Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. executing program [ 130.878131][ T30] audit: type=1400 audit(1725005557.333:88): avc: denied { execmem } for pid=5232 comm="syz-executor329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 130.908989][ T30] audit: type=1400 audit(1725005557.363:89): avc: denied { read write } for pid=5234 comm="syz-executor329" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.937240][ T30] audit: type=1400 audit(1725005557.363:90): avc: denied { open } for pid=5234 comm="syz-executor329" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.961561][ T30] audit: type=1400 audit(1725005557.363:91): avc: denied { ioctl } for pid=5234 comm="syz-executor329" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.173259][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.371281][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.383121][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.391127][ T25] usb 1-1: Product: syz [ 131.395388][ T25] usb 1-1: Manufacturer: syz [ 131.400042][ T25] usb 1-1: SerialNumber: syz [ 131.423876][ T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.460633][ T1512] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 executing program [ 131.669652][ T940] usb 1-1: USB disconnect, device number 2 [ 132.553011][ T1512] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 132.560428][ T1512] ath9k_htc: Failed to initialize the device [ 132.571331][ T940] usb 1-1: ath9k_htc: USB layer deinitialized [ 132.935900][ T940] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.129080][ T940] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 133.138498][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.146595][ T940] usb 1-1: Product: syz [ 133.150803][ T940] usb 1-1: Manufacturer: syz [ 133.155484][ T940] usb 1-1: SerialNumber: syz [ 133.171836][ T940] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 133.192517][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 executing program [ 133.475463][ T940] usb 1-1: USB disconnect, device number 3 [ 134.233985][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 134.241136][ T8] ath9k_htc: Failed to initialize the device [ 134.248957][ T940] usb 1-1: ath9k_htc: USB layer deinitialized [ 134.602990][ T940] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.789440][ T940] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.798650][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.806745][ T940] usb 1-1: Product: syz [ 134.810952][ T940] usb 1-1: Manufacturer: syz [ 134.816043][ T940] usb 1-1: SerialNumber: syz [ 134.832010][ T940] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 134.856846][ T5241] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 executing program [ 135.061912][ T1512] usb 1-1: USB disconnect, device number 4 [ 135.923008][ T5241] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 135.930277][ T5241] ath9k_htc: Failed to initialize the device [ 135.938156][ T1512] usb 1-1: ath9k_htc: USB layer deinitialized [ 136.293906][ T1512] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.479442][ T1512] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.488648][ T1512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.498363][ T1512] usb 1-1: Product: syz [ 136.502550][ T1512] usb 1-1: Manufacturer: syz [ 136.508386][ T1512] usb 1-1: SerialNumber: syz [ 136.520350][ T1512] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 136.542943][ T25] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 executing program [ 136.749653][ T5241] usb 1-1: USB disconnect, device number 5 [ 137.592953][ T25] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 137.600250][ T25] ath9k_htc: Failed to initialize the device [ 137.608911][ T5241] usb 1-1: ath9k_htc: USB layer deinitialized [ 137.982971][ T5241] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.178617][ T5241] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 138.187750][ T5241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.195801][ T5241] usb 1-1: Product: syz [ 138.199994][ T5241] usb 1-1: Manufacturer: syz [ 138.204660][ T5241] usb 1-1: SerialNumber: syz [ 138.217816][ T5241] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 138.243568][ T940] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 executing program [ 138.459400][ T25] usb 1-1: USB disconnect, device number 6 [ 139.275342][ T940] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 139.282454][ T940] ath9k_htc: Failed to initialize the device [ 139.290125][ T25] usb 1-1: ath9k_htc: USB layer deinitialized [ 139.653015][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.839249][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.848436][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.859211][ T25] usb 1-1: Product: syz [ 139.863549][ T25] usb 1-1: Manufacturer: syz [ 139.868178][ T25] usb 1-1: SerialNumber: syz [ 139.880535][ T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.903638][ T1512] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 executing program [ 140.110261][ T940] usb 1-1: USB disconnect, device number 7 [ 140.952988][ T1512] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 140.960114][ T1512] ath9k_htc: Failed to initialize the device [ 140.970047][ T940] usb 1-1: ath9k_htc: USB layer deinitialized [ 141.332988][ T940] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.518518][ T940] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.527807][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.535911][ T940] usb 1-1: Product: syz [ 141.540137][ T940] usb 1-1: Manufacturer: syz [ 141.544982][ T940] usb 1-1: SerialNumber: syz [ 141.558319][ T940] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 141.577997][ T5241] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 executing program [ 141.783934][ T1512] usb 1-1: USB disconnect, device number 8 [ 142.632963][ T5241] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 142.640171][ T5241] ath9k_htc: Failed to initialize the device [ 142.647669][ T1512] usb 1-1: ath9k_htc: USB layer deinitialized [ 143.015405][ T1512] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.208629][ T1512] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.217871][ T1512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.228582][ T1512] usb 1-1: Product: syz [ 143.232908][ T1512] usb 1-1: Manufacturer: syz [ 143.237732][ T1512] usb 1-1: SerialNumber: syz [ 143.250292][ T1512] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 143.275396][ T25] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 executing program [ 143.481765][ T5241] usb 1-1: USB disconnect, device number 9 [ 144.315420][ T25] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 144.323154][ T25] ath9k_htc: Failed to initialize the device [ 144.330424][ T5241] usb 1-1: ath9k_htc: USB layer deinitialized [ 144.695332][ T5241] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.888513][ T5241] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 144.897683][ T5241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.905775][ T5241] usb 1-1: Product: syz [ 144.909979][ T5241] usb 1-1: Manufacturer: syz [ 144.914661][ T5241] usb 1-1: SerialNumber: syz [ 144.931546][ T5241] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 144.951901][ T940] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 executing program [ 145.158150][ T25] usb 1-1: USB disconnect, device number 10 [ 145.992949][ T940] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 146.000137][ T940] ath9k_htc: Failed to initialize the device [ 146.007592][ T25] usb 1-1: ath9k_htc: USB layer deinitialized [ 146.373055][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 146.573082][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.582162][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.590253][ T25] usb 1-1: Product: syz [ 146.596836][ T25] usb 1-1: Manufacturer: syz [ 146.601448][ T25] usb 1-1: SerialNumber: syz [ 146.613594][ T25] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.637589][ T1512] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 173.762900][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2690 jiffies s: 497 root: 0x2/. [ 173.774631][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 173.781800][ T19] Sending NMI from CPU 0 to CPUs 1: [ 173.787122][ C1] NMI backtrace for cpu 1 [ 173.787153][ C1] CPU: 1 UID: 0 PID: 23 Comm: migration/1 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 173.787185][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 173.787200][ C1] Stopper: active_load_balance_cpu_stop+0x0/0xdf0 <- sched_balance_rq+0x2234/0x3460 [ 173.787283][ C1] RIP: 0010:debug_check_no_obj_freed+0x0/0x600 [ 173.787329][ C1] Code: ff e9 5c fe ff ff e8 df 71 88 06 e8 da 2d 5d fd e9 fd fe ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 f0 48 [ 173.787355][ C1] RSP: 0018:ffffc90000a18678 EFLAGS: 00000046 [ 173.787375][ C1] RAX: 0000000000000046 RBX: ffff88806f09ce00 RCX: dffffc0000000000 [ 173.787393][ C1] RDX: ffff888023ff8040 RSI: 0000000000000080 RDI: ffff88806f09ce00 [ 173.787410][ C1] RBP: ffffc90000a186c8 R08: 0000000000000007 R09: 0000000000000000 [ 173.787426][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0001bc2700 [ 173.787442][ C1] R13: 0000000000000000 R14: ffff888015841a00 R15: 0000000000000000 [ 173.787459][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 173.787484][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.787502][ C1] CR2: 00007f278db1ca58 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 173.787519][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.787534][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.787550][ C1] Call Trace: [ 173.787559][ C1] [ 173.787568][ C1] ? show_regs+0x8c/0xa0 [ 173.787613][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 173.787650][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 173.787695][ C1] ? nmi_handle+0x1a9/0x5c0 [ 173.787720][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 173.787760][ C1] ? default_do_nmi+0x6a/0x160 [ 173.787801][ C1] ? exc_nmi+0x170/0x1e0 [ 173.787841][ C1] ? end_repeat_nmi+0xf/0x53 [ 173.787875][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 173.787916][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 173.787957][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 173.787996][ C1] [ 173.788004][ C1] [ 173.788011][ C1] kfree+0x284/0x3b0 [ 173.788047][ C1] ? dummy_timer+0x1750/0x38d0 [ 173.788080][ C1] dummy_timer+0x1750/0x38d0 [ 173.788113][ C1] ? debug_object_deactivate+0x1f0/0x370 [ 173.788156][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 173.788202][ C1] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 173.788230][ C1] ? __pfx_lock_release+0x10/0x10 [ 173.788270][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 173.788300][ C1] ? timerqueue_del+0x83/0x150 [ 173.788332][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 173.788360][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 173.788394][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 173.788423][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 173.788467][ C1] hrtimer_interrupt+0x31b/0x800 [ 173.788505][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 173.788533][ C1] sysvec_apic_timer_interrupt+0x43/0xb0 [ 173.788565][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.788608][ C1] RIP: 0010:write_comp_data+0x38/0x90 [ 173.788650][ C1] Code: 1a 78 7e 65 8b 05 80 1a 78 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 1c 16 00 00 <85> c0 74 4f 8b 82 f8 15 00 00 83 f8 03 75 44 48 8b 82 00 16 00 00 [ 173.788674][ C1] RSP: 0018:ffffc90000a18b78 EFLAGS: 00000246 [ 173.788693][ C1] RAX: 0000000000000000 RBX: ffff88807f386580 RCX: ffffffff8924358a [ 173.788710][ C1] RDX: ffff8880182ada00 RSI: 0000000000000000 RDI: 0000000000000001 [ 173.788726][ C1] RBP: ffff88802f55cb00 R08: 0000000000000001 R09: 0000000000000000 [ 173.788742][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807f3865b8 [ 173.788758][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.788779][ C1] ? pie_calculate_probability+0x64a/0x850 [ 173.788825][ C1] pie_calculate_probability+0x64a/0x850 [ 173.788877][ C1] fq_pie_timer+0x215/0x5a0 [ 173.788923][ C1] call_timer_fn+0x1a0/0x610 [ 173.788960][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 173.789001][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 173.789038][ C1] ? __pfx_lock_release+0x10/0x10 [ 173.789079][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 173.789122][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 173.789164][ C1] __run_timers+0x74b/0xaf0 [ 173.789206][ C1] ? __pfx___run_timers+0x10/0x10 [ 173.789245][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 173.789287][ C1] ? irqentry_exit+0x3b/0x90 [ 173.789323][ C1] run_timer_base+0x111/0x190 [ 173.789361][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 173.789402][ C1] run_timer_softirq+0x1a/0x40 [ 173.789439][ C1] handle_softirqs+0x216/0x8f0 [ 173.789471][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 173.789503][ C1] irq_exit_rcu+0xbb/0x120 [ 173.789530][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 173.789561][ C1] [ 173.789568][ C1] [ 173.789577][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.789619][ C1] RIP: 0010:active_load_balance_cpu_stop+0x341/0xdf0 [ 173.789654][ C1] Code: 00 4c 89 e7 85 c0 0f 85 b6 02 00 00 48 83 c7 18 e8 f4 ec 08 00 4c 89 e7 e8 3c 7a fc ff e8 d7 3a 33 00 fb 48 8b 8d d0 fe ff ff <48> b8 00 00 00 00 00 fc ff df 48 01 c1 48 c7 01 00 00 00 00 48 c7 [ 173.789677][ C1] RSP: 0018:ffffc900001d7cc8 EFLAGS: 00000206 [ 173.789696][ C1] RAX: 0000000000000b35 RBX: 000000000000359e RCX: 1ffff9200003afa2 [ 173.789713][ C1] RDX: 0000000000000000 RSI: ffffffff8b4cd740 RDI: ffffffff8bb0ee40 [ 173.789730][ C1] RBP: ffffc900001d7e20 R08: 0000000000000001 R09: 0000000000000001 [ 173.789746][ C1] R10: ffffffff9014179f R11: ffff8880b9228a40 R12: ffff8880b923edc0 [ 173.789763][ C1] R13: ffff888016e82000 R14: ffff8880b923fb58 R15: ffff8880b933edc0 [ 173.789791][ C1] ? active_load_balance_cpu_stop+0x339/0xdf0 [ 173.789829][ C1] ? __pfx_active_load_balance_cpu_stop+0x10/0x10 [ 173.789876][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 173.789907][ C1] ? sched_balance_rq+0x2234/0x3460 [ 173.789945][ C1] ? __pfx_active_load_balance_cpu_stop+0x10/0x10 [ 173.789979][ C1] cpu_stopper_thread+0x21b/0x490 [ 173.790014][ C1] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 173.790046][ C1] ? smpboot_thread_fn+0x59d/0xa10 [ 173.790074][ C1] smpboot_thread_fn+0x661/0xa10 [ 173.790104][ C1] ? __kthread_parkme+0x148/0x220 [ 173.790136][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 173.790166][ C1] kthread+0x2c1/0x3a0 [ 173.790194][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.790224][ C1] ? __pfx_kthread+0x10/0x10 [ 173.790254][ C1] ret_from_fork+0x45/0x80 [ 173.790292][ C1] ? __pfx_kthread+0x10/0x10 [ 173.790322][ C1] ret_from_fork_asm+0x1a/0x30 [ 173.790369][ C1] [ 173.804241][ C1] hrtimer: interrupt took 11993088 ns