[ 33.356810][ T30] audit: type=1400 audit(1788948799.669:68): avc: denied { read open } for pid=2934 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.594918][ T30] audit: type=1400 audit(1788948799.929:69): avc: denied { write } for pid=2931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.740664][ T30] audit: type=1400 audit(1788948800.079:70): avc: denied { write } for pid=2945 comm="rm" name="hook-state" dev="tmpfs" ino=471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.853262][ T30] audit: type=1400 audit(1788948800.189:71): avc: denied { search } for pid=2931 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.687728][ T30] audit: type=1400 audit(1788948801.019:72): avc: denied { transition } for pid=2953 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 34.710787][ T30] audit: type=1400 audit(1788948801.019:73): avc: denied { noatsecure } for pid=2953 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 34.710866][ T30] audit: type=1400 audit(1788948801.029:74): avc: denied { write } for pid=2953 comm="sh" path="pipe:[350]" dev="pipefs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 34.710929][ T30] audit: type=1400 audit(1788948801.029:75): avc: denied { rlimitinh } for pid=2953 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.831679][ T2961] scp (2961) used greatest stack depth: 23480 bytes left [ 40.857329][ T2960] sshd-session (2960) used greatest stack depth: 21848 bytes left Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. 2026/09/09 10:13:36 parsed 1 programs [ 50.645481][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 50.645528][ T30] audit: type=1400 audit(1788948816.979:77): avc: denied { node_bind } for pid=2985 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.660559][ T30] audit: type=1400 audit(1788948816.979:78): avc: denied { module_request } for pid=2985 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 2026/09/09 10:13:37 serving rpc on tcp://36483 [ 53.980264][ T30] audit: type=1400 audit(1788948820.309:79): avc: denied { mounton } for pid=2995 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.004382][ T30] audit: type=1400 audit(1788948820.339:80): avc: denied { mount } for pid=2995 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.024500][ T2995] cgroup: Unknown subsys name 'net' [ 54.028729][ T30] audit: type=1400 audit(1788948820.359:81): avc: denied { unmount } for pid=2995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.153057][ T2995] cgroup: Unknown subsys name 'cpuset' [ 54.163080][ T2995] cgroup: Unknown subsys name 'rlimit' [ 54.309243][ T30] audit: type=1400 audit(1788948820.639:82): avc: denied { setattr } for pid=2995 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.320309][ T30] audit: type=1400 audit(1788948820.649:83): avc: denied { create } for pid=2995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.320494][ T30] audit: type=1400 audit(1788948820.649:84): avc: denied { write } for pid=2995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.320628][ T30] audit: type=1400 audit(1788948820.649:85): avc: denied { read } for pid=2995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.408934][ T30] audit: type=1400 audit(1788948820.739:86): avc: denied { sys_module } for pid=2995 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 54.546882][ T2999] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 54.585690][ T2995] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.219259][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 56.219316][ T30] audit: type=1400 audit(1788948822.549:95): avc: denied { execmem } for pid=3000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.246776][ T30] audit: type=1400 audit(1788948822.569:96): avc: denied { read } for pid=3001 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.246871][ T30] audit: type=1400 audit(1788948822.569:97): avc: denied { open } for pid=3001 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.271350][ T30] audit: type=1400 audit(1788948822.589:98): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.343309][ T30] audit: type=1400 audit(1788948822.679:99): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/root/syzkaller.PqMf93/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 56.367732][ T30] audit: type=1400 audit(1788948822.679:100): avc: denied { mount } for pid=3001 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.367803][ T30] audit: type=1400 audit(1788948822.679:101): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/root/syzkaller.PqMf93/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.367868][ T30] audit: type=1400 audit(1788948822.689:102): avc: denied { mount } for pid=3001 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.367924][ T30] audit: type=1400 audit(1788948822.689:103): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/root/syzkaller.PqMf93/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.367996][ T30] audit: type=1400 audit(1788948822.699:104): avc: denied { mounton } for pid=3001 comm="syz-executor" path="/root/syzkaller.PqMf93/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.543816][ T3001] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.739093][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 61.739158][ T30] audit: type=1400 audit(1788948828.069:116): avc: denied { create } for pid=3042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.987152][ T3160] modprobe (3160) used greatest stack depth: 21720 bytes left [ 72.799470][ T30] audit: type=1400 audit(1788948839.129:117): avc: denied { create } for pid=3509 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 72.820508][ T30] audit: type=1400 audit(1788948839.159:118): avc: denied { setattr } for pid=3509 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 72.823549][ T30] audit: type=1400 audit(1788948839.159:119): avc: denied { read write } for pid=3509 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 72.823725][ T30] audit: type=1400 audit(1788948839.159:120): avc: denied { open } for pid=3509 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 73.140450][ T30] audit: type=1400 audit(1788948839.479:121): avc: denied { create } for pid=3518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2026/09/09 10:14:00 executed programs: 0 2026/09/09 10:14:14 executed programs: 2 [ 87.766808][ T30] audit: type=1400 audit(1788948854.099:122): avc: denied { read write } for pid=3975 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.766899][ T30] audit: type=1400 audit(1788948854.099:123): avc: denied { open } for pid=3975 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.766973][ T30] audit: type=1400 audit(1788948854.099:124): avc: denied { ioctl } for pid=3975 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.020472][ T1130] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.170116][ T1130] usb 4-1: Using ep0 maxpacket: 16 [ 88.174765][ T1130] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 88.181542][ T1130] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.181714][ T1130] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.181828][ T1130] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.181961][ T1130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.205141][ T1130] usb 4-1: config 0 descriptor?? [ 88.633783][ T1130] hid-multitouch 0003:0EEF:72C4.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 89.221249][ C0] [ 89.223620][ C0] ================================ [ 89.228733][ C0] WARNING: inconsistent lock state [ 89.233846][ C0] syzkaller #0 Not tainted [ 89.238268][ C0] -------------------------------- [ 89.243399][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 89.250267][ C0] syz.3.17/3981 [HC0[0]:SC1[1]:HE0:SE0] takes: [ 89.256443][ C0] ffffffff89ab7bc0 (fs_reclaim){+.?.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xcc/0x820 [ 89.266842][ C0] {SOFTIRQ-ON-W} state was registered at: [ 89.272611][ C0] lock_acquire+0x1d1/0x380 [ 89.277225][ C0] fs_reclaim_acquire+0xc4/0x100 [ 89.282380][ C0] mem_cgroup_css_alloc+0x7e/0x1ce0 [ 89.287712][ C0] cgroup_init_subsys+0x223/0x700 [ 89.292844][ C0] cgroup_init+0x569/0xe50 [ 89.297366][ C0] start_kernel+0x470/0x490 [ 89.301977][ C0] x86_64_start_reservations+0x24/0x30 [ 89.307549][ C0] x86_64_start_kernel+0x12b/0x130 [ 89.312774][ C0] common_startup_64+0x13e/0x158 [ 89.317831][ C0] irq event stamp: 317 [ 89.321921][ C0] hardirqs last enabled at (316): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.332207][ C0] hardirqs last disabled at (317): [] _raw_spin_lock_irqsave+0x52/0x60 [ 89.342039][ C0] softirqs last enabled at (302): [] __irq_exit_rcu+0x168/0x210 [ 89.351377][ C0] softirqs last disabled at (313): [] __irq_exit_rcu+0x168/0x210 [ 89.360717][ C0] [ 89.360717][ C0] other info that might help us debug this: [ 89.368788][ C0] Possible unsafe locking scenario: [ 89.368788][ C0] [ 89.376246][ C0] CPU0 [ 89.379554][ C0] ---- [ 89.383037][ C0] lock(fs_reclaim); [ 89.387077][ C0] [ 89.390541][ C0] lock(fs_reclaim); [ 89.394733][ C0] [ 89.394733][ C0] *** DEADLOCK *** [ 89.394733][ C0] [ 89.402890][ C0] locks held by syz.3.17/3981: 1, on CPU#0: [ 89.408802][ C0] #0: ffff888122130870 (&hiddev->existancelock){+.+.}-{4:4}, at: hiddev_ioctl+0x165/0x15b0 [ 89.418948][ C0] [ 89.418948][ C0] stack backtrace: [ 89.424895][ C0] CPU: 0 UID: 0 PID: 3981 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.434093][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.444189][ C0] Call Trace: [ 89.447514][ C0] [ 89.450378][ C0] dump_stack_lvl+0x100/0x190 [ 89.455110][ C0] print_usage_bug.part.0+0x258/0x340 [ 89.460512][ C0] mark_lock+0x956/0x1020 [ 89.464863][ C0] ? stack_trace_save+0x8e/0xc0 [ 89.469779][ C0] __lock_acquire+0x7f1/0x1f40 [ 89.474569][ C0] ? save_trace+0x212/0x420 [ 89.479139][ C0] lock_acquire+0x1d1/0x380 [ 89.483688][ C0] ? __kmalloc_node_track_caller_noprof+0xcc/0x820 [ 89.490229][ C0] fs_reclaim_acquire+0xc4/0x100 [ 89.495205][ C0] ? __kmalloc_node_track_caller_noprof+0xcc/0x820 [ 89.501741][ C0] __kmalloc_node_track_caller_noprof+0xcc/0x820 [ 89.508119][ C0] ? mt_allocate_report_data+0x59/0xcc0 [ 89.513723][ C0] devm_kmalloc+0xa5/0x2b0 [ 89.518179][ C0] mt_allocate_report_data+0x59/0xcc0 [ 89.523586][ C0] ? find_held_lock+0x2b/0x80 [ 89.528318][ C0] ? __wake_up+0x3f/0x60 [ 89.532584][ C0] ? __wake_up+0x3f/0x60 [ 89.536848][ C0] mt_event+0x1bf/0x270 [ 89.541034][ C0] hid_process_event+0x37d/0x5a0 [ 89.546031][ C0] ? __pfx_mt_event+0x10/0x10 [ 89.550744][ C0] hid_report_raw_event+0xb14/0x14c0 [ 89.556081][ C0] __hid_input_report.constprop.0+0x349/0x470 [ 89.562267][ C0] hid_ctrl+0x4a4/0x560 [ 89.566462][ C0] __usb_hcd_giveback_urb+0x38e/0x610 [ 89.571885][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 89.577123][ C0] dummy_timer+0xdb2/0x3700 [ 89.581712][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.587560][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 89.592524][ C0] ? mark_held_locks+0x40/0x70 [ 89.597328][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.603160][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 89.608131][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 89.613389][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 89.618557][ C0] handle_softirqs+0x1d9/0x9b0 [ 89.623371][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 89.628697][ C0] ? _raw_spin_unlock+0x28/0x50 [ 89.633590][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 89.639277][ C0] __irq_exit_rcu+0x168/0x210 [ 89.644069][ C0] irq_exit_rcu+0x9/0x30 [ 89.648337][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0 [ 89.654006][ C0] [ 89.656950][ C0] [ 89.659899][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.666105][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 89.672649][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 f7 05 fa 48 89 df e8 de 4d 06 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 65 a3 f8 f9 65 48 83 3d d4 ee 98 05 00 74 16 5b [ 89.692330][ C0] RSP: 0018:ffffc90001bff9f0 EFLAGS: 00000246 [ 89.698437][ C0] RAX: 0000000000000002 RBX: ffff8881f5625fc0 RCX: 0000000000000040 [ 89.706427][ C0] RDX: 0000000000000001 RSI: ffffffff89329b79 RDI: ffffffff87d2b780 [ 89.714436][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 89.722442][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881f5625fc0 [ 89.730431][ C0] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8881f5626008 [ 89.738430][ C0] __mod_timer+0x409/0xca0 [ 89.742877][ C0] ? __pfx___mod_timer+0x10/0x10 [ 89.747954][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 89.753360][ C0] add_timer+0x62/0x90 [ 89.757448][ C0] schedule_timeout+0x122/0x280 [ 89.762423][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 89.767829][ C0] ? __pfx_process_timeout+0x10/0x10 [ 89.773167][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.779014][ C0] ? prepare_to_wait_event+0xbe/0x720 [ 89.784445][ C0] ? irqentry_exit+0x222/0x7b0 [ 89.789235][ C0] usbhid_wait_io+0x24e/0x420 [ 89.793945][ C0] ? __pfx_usbhid_wait_io+0x10/0x10 [ 89.799180][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 89.805272][ C0] usbhid_init_reports+0x1a7/0x390 [ 89.810427][ C0] hiddev_ioctl+0xddb/0x15b0 [ 89.815048][ C0] ? __pfx_hiddev_ioctl+0x10/0x10 [ 89.820094][ C0] ? __fget_files+0x34/0x3d0 [ 89.824726][ C0] ? selinux_file_ioctl+0x13b/0x290 [ 89.829964][ C0] ? selinux_file_ioctl+0xb6/0x290 [ 89.835121][ C0] ? __pfx_hiddev_ioctl+0x10/0x10 [ 89.840169][ C0] __x64_sys_ioctl+0x18e/0x210 [ 89.845006][ C0] do_syscall_64+0x119/0x710 [ 89.849655][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.855641][ C0] RIP: 0033:0x7f01bd5ee159 [ 89.860106][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.880211][ C0] RSP: 002b:00007f01bd42e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.888658][ C0] RAX: ffffffffffffffda RBX: 00007f01bd876090 RCX: 00007f01bd5ee159 [ 89.896657][ C0] RDX: 0000000000000000 RSI: 00000000c018480b RDI: 0000000000000004 [ 89.904649][ C0] RBP: 00007f01bd68503b R08: 0000000000000000 R09: 0000000000000000 [ 89.912643][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.920659][ C0] R13: 00007f01bd876128 R14: 00007f01bd876090 R15: 00007ffe3b7b3048 [ 89.928689][ C0] [ 89.931779][ C0] ------------[ cut here ]------------ [ 89.931793][ C0] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x8d/0x720 [ 89.931850][ C0] WARNING: kernel/sched/core.c:9179 at __might_sleep+0x94/0xc0, CPU#0: syz.3.17/3981 [ 89.959004][ C0] Modules linked in: [ 89.962923][ C0] CPU: 0 UID: 0 PID: 3981 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.972079][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.982164][ C0] RIP: 0010:__might_sleep+0x97/0xc0 [ 89.987418][ C0] Code: 8b 94 24 c0 17 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 5c d9 92 09 48 89 d1 <67> 48 0f b9 3a eb db e8 fd 20 9c 00 eb 9f 89 74 24 04 e8 22 21 9c [ 90.007046][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010082 [ 90.013151][ C0] RAX: dffffc0000000000 RBX: ffffffff8931ad45 RCX: ffffffff818d66ad [ 90.021145][ C0] RDX: ffffffff818d66ad RSI: 0000000000000002 RDI: ffffffff8b16a1e0 [ 90.029142][ C0] RBP: 0000000000000142 R08: 0000000000000001 R09: 0000000000000000 [ 90.037140][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888107ed3c80 [ 90.045138][ C0] R13: 0000000000000dc0 R14: 00000000ffffffff R15: 00000000ffffffff [ 90.053152][ C0] FS: 00007f01bd42e6c0(0000) GS:ffff8882683e4000(0000) knlGS:0000000000000000 [ 90.062115][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.068722][ C0] CR2: 00007f01bd42dff8 CR3: 00000001214ba000 CR4: 00000000003506f0 [ 90.076740][ C0] Call Trace: [ 90.080048][ C0] [ 90.082921][ C0] __kmalloc_node_track_caller_noprof+0x473/0x820 [ 90.089382][ C0] ? mt_allocate_report_data+0x59/0xcc0 [ 90.094958][ C0] devm_kmalloc+0xa5/0x2b0 [ 90.099423][ C0] mt_allocate_report_data+0x59/0xcc0 [ 90.104818][ C0] ? find_held_lock+0x2b/0x80 [ 90.109521][ C0] ? __wake_up+0x3f/0x60 [ 90.113804][ C0] ? __wake_up+0x3f/0x60 [ 90.118065][ C0] mt_event+0x1bf/0x270 [ 90.122240][ C0] hid_process_event+0x37d/0x5a0 [ 90.127217][ C0] ? __pfx_mt_event+0x10/0x10 [ 90.131910][ C0] hid_report_raw_event+0xb14/0x14c0 [ 90.137221][ C0] __hid_input_report.constprop.0+0x349/0x470 [ 90.143338][ C0] hid_ctrl+0x4a4/0x560 [ 90.147549][ C0] __usb_hcd_giveback_urb+0x38e/0x610 [ 90.152946][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 90.158173][ C0] dummy_timer+0xdb2/0x3700 [ 90.162717][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.168543][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 90.173524][ C0] ? mark_held_locks+0x40/0x70 [ 90.178312][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.184140][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 90.189106][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 90.194356][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 90.199512][ C0] handle_softirqs+0x1d9/0x9b0 [ 90.204315][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 90.209622][ C0] ? _raw_spin_unlock+0x28/0x50 [ 90.214499][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 90.220179][ C0] __irq_exit_rcu+0x168/0x210 [ 90.224922][ C0] irq_exit_rcu+0x9/0x30 [ 90.229211][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0 [ 90.234880][ C0] [ 90.237835][ C0] [ 90.240827][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.246837][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 90.253282][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 f7 05 fa 48 89 df e8 de 4d 06 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 65 a3 f8 f9 65 48 83 3d d4 ee 98 05 00 74 16 5b [ 90.272916][ C0] RSP: 0018:ffffc90001bff9f0 EFLAGS: 00000246 [ 90.279011][ C0] RAX: 0000000000000002 RBX: ffff8881f5625fc0 RCX: 0000000000000040 [ 90.287008][ C0] RDX: 0000000000000001 RSI: ffffffff89329b79 RDI: ffffffff87d2b780 [ 90.295005][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 90.303090][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881f5625fc0 [ 90.311082][ C0] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8881f5626008 [ 90.319084][ C0] __mod_timer+0x409/0xca0 [ 90.323710][ C0] ? __pfx___mod_timer+0x10/0x10 [ 90.328673][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 90.334071][ C0] add_timer+0x62/0x90 [ 90.338158][ C0] schedule_timeout+0x122/0x280 [ 90.343045][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 90.348457][ C0] ? __pfx_process_timeout+0x10/0x10 [ 90.353823][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.359653][ C0] ? prepare_to_wait_event+0xbe/0x720 [ 90.365068][ C0] ? irqentry_exit+0x222/0x7b0 [ 90.369880][ C0] usbhid_wait_io+0x24e/0x420 [ 90.374629][ C0] ? __pfx_usbhid_wait_io+0x10/0x10 [ 90.379864][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 90.385961][ C0] usbhid_init_reports+0x1a7/0x390 [ 90.391110][ C0] hiddev_ioctl+0xddb/0x15b0 [ 90.395726][ C0] ? __pfx_hiddev_ioctl+0x10/0x10 [ 90.400771][ C0] ? __fget_files+0x34/0x3d0 [ 90.405396][ C0] ? selinux_file_ioctl+0x13b/0x290 [ 90.410614][ C0] ? selinux_file_ioctl+0xb6/0x290 [ 90.415750][ C0] ? __pfx_hiddev_ioctl+0x10/0x10 [ 90.420809][ C0] __x64_sys_ioctl+0x18e/0x210 [ 90.425700][ C0] do_syscall_64+0x119/0x710 [ 90.430336][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.436261][ C0] RIP: 0033:0x7f01bd5ee159 [ 90.440694][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.460353][ C0] RSP: 002b:00007f01bd42e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.468806][ C0] RAX: ffffffffffffffda RBX: 00007f01bd876090 RCX: 00007f01bd5ee159 [ 90.476800][ C0] RDX: 0000000000000000 RSI: 00000000c018480b RDI: 0000000000000004 [ 90.484792][ C0] RBP: 00007f01bd68503b R08: 0000000000000000 R09: 0000000000000000 [ 90.492782][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.500770][ C0] R13: 00007f01bd876128 R14: 00007f01bd876090 R15: 00007ffe3b7b3048 [ 90.508946][ C0] [ 90.512023][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.519321][ C0] CPU: 0 UID: 0 PID: 3981 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.528452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.538551][ C0] Call Trace: [ 90.541875][ C0] [ 90.544751][ C0] dump_stack_lvl+0x100/0x190 [ 90.549485][ C0] vpanic+0x553/0x970 [ 90.553568][ C0] ? __pfx_vpanic+0x10/0x10 [ 90.558096][ C0] ? lock_release+0x24d/0x310 [ 90.562821][ C0] panic+0xd1/0xe0 [ 90.566572][ C0] ? __pfx_panic+0x10/0x10 [ 90.571026][ C0] check_panic_on_warn.cold+0x19/0x34 [ 90.576453][ C0] ? __might_sleep+0x94/0xc0 [ 90.581153][ C0] __warn.cold+0x191/0x318 [ 90.585599][ C0] __report_bug+0x30f/0x440 [ 90.590225][ C0] ? __might_sleep+0x94/0xc0 [ 90.594853][ C0] ? __pfx___report_bug+0x10/0x10 [ 90.599950][ C0] ? mark_lock+0x956/0x1020 [ 90.604513][ C0] ? prepare_to_wait_event+0x8d/0x720 [ 90.609923][ C0] ? prepare_to_wait_event+0x8d/0x720 [ 90.615392][ C0] ? stack_trace_save+0x8e/0xc0 [ 90.620288][ C0] report_bug_entry+0xe2/0x290 [ 90.625091][ C0] ? __might_sleep+0x97/0xc0 [ 90.629725][ C0] handle_bug+0x1cd/0x2a0 [ 90.634122][ C0] exc_invalid_op+0x17/0x50 [ 90.638675][ C0] asm_exc_invalid_op+0x1a/0x20 [ 90.643556][ C0] RIP: 0010:__might_sleep+0x97/0xc0 [ 90.648795][ C0] Code: 8b 94 24 c0 17 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 5c d9 92 09 48 89 d1 <67> 48 0f b9 3a eb db e8 fd 20 9c 00 eb 9f 89 74 24 04 e8 22 21 9c [ 90.668434][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010082 [ 90.674587][ C0] RAX: dffffc0000000000 RBX: ffffffff8931ad45 RCX: ffffffff818d66ad [ 90.682592][ C0] RDX: ffffffff818d66ad RSI: 0000000000000002 RDI: ffffffff8b16a1e0 [ 90.690591][ C0] RBP: 0000000000000142 R08: 0000000000000001 R09: 0000000000000000 [ 90.698587][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888107ed3c80 [ 90.706604][ C0] R13: 0000000000000dc0 R14: 00000000ffffffff R15: 00000000ffffffff [ 90.714601][ C0] ? prepare_to_wait_event+0x8d/0x720 [ 90.720028][ C0] ? prepare_to_wait_event+0x8d/0x720 [ 90.725498][ C0] __kmalloc_node_track_caller_noprof+0x473/0x820 [ 90.731955][ C0] ? mt_allocate_report_data+0x59/0xcc0 [ 90.737537][ C0] devm_kmalloc+0xa5/0x2b0 [ 90.742002][ C0] mt_allocate_report_data+0x59/0xcc0 [ 90.747410][ C0] ? find_held_lock+0x2b/0x80 [ 90.752134][ C0] ? __wake_up+0x3f/0x60 [ 90.756428][ C0] ? __wake_up+0x3f/0x60 [ 90.760733][ C0] mt_event+0x1bf/0x270 [ 90.764945][ C0] hid_process_event+0x37d/0x5a0 [ 90.769942][ C0] ? __pfx_mt_event+0x10/0x10 [ 90.774682][ C0] hid_report_raw_event+0xb14/0x14c0 [ 90.780011][ C0] __hid_input_report.constprop.0+0x349/0x470 [ 90.786131][ C0] hid_ctrl+0x4a4/0x560 [ 90.790358][ C0] __usb_hcd_giveback_urb+0x38e/0x610 [ 90.795759][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 90.801004][ C0] dummy_timer+0xdb2/0x3700 [ 90.805597][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.811456][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 90.816477][ C0] ? mark_held_locks+0x40/0x70 [ 90.821274][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.827133][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 90.832106][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 90.837345][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 90.842498][ C0] handle_softirqs+0x1d9/0x9b0 [ 90.847306][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 90.852689][ C0] ? _raw_spin_unlock+0x28/0x50 [ 90.857563][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 90.863245][ C0] __irq_exit_rcu+0x168/0x210 [ 90.867978][ C0] irq_exit_rcu+0x9/0x30 [ 90.872273][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0 [ 90.877937][ C0] [ 90.880882][ C0] [ 90.883827][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.889860][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 90.896331][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 f7 05 fa 48 89 df e8 de 4d 06 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 65 a3 f8 f9 65 48 83 3d d4 ee 98 05 00 74 16 5b [ 90.915963][ C0] RSP: 0018:ffffc90001bff9f0 EFLAGS: 00000246 [ 90.922077][ C0] RAX: 0000000000000002 RBX: ffff8881f5625fc0 RCX: 0000000000000040 [ 90.930076][ C0] RDX: 0000000000000001 RSI: ffffffff89329b79 RDI: ffffffff87d2b780 [ 90.938091][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 90.946104][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8881f5625fc0 [ 90.954195][ C0] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8881f5626008 [ 90.962373][ C0] __mod_timer+0x409/0xca0 [ 90.966840][ C0] ? __pfx___mod_timer+0x10/0x10 [ 90.971806][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 90.977203][ C0] add_timer+0x62/0x90 [ 90.981293][ C0] schedule_timeout+0x122/0x280 [ 90.986183][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 90.991616][ C0] ? __pfx_process_timeout+0x10/0x10 [ 90.996958][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.002787][ C0] ? prepare_to_wait_event+0xbe/0x720 [ 91.008221][ C0] ? irqentry_exit+0x222/0x7b0 [ 91.013021][ C0] usbhid_wait_io+0x24e/0x420 [ 91.017917][ C0] ? __pfx_usbhid_wait_io+0x10/0x10 [ 91.023159][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 91.029256][ C0] usbhid_init_reports+0x1a7/0x390 [ 91.034481][ C0] hiddev_ioctl+0xddb/0x15b0 [ 91.039115][ C0] ? __pfx_hiddev_ioctl+0x10/0x10 [ 91.044181][ C0] ? __fget_files+0x34/0x3d0 [ 91.048916][ C0] ? selinux_file_ioctl+0x13b/0x290 [ 91.054177][ C0] ? selinux_file_ioctl+0xb6/0x290 [ 91.059487][ C0] ? __pfx_hiddev_ioctl+0x10/0x10 [ 91.064541][ C0] __x64_sys_ioctl+0x18e/0x210 [ 91.069337][ C0] do_syscall_64+0x119/0x710 [ 91.073967][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.079896][ C0] RIP: 0033:0x7f01bd5ee159 [ 91.084370][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.104041][ C0] RSP: 002b:00007f01bd42e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.112504][ C0] RAX: ffffffffffffffda RBX: 00007f01bd876090 RCX: 00007f01bd5ee159 [ 91.120498][ C0] RDX: 0000000000000000 RSI: 00000000c018480b RDI: 0000000000000004 [ 91.128492][ C0] RBP: 00007f01bd68503b R08: 0000000000000000 R09: 0000000000000000 [ 91.136514][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.144516][ C0] R13: 00007f01bd876128 R14: 00007f01bd876090 R15: 00007ffe3b7b3048 [ 91.152609][ C0] [ 91.156216][ C0] Kernel Offset: disabled [ 91.160571][ C0] Rebooting in 86400 seconds..