ T6577] ? __pfx___do_sys_mremap+0x10/0x10 [ 92.961172][ T6577] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.961197][ T6577] do_syscall_64+0xcd/0x4c0 [ 92.961209][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.961221][ T6577] RIP: 0033:0x7f6b5478ebe9 [ 92.961230][ T6577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.961246][ T6577] RSP: 002b:00007f6b53df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 92.961256][ T6577] RAX: ffffffffffffffda RBX: 00007f6b549b5fa0 RCX: 00007f6b5478ebe9 [ 92.961263][ T6577] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 92.961269][ T6577] RBP: 00007f6b53df6090 R08: 0000200000c00000 R09: 0000000000000000 [ 92.961275][ T6577] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 92.961281][ T6577] R13: 00007f6b549b6038 R14: 00007f6b549b5fa0 R15: 00007fff55995d28 [ 92.961295][ T6577] [ 93.235592][ T6580] FAULT_INJECTION: forcing a failure. [ 93.235592][ T6580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 93.240210][ T6580] CPU: 3 UID: 0 PID: 6580 Comm: syz.0.19 Not tainted 6.17.0-rc1-syzkaller-g8742b2d8935f-dirty #0 PREEMPT(full) [ 93.240229][ T6580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.240237][ T6580] Call Trace: [ 93.240244][ T6580] [ 93.240249][ T6580] dump_stack_lvl+0x16c/0x1f0 [ 93.240267][ T6580] should_fail_ex+0x512/0x640 [ 93.240284][ T6580] should_fail_alloc_page+0xe7/0x130 [ 93.240302][ T6580] prepare_alloc_pages+0x3c2/0x610 [ 93.240321][ T6580] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 93.240336][ T6580] ? mark_held_locks+0x49/0x80 [ 93.240355][ T6580] ? smp_call_function_many_cond+0x1239/0x1600 [ 93.240372][ T6580] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.240383][ T6580] ? __pfx_flush_tlb_func+0x10/0x10 [ 93.240402][ T6580] ? smp_call_function_many_cond+0x457/0x1600 [ 93.240421][ T6580] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 93.240440][ T6580] ? __lock_acquire+0x62e/0x1ce0 [ 93.240467][ T6580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 93.240483][ T6580] ? policy_nodemask+0xea/0x4e0 [ 93.240499][ T6580] alloc_pages_mpol+0x1fb/0x550 [ 93.240514][ T6580] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 93.240532][ T6580] alloc_pages_noprof+0x131/0x390 [ 93.240547][ T6580] pte_alloc_one+0x1c/0x3a0 [ 93.240561][ T6580] __pte_alloc+0x6d/0x3c0 [ 93.240576][ T6580] ? __pfx___pte_alloc+0x10/0x10 [ 93.240591][ T6580] ? up_write+0x1b2/0x520 [ 93.240605][ T6580] move_page_tables+0x2ac5/0x4580 [ 93.240625][ T6580] ? __pfx_move_page_tables+0x10/0x10 [ 93.240646][ T6580] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 93.240660][ T6580] copy_vma_and_data+0x24e/0x790 [ 93.240673][ T6580] ? __pfx_copy_vma_and_data+0x10/0x10 [ 93.240688][ T6580] ? __vma_enter_locked+0x163/0x3f0 [ 93.240708][ T6580] ? find_held_lock+0x2b/0x80 [ 93.240723][ T6580] ? move_vma+0x536/0x1780 [ 93.240738][ T6580] move_vma+0x548/0x1780 [ 93.240749][ T6580] ? do_vmi_munmap+0x20c/0x3e0 [ 93.240762][ T6580] ? __pfx_move_vma+0x10/0x10 [ 93.240772][ T6580] ? mm_get_unmapped_area+0x95/0xe0 [ 93.240789][ T6580] ? shmem_get_unmapped_area+0x170/0xa00 [ 93.240809][ T6580] ? selinux_mmap_addr+0x2b/0x110 [ 93.240824][ T6580] ? bpf_lsm_mmap_addr+0x9/0x10 [ 93.240840][ T6580] ? security_mmap_addr+0x6c/0x1e0 [ 93.240877][ T6580] ? __get_unmapped_area+0x267/0x440 [ 93.240894][ T6580] ? vrm_set_new_addr+0x208/0x290 [ 93.240907][ T6580] mremap_to+0x1b7/0x450 [ 93.240919][ T6580] do_mremap+0xfad/0x1f80 [ 93.240930][ T6580] ? get_pid_task+0xfc/0x250 [ 93.240944][ T6580] ? get_pid_task+0x106/0x250 [ 93.240955][ T6580] ? proc_fail_nth_write+0x9f/0x220 [ 93.240969][ T6580] ? find_held_lock+0x2b/0x80 [ 93.240984][ T6580] ? __pfx_do_mremap+0x10/0x10 [ 93.240997][ T6580] ? find_held_lock+0x2b/0x80 [ 93.241012][ T6580] ? ksys_write+0x190/0x250 [ 93.241028][ T6580] __do_sys_mremap+0x119/0x170 [ 93.241040][ T6580] ? __pfx___do_sys_mremap+0x10/0x10 [ 93.241051][ T6580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.241075][ T6580] ? fput+0x9b/0xd0 [ 93.241098][ T6580] do_syscall_64+0xcd/0x4c0 [ 93.241115][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.241128][ T6580] RIP: 0033:0x7f6b5478ebe9 [ 93.241139][ T6580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.241150][ T6580] RSP: 002b:00007f6b53df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 93.241162][ T6580] RAX: ffffffffffffffda RBX: 00007f6b549b5fa0 RCX: 00007f6b5478ebe9 [ 93.241170][ T6580] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 93.241177][ T6580] RBP: 00007f6b53df6090 R08: 0000200000c00000 R09: 0000000000000000 [ 93.241184][ T6580] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 93.241191][ T6580] R13: 00007f6b549b6038 R14: 00007f6b549b5fa0 R15: 00007fff55995d28 [ 93.241208][ T6580] [ 93.373154][ T6580] ------------[ cut here ]------------ [ 93.375308][ T6580] WARNING: CPU: 2 PID: 6580 at mm/mremap.c:357 move_page_tables+0x3752/0x4580 [ 93.378545][ T6580] Modules linked in: [ 93.380742][ T6580] CPU: 2 UID: 0 PID: 6580 Comm: syz.0.19 Not tainted 6.17.0-rc1-syzkaller-g8742b2d8935f-dirty #0 PREEMPT(full) [ 93.386590][ T6580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.389908][ T6580] RIP: 0010:move_page_tables+0x3752/0x4580 [ 93.391751][ T6580] Code: 00 48 8b 04 24 31 ff 0f b6 58 30 89 de e8 f6 1c af ff 84 db 0f 85 0d 01 00 00 e8 09 22 af ff e9 19 d7 ff ff e8 ff 21 af ff 90 <0f> 0b 90 48 8b 44 24 50 48 8d 78 40 48 b8 00 00 00 00 00 fc ff df [ 93.397659][ T6580] RSP: 0018:ffffc9000367f6f8 EFLAGS: 00010293 [ 93.399811][ T6580] RAX: 0000000000000000 RBX: 00000000343ec007 RCX: ffffffff820c64bc [ 93.402264][ T6580] RDX: ffff8880251d2440 RSI: ffffffff820c6fc1 RDI: 0000000000000007 [ 93.404831][ T6580] RBP: ffff888034426700 R08: 0000000000000007 R09: 0000000000000000 [ 93.407319][ T6580] R10: 00000000343ec007 R11: 0000000000000000 R12: dffffc0000000000 [ 93.409877][ T6580] R13: 0000000000000000 R14: ffff88802a726030 R15: ffffffff8df55480 [ 93.412488][ T6580] FS: 00007f6b53df66c0(0000) GS:ffff8880d68bc000(0000) knlGS:0000000000000000 [ 93.415587][ T6580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.417803][ T6580] CR2: 00007ffde7257210 CR3: 000000005332e000 CR4: 0000000000352ef0 [ 93.420471][ T6580] Call Trace: [ 93.421582][ T6580] [ 93.422524][ T6580] ? __pfx_move_page_tables+0x10/0x10 [ 93.424223][ T6580] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 93.426256][ T6580] copy_vma_and_data+0x468/0x790 [ 93.428033][ T6580] ? __pfx_copy_vma_and_data+0x10/0x10 [ 93.429689][ T6580] ? __vma_enter_locked+0x163/0x3f0 [ 93.431371][ T6580] ? move_vma+0x536/0x1780 [ 93.432734][ T6580] move_vma+0x548/0x1780 [ 93.434034][ T6580] ? do_vmi_munmap+0x20c/0x3e0 [ 93.435557][ T6580] ? __pfx_move_vma+0x10/0x10 [ 93.437005][ T6580] ? mm_get_unmapped_area+0x95/0xe0 [ 93.439108][ T6580] ? shmem_get_unmapped_area+0x170/0xa00 [ 93.441490][ T6580] ? selinux_mmap_addr+0x2b/0x110 [ 93.443240][ T6580] ? bpf_lsm_mmap_addr+0x9/0x10 [ 93.445022][ T6580] ? security_mmap_addr+0x6c/0x1e0 [ 93.446571][ T6580] ? __get_unmapped_area+0x267/0x440 [ 93.448552][ T6580] ? vrm_set_new_addr+0x208/0x290 [ 93.450635][ T6580] mremap_to+0x1b7/0x450 [ 93.452624][ T6580] do_mremap+0xfad/0x1f80 [ 93.454423][ T6580] ? get_pid_task+0xfc/0x250 [ 93.456517][ T6580] ? get_pid_task+0x106/0x250 [ 93.458528][ T6580] ? proc_fail_nth_write+0x9f/0x220 [ 93.460680][ T6580] ? find_held_lock+0x2b/0x80 [ 93.462776][ T6580] ? __pfx_do_mremap+0x10/0x10 [ 93.464818][ T6580] ? find_held_lock+0x2b/0x80 [ 93.466754][ T6580] ? ksys_write+0x190/0x250 [ 93.468694][ T6580] __do_sys_mremap+0x119/0x170 [ 93.471145][ T6580] ? __pfx___do_sys_mremap+0x10/0x10 [ 93.473429][ T6580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.476127][ T6580] ? fput+0x9b/0xd0 [ 93.477969][ T6580] do_syscall_64+0xcd/0x4c0 [ 93.479981][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.482641][ T6580] RIP: 0033:0x7f6b5478ebe9 [ 93.484505][ T6580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.492362][ T6580] RSP: 002b:00007f6b53df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 93.495793][ T6580] RAX: ffffffffffffffda RBX: 00007f6b549b5fa0 RCX: 00007f6b5478ebe9 [ 93.499010][ T6580] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 93.502328][ T6580] RBP: 00007f6b53df6090 R08: 0000200000c00000 R09: 0000000000000000 [ 93.505577][ T6580] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 93.508900][ T6580] R13: 00007f6b549b6038 R14: 00007f6b549b5fa0 R15: 00007fff55995d28 [ 93.512472][ T6580] [ 93.513794][ T6580] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.516813][ T6580] CPU: 2 UID: 0 PID: 6580 Comm: syz.0.19 Not tainted 6.17.0-rc1-syzkaller-g8742b2d8935f-dirty #0 PREEMPT(full) [ 93.521743][ T6580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.526131][ T6580] Call Trace: [ 93.527551][ T6580] [ 93.528845][ T6580] dump_stack_lvl+0x3d/0x1f0 [ 93.530861][ T6580] vpanic+0x6e8/0x7a0 [ 93.532607][ T6580] ? __pfx_vpanic+0x10/0x10 [ 93.534506][ T6580] ? move_page_tables+0x3752/0x4580 [ 93.536818][ T6580] panic+0xca/0xd0 [ 93.538400][ T6580] ? __pfx_panic+0x10/0x10 [ 93.540262][ T6580] ? check_panic_on_warn+0x1f/0xb0 [ 93.542340][ T6580] check_panic_on_warn+0xab/0xb0 [ 93.544360][ T6580] __warn+0xf6/0x3c0 [ 93.545924][ T6580] ? move_page_tables+0x3752/0x4580 [ 93.547979][ T6580] report_bug+0x3c3/0x580 [ 93.549864][ T6580] ? move_page_tables+0x3752/0x4580 [ 93.551914][ T6580] handle_bug+0x184/0x210 [ 93.553609][ T6580] exc_invalid_op+0x17/0x50 [ 93.555535][ T6580] asm_exc_invalid_op+0x1a/0x20 [ 93.557458][ T6580] RIP: 0010:move_page_tables+0x3752/0x4580 [ 93.559745][ T6580] Code: 00 48 8b 04 24 31 ff 0f b6 58 30 89 de e8 f6 1c af ff 84 db 0f 85 0d 01 00 00 e8 09 22 af ff e9 19 d7 ff ff e8 ff 21 af ff 90 <0f> 0b 90 48 8b 44 24 50 48 8d 78 40 48 b8 00 00 00 00 00 fc ff df [ 93.567309][ T6580] RSP: 0018:ffffc9000367f6f8 EFLAGS: 00010293 [ 93.569692][ T6580] RAX: 0000000000000000 RBX: 00000000343ec007 RCX: ffffffff820c64bc [ 93.572715][ T6580] RDX: ffff8880251d2440 RSI: ffffffff820c6fc1 RDI: 0000000000000007 [ 93.576224][ T6580] RBP: ffff888034426700 R08: 0000000000000007 R09: 0000000000000000 [ 93.579330][ T6580] R10: 00000000343ec007 R11: 0000000000000000 R12: dffffc0000000000 [ 93.582369][ T6580] R13: 0000000000000000 R14: ffff88802a726030 R15: ffffffff8df55480 [ 93.585493][ T6580] ? move_page_tables+0x2c4c/0x4580 [ 93.587565][ T6580] ? move_page_tables+0x3751/0x4580 [ 93.589876][ T6580] ? move_page_tables+0x3751/0x4580 [ 93.591941][ T6580] ? __pfx_move_page_tables+0x10/0x10 [ 93.594069][ T6580] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 93.596378][ T6580] copy_vma_and_data+0x468/0x790 [ 93.598324][ T6580] ? __pfx_copy_vma_and_data+0x10/0x10 [ 93.600445][ T6580] ? __vma_enter_locked+0x163/0x3f0 [ 93.602481][ T6580] ? move_vma+0x536/0x1780 [ 93.604281][ T6580] move_vma+0x548/0x1780 [ 93.606074][ T6580] ? do_vmi_munmap+0x20c/0x3e0 [ 93.608004][ T6580] ? __pfx_move_vma+0x10/0x10 [ 93.609887][ T6580] ? mm_get_unmapped_area+0x95/0xe0 [ 93.611942][ T6580] ? shmem_get_unmapped_area+0x170/0xa00 [ 93.614103][ T6580] ? selinux_mmap_addr+0x2b/0x110 [ 93.616099][ T6580] ? bpf_lsm_mmap_addr+0x9/0x10 [ 93.618022][ T6580] ? security_mmap_addr+0x6c/0x1e0 [ 93.620059][ T6580] ? __get_unmapped_area+0x267/0x440 [ 93.622160][ T6580] ? vrm_set_new_addr+0x208/0x290 [ 93.624168][ T6580] mremap_to+0x1b7/0x450 [ 93.625881][ T6580] do_mremap+0xfad/0x1f80 [ 93.627609][ T6580] ? get_pid_task+0xfc/0x250 [ 93.629425][ T6580] ? get_pid_task+0x106/0x250 [ 93.631293][ T6580] ? proc_fail_nth_write+0x9f/0x220 [ 93.633458][ T6580] ? find_held_lock+0x2b/0x80 [ 93.635451][ T6580] ? __pfx_do_mremap+0x10/0x10 [ 93.637324][ T6580] ? find_held_lock+0x2b/0x80 [ 93.639277][ T6580] ? ksys_write+0x190/0x250 [ 93.641074][ T6580] __do_sys_mremap+0x119/0x170 [ 93.642966][ T6580] ? __pfx___do_sys_mremap+0x10/0x10 [ 93.645166][ T6580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.647579][ T6580] ? fput+0x9b/0xd0 [ 93.649112][ T6580] do_syscall_64+0xcd/0x4c0 [ 93.650923][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.653267][ T6580] RIP: 0033:0x7f6b5478ebe9 [ 93.655268][ T6580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.662877][ T6580] RSP: 002b:00007f6b53df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 93.666259][ T6580] RAX: ffffffffffffffda RBX: 00007f6b549b5fa0 RCX: 00007f6b5478ebe9 [ 93.669717][ T6580] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 93.672939][ T6580] RBP: 00007f6b53df6090 R08: 0000200000c00000 R09: 0000000000000000 [ 93.676336][ T6580] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 93.679590][ T6580] R13: 00007f6b549b6038 R14: 00007f6b549b5fa0 R15: 00007fff55995d28 [ 93.682804][ T6580] [ 93.684623][ T6580] Kernel Offset: disabled [ 93.686010][ T6580] Rebooting in 86400 seconds..