[ 84.447950][ T40] audit: type=1400 audit(1769595000.189:116): avc: denied { transition } for pid=6119 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.455743][ T40] audit: type=1400 audit(1769595000.189:117): avc: denied { noatsecure } for pid=6119 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.463145][ T40] audit: type=1400 audit(1769595000.199:118): avc: denied { rlimitinh } for pid=6119 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.471456][ T40] audit: type=1400 audit(1769595000.199:119): avc: denied { siginh } for pid=6119 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.990146][ T56] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:54874' (ED25519) to the list of known hosts. 2026/01/28 10:10:06 parsed 1 programs [ 91.200374][ T40] audit: type=1400 audit(1769595006.949:120): avc: denied { node_bind } for pid=6136 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 93.246408][ T40] audit: type=1400 audit(1769595008.989:121): avc: denied { read write } for pid=6169 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.257328][ T40] audit: type=1400 audit(1769595008.989:122): avc: denied { open } for pid=6169 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.281300][ T40] audit: type=1400 audit(1769595009.029:123): avc: denied { unlink } for pid=6169 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.698091][ T40] audit: type=1400 audit(1769595009.439:124): avc: denied { relabelto } for pid=6174 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 94.303973][ T6169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.359134][ T40] audit: type=1401 audit(1769595013.109:125): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 97.483340][ T6213] chnl_net:caif_netlink_parms(): no params data found [ 97.566512][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.569743][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.572803][ T6213] bridge_slave_0: entered allmulticast mode [ 97.576024][ T6213] bridge_slave_0: entered promiscuous mode [ 97.579987][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.582885][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.585921][ T6213] bridge_slave_1: entered allmulticast mode [ 97.589249][ T6213] bridge_slave_1: entered promiscuous mode [ 97.664329][ T6213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.669080][ T6213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.722037][ T6213] team0: Port device team_slave_0 added [ 97.725396][ T6213] team0: Port device team_slave_1 added [ 97.754591][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.757304][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.766864][ T6213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.775420][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.777976][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.787809][ T6213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.825329][ T6213] hsr_slave_0: entered promiscuous mode [ 97.827922][ T6213] hsr_slave_1: entered promiscuous mode [ 98.343057][ T6213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.353260][ T6213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.360051][ T6213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.365224][ T6213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.383462][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.385599][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.387783][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.389847][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.422952][ T6213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.431370][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.435184][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.461855][ T6213] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.469724][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.472244][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.477030][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.479440][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.541871][ T40] audit: type=1400 audit(1769595014.289:126): avc: denied { sys_module } for pid=6213 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 98.619686][ T6213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.644409][ T6213] veth0_vlan: entered promiscuous mode [ 98.651061][ T6213] veth1_vlan: entered promiscuous mode [ 98.667782][ T6213] veth0_macvtap: entered promiscuous mode [ 98.675645][ T6213] veth1_macvtap: entered promiscuous mode [ 98.684664][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.698603][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.704526][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.709381][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.714721][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.719623][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.808962][ T6015] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.812960][ T6015] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.825456][ T6015] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.830722][ T6015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.838339][ T6015] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.843415][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.932435][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.052905][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.072106][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.074694][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.095645][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.099070][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.133762][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/28 10:10:15 executed programs: 0 [ 100.045992][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.049956][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.053253][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.056248][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.059564][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.170040][ T6331] chnl_net:caif_netlink_parms(): no params data found [ 100.240732][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.243683][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.246812][ T6331] bridge_slave_0: entered allmulticast mode [ 100.250891][ T6331] bridge_slave_0: entered promiscuous mode [ 100.255332][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.258432][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.261479][ T6331] bridge_slave_1: entered allmulticast mode [ 100.265213][ T6331] bridge_slave_1: entered promiscuous mode [ 100.313949][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.320180][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.369077][ T6331] team0: Port device team_slave_0 added [ 100.374118][ T6331] team0: Port device team_slave_1 added [ 100.420188][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.423115][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.436142][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.442374][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.444641][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.454275][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.515762][ T6331] hsr_slave_0: entered promiscuous mode [ 100.519046][ T6331] hsr_slave_1: entered promiscuous mode [ 100.522005][ T6331] debugfs: 'hsr0' already exists in 'hsr' [ 100.524362][ T6331] Cannot create hsr debugfs directory [ 102.076780][ T13] bridge_slave_1: left allmulticast mode [ 102.078753][ T13] bridge_slave_1: left promiscuous mode [ 102.080720][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.084818][ T13] bridge_slave_0: left allmulticast mode [ 102.086919][ T13] bridge_slave_0: left promiscuous mode [ 102.089574][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.098678][ T6015] Bluetooth: hci0: command tx timeout [ 102.319686][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.324877][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.330017][ T13] bond0 (unregistering): Released all slaves [ 102.525033][ T13] hsr_slave_0: left promiscuous mode [ 102.527930][ T13] hsr_slave_1: left promiscuous mode [ 102.530695][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.533774][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.537069][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.539802][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.552028][ T13] veth1_macvtap: left promiscuous mode [ 102.553866][ T13] veth0_macvtap: left promiscuous mode [ 102.556019][ T13] veth1_vlan: left promiscuous mode [ 102.560731][ T13] veth0_vlan: left promiscuous mode [ 102.943265][ T13] team0 (unregistering): Port device team_slave_1 removed [ 102.983981][ T13] team0 (unregistering): Port device team_slave_0 removed [ 103.924251][ T6331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.937841][ T6331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.944335][ T6331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.950169][ T6331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.000127][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.009587][ T6331] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.014902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.018016][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.028956][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.032037][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.179523][ T6015] Bluetooth: hci0: command tx timeout [ 104.273445][ T6331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.320167][ T6331] veth0_vlan: entered promiscuous mode [ 104.325526][ T6331] veth1_vlan: entered promiscuous mode [ 104.370306][ T6331] veth0_macvtap: entered promiscuous mode [ 104.376123][ T6331] veth1_macvtap: entered promiscuous mode [ 104.389704][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.395614][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.402113][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.405319][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.408162][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.411691][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.462502][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.465818][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.480658][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.483992][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.511653][ T40] audit: type=1400 audit(1769595020.259:127): avc: denied { read } for pid=6384 comm="syz.0.16" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.522206][ T40] audit: type=1400 audit(1769595020.259:128): avc: denied { open } for pid=6384 comm="syz.0.16" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.529151][ T6385] ------------[ cut here ]------------ [ 104.533860][ T40] audit: type=1400 audit(1769595020.269:129): avc: denied { ioctl } for pid=6384 comm="syz.0.16" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.533895][ T6385] 1 [ 104.544082][ T6385] WARNING: mm/page_alloc.c:5216 at __alloc_frozen_pages_noprof+0x1e8a/0x2410, CPU#2: syz.0.16/6385 [ 104.549673][ T6385] Modules linked in: [ 104.551410][ T6385] CPU: 2 UID: 0 PID: 6385 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 104.555226][ T6385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.559558][ T6385] RIP: 0010:__alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 104.562468][ T6385] Code: 48 8d bb 70 05 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 0f fa ff ff e8 73 bc 0d 00 e9 05 fa ff ff c6 05 31 46 3c 0e 01 90 <0f> 0b 90 e9 bd e4 ff ff 65 48 8b 05 4e c2 80 11 48 8d b8 98 09 00 [ 104.570719][ T6385] RSP: 0018:ffffc900049af6e0 EFLAGS: 00010246 [ 104.573309][ T6385] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 104.576700][ T6385] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040dc0 [ 104.580171][ T6385] RBP: 000000000000000b R08: 0000000000000005 R09: 0000000000000009 [ 104.583610][ T6385] R10: 000000000000000b R11: 0000000000000000 R12: 0000000000040dc0 [ 104.587068][ T6385] R13: 1ffff92000935f24 R14: 1ffff92000935ef2 R15: 000000000000000b [ 104.590292][ T6385] FS: 00007f20fca526c0(0000) GS:ffff8880d67db000(0000) knlGS:0000000000000000 [ 104.593905][ T6385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.596742][ T6385] CR2: 00004000003d0000 CR3: 0000000050ea0000 CR4: 0000000000352ef0 [ 104.600175][ T6385] Call Trace: [ 104.601646][ T6385] [ 104.602972][ T6385] ? __handle_mm_fault+0x4ec/0x2b50 [ 104.605318][ T6385] ? __lock_acquire+0x4a5/0x2630 [ 104.607444][ T6385] ? css_rstat_updated+0x1ce/0x5a0 [ 104.609731][ T6385] ? __pfx___handle_mm_fault+0x10/0x10 [ 104.611799][ T6385] ? __pfx_mt_find+0x10/0x10 [ 104.613573][ T6385] ? __pfx_css_rstat_updated+0x10/0x10 [ 104.615892][ T6385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.618694][ T6385] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 104.621307][ T6385] ? __up_read+0x2c5/0x700 [ 104.622744][ T6385] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.624703][ T6385] ? policy_nodemask+0xed/0x4f0 [ 104.626343][ T6385] alloc_pages_mpol+0x1fb/0x550 [ 104.627907][ T6385] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 104.629710][ T6385] ? irqentry_exit+0x180/0x670 [ 104.631200][ T6385] ? lockdep_hardirqs_on+0x78/0x100 [ 104.632884][ T6385] ___kmalloc_large_node+0x104/0x150 [ 104.634573][ T6385] __kmalloc_large_node_noprof+0x1c/0x70 [ 104.636557][ T6385] ? drm_mode_create_lease_ioctl+0x4a2/0x1fe0 [ 104.638573][ T6385] __kmalloc_noprof+0x6b1/0x9c0 [ 104.640047][ T6385] ? _copy_from_user+0x93/0xd0 [ 104.641791][ T6385] ? drm_mode_create_lease_ioctl+0x4a2/0x1fe0 [ 104.643727][ T6385] drm_mode_create_lease_ioctl+0x4a2/0x1fe0 [ 104.645695][ T6385] ? avc_has_extended_perms+0x484/0x1080 [ 104.647365][ T6385] ? lockdep_unlock+0x5a/0xc0 [ 104.648999][ T6385] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 104.651123][ T6385] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 104.652993][ T6385] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.654602][ T6385] drm_ioctl_kernel+0x1f3/0x3e0 [ 104.656150][ T6385] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 104.658096][ T6385] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 104.660046][ T6385] drm_ioctl+0x5e6/0xc60 [ 104.661488][ T6385] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 104.663545][ T6385] ? __pfx_drm_ioctl+0x10/0x10 [ 104.665100][ T6385] ? selinux_file_ioctl+0x139/0x290 [ 104.666867][ T6385] ? selinux_file_ioctl+0xb4/0x290 [ 104.668838][ T6385] ? __pfx_drm_ioctl+0x10/0x10 [ 104.670380][ T6385] __x64_sys_ioctl+0x18e/0x210 [ 104.671899][ T6385] do_syscall_64+0xc9/0xf80 [ 104.673416][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.675267][ T6385] RIP: 0033:0x7f20fbb97479 [ 104.676700][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.683163][ T6385] RSP: 002b:00007f20fca52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.685883][ T6385] RAX: ffffffffffffffda RBX: 00007f20fbdc5fa0 RCX: 00007f20fbb97479 [ 104.688595][ T6385] RDX: 0000400000000180 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 104.691133][ T6385] RBP: 00007f20fbc281bc R08: 0000000000000000 R09: 0000000000000000 [ 104.693631][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.696172][ T6385] R13: 0000000000000000 R14: 00007f20fbdc5fa0 R15: 00007ffe834df238 [ 104.698981][ T6385] [ 104.700395][ T6385] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.703390][ T6385] CPU: 2 UID: 0 PID: 6385 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 104.707161][ T6385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.711302][ T6385] Call Trace: [ 104.712773][ T6385] [ 104.714055][ T6385] dump_stack_lvl+0x100/0x190 [ 104.716092][ T6385] vpanic+0x20d/0x630 [ 104.717817][ T6385] panic+0xd1/0xd1 [ 104.719418][ T6385] ? __pfx_panic+0x10/0x10 [ 104.721358][ T6385] ? check_panic_on_warn+0x1f/0x90 [ 104.723487][ T6385] check_panic_on_warn.cold+0x19/0x34 [ 104.725778][ T6385] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 104.728356][ T6385] __warn.cold+0x191/0x2f8 [ 104.730251][ T6385] __report_bug+0x296/0x3d0 [ 104.732203][ T6385] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 104.734763][ T6385] ? __pfx___report_bug+0x10/0x10 [ 104.736865][ T6385] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 104.739360][ T6385] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 104.741998][ T6385] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 104.744515][ T6385] report_bug+0xb2/0x220 [ 104.746320][ T6385] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 104.748776][ T6385] handle_bug+0x166/0x2a0 [ 104.750602][ T6385] exc_invalid_op+0x17/0x50 [ 104.752565][ T6385] asm_exc_invalid_op+0x1a/0x20 [ 104.754628][ T6385] RIP: 0010:__alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 104.757474][ T6385] Code: 48 8d bb 70 05 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 0f fa ff ff e8 73 bc 0d 00 e9 05 fa ff ff c6 05 31 46 3c 0e 01 90 <0f> 0b 90 e9 bd e4 ff ff 65 48 8b 05 4e c2 80 11 48 8d b8 98 09 00 [ 104.765204][ T6385] RSP: 0018:ffffc900049af6e0 EFLAGS: 00010246 [ 104.767585][ T6385] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 104.770143][ T6385] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040dc0 [ 104.772797][ T6385] RBP: 000000000000000b R08: 0000000000000005 R09: 0000000000000009 [ 104.775917][ T6385] R10: 000000000000000b R11: 0000000000000000 R12: 0000000000040dc0 [ 104.778397][ T6385] R13: 1ffff92000935f24 R14: 1ffff92000935ef2 R15: 000000000000000b [ 104.780924][ T6385] ? __handle_mm_fault+0x4ec/0x2b50 [ 104.782609][ T6385] ? __lock_acquire+0x4a5/0x2630 [ 104.784240][ T6385] ? css_rstat_updated+0x1ce/0x5a0 [ 104.785883][ T6385] ? __pfx___handle_mm_fault+0x10/0x10 [ 104.787593][ T6385] ? __pfx_mt_find+0x10/0x10 [ 104.789024][ T6385] ? __pfx_css_rstat_updated+0x10/0x10 [ 104.790679][ T6385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.792900][ T6385] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 104.795008][ T6385] ? __up_read+0x2c5/0x700 [ 104.796437][ T6385] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.798292][ T6385] ? policy_nodemask+0xed/0x4f0 [ 104.799824][ T6385] alloc_pages_mpol+0x1fb/0x550 [ 104.801432][ T6385] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 104.803219][ T6385] ? irqentry_exit+0x180/0x670 [ 104.804751][ T6385] ? lockdep_hardirqs_on+0x78/0x100 [ 104.806569][ T6385] ___kmalloc_large_node+0x104/0x150 [ 104.808128][ T6385] __kmalloc_large_node_noprof+0x1c/0x70 [ 104.809878][ T6385] ? drm_mode_create_lease_ioctl+0x4a2/0x1fe0 [ 104.812275][ T6385] __kmalloc_noprof+0x6b1/0x9c0 [ 104.814197][ T6385] ? _copy_from_user+0x93/0xd0 [ 104.815777][ T6385] ? drm_mode_create_lease_ioctl+0x4a2/0x1fe0 [ 104.817867][ T6385] drm_mode_create_lease_ioctl+0x4a2/0x1fe0 [ 104.820018][ T6385] ? avc_has_extended_perms+0x484/0x1080 [ 104.821898][ T6385] ? lockdep_unlock+0x5a/0xc0 [ 104.823393][ T6385] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 104.825405][ T6385] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 104.827455][ T6385] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.829641][ T6385] drm_ioctl_kernel+0x1f3/0x3e0 [ 104.831723][ T6385] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 104.834389][ T6385] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 104.836652][ T6385] drm_ioctl+0x5e6/0xc60 [ 104.838447][ T6385] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 104.841134][ T6385] ? __pfx_drm_ioctl+0x10/0x10 [ 104.842998][ T6385] ? selinux_file_ioctl+0x139/0x290 [ 104.844960][ T6385] ? selinux_file_ioctl+0xb4/0x290 [ 104.846862][ T6385] ? __pfx_drm_ioctl+0x10/0x10 [ 104.848429][ T6385] __x64_sys_ioctl+0x18e/0x210 [ 104.849980][ T6385] do_syscall_64+0xc9/0xf80 [ 104.851696][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.853500][ T6385] RIP: 0033:0x7f20fbb97479 [ 104.854916][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.861414][ T6385] RSP: 002b:00007f20fca52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.864118][ T6385] RAX: ffffffffffffffda RBX: 00007f20fbdc5fa0 RCX: 00007f20fbb97479 [ 104.866616][ T6385] RDX: 0000400000000180 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 104.869100][ T6385] RBP: 00007f20fbc281bc R08: 0000000000000000 R09: 0000000000000000 [ 104.871851][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.874333][ T6385] R13: 0000000000000000 R14: 00007f20fbdc5fa0 R15: 00007ffe834df238 [ 104.876864][ T6385] [ 104.878618][ T6385] Kernel Offset: disabled [ 104.880042][ T6385] Rebooting in 86400 seconds..