[ 48.405100][ T29] audit: type=1400 audit(1772255366.528:98): avc: denied { create } for pid=2999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.291004][ T29] audit: type=1400 audit(1772255367.418:99): avc: denied { create } for pid=3025 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 49.311513][ T29] audit: type=1400 audit(1772255367.418:100): avc: denied { sys_admin } for pid=3025 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 49.344834][ T29] audit: type=1400 audit(1772255367.468:101): avc: denied { sys_chroot } for pid=3026 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 49.792516][ T29] audit: type=1400 audit(1772255367.918:102): avc: denied { create } for pid=3038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.224663][ T29] audit: type=1400 audit(1772255368.348:103): avc: denied { create } for pid=3046 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 50.246561][ T29] audit: type=1400 audit(1772255368.368:104): avc: denied { setattr } for pid=3046 comm="syz-executor" name="tun" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 50.271269][ T29] audit: type=1400 audit(1772255368.368:105): avc: denied { read write } for pid=3046 comm="syz-executor" name="tun" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 50.294403][ T29] audit: type=1400 audit(1772255368.368:106): avc: denied { open } for pid=3046 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 62.191909][ T3049] syz-executor (3049) used greatest stack depth: 22600 bytes left Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. 2026/02/28 05:10:16 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 100.942186][ T29] audit: type=1400 audit(1772255419.068:107): avc: denied { unlink } for pid=3985 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 101.027228][ T3985] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.883737][ T29] audit: type=1401 audit(1772255422.008:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/02/28 05:10:35 executed programs: 0 2026/02/28 05:10:47 executed programs: 2 [ 128.929402][ T29] audit: type=1400 audit(1772255447.058:109): avc: denied { read write } for pid=4969 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.961424][ T29] audit: type=1400 audit(1772255447.088:110): avc: denied { open } for pid=4969 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.985771][ T29] audit: type=1400 audit(1772255447.088:111): avc: denied { ioctl } for pid=4969 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.208303][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.358068][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 129.365548][ T9] usb 4-1: config 0 has too many interfaces: 197, using maximum allowed: 32 [ 129.374545][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 197 [ 129.384026][ T9] usb 4-1: config 0 has no interface number 0 [ 129.390245][ T9] usb 4-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice= 6.2d [ 129.399359][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.411884][ T9] usb 4-1: config 0 descriptor?? [ 129.446188][ T29] audit: type=1400 audit(1772255447.568:112): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/libertas/usb8388_olpc.bin" dev="sda1" ino=432 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 129.688208][ C0] usb8xxx: URB in failure status: -2 [ 129.825099][ C0] usb8xxx: URB in failure status: -71 [ 129.826684][ T705] usb 4-1: USB disconnect, device number 2 2026/02/28 05:10:54 executed programs: 5 2026/02/28 05:11:00 executed programs: 7 2026/02/28 05:11:06 executed programs: 9 2026/02/28 05:11:12 executed programs: 11 2026/02/28 05:11:18 executed programs: 13 2026/02/28 05:11:24 executed programs: 15 2026/02/28 05:11:30 executed programs: 17 2026/02/28 05:11:36 executed programs: 19 2026/02/28 05:11:42 executed programs: 21 2026/02/28 05:11:48 executed programs: 23 2026/02/28 05:11:54 executed programs: 25 2026/02/28 05:12:00 executed programs: 27 2026/02/28 05:12:06 executed programs: 29 2026/02/28 05:12:13 executed programs: 31 2026/02/28 05:12:19 executed programs: 33 2026/02/28 05:12:25 executed programs: 35 2026/02/28 05:12:31 executed programs: 37 2026/02/28 05:12:37 executed programs: 39 2026/02/28 05:12:43 executed programs: 41 2026/02/28 05:12:49 executed programs: 43 2026/02/28 05:12:55 executed programs: 45 2026/02/28 05:13:01 executed programs: 47 2026/02/28 05:13:07 executed programs: 49 2026/02/28 05:13:13 executed programs: 51 2026/02/28 05:13:19 executed programs: 53 2026/02/28 05:13:25 executed programs: 55 [ 290.998084][ T30] INFO: task kworker/1:2:705 blocked for more than 143 seconds. [ 291.006116][ T30] Not tainted syzkaller #0 [ 291.011183][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.020017][ T30] task:kworker/1:2 state:D stack:26328 pid:705 tgid:705 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 291.032541][ T30] Workqueue: usb_hub_wq hub_event [ 291.037722][ T30] Call Trace: [ 291.041049][ T30] [ 291.044028][ T30] __schedule+0xeb1/0x41f0 [ 291.048550][ T30] ? __pfx___schedule+0x10/0x10 [ 291.053451][ T30] ? find_held_lock+0x2b/0x80 [ 291.058281][ T30] ? schedule+0x2bf/0x390 [ 291.062650][ T30] schedule+0xdd/0x390 [ 291.066760][ T30] ? __pfx_if_usb_prog_firmware+0x10/0x10 [ 291.072534][ T30] lbs_wait_for_firmware_load+0x190/0x260 [ 291.078336][ T30] ? __pfx_lbs_wait_for_firmware_load+0x10/0x10 [ 291.084605][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.089919][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 291.096037][ T30] ? usb_hcd_flush_endpoint+0x359/0x400 [ 291.101771][ T30] lbs_remove_card+0x84/0x390 [ 291.106496][ T30] if_usb_disconnect+0xaf/0x2e0 [ 291.111597][ T30] usb_unbind_interface+0x1dd/0x9e0 [ 291.116843][ T30] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 291.122537][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 291.128412][ T30] device_remove+0x12a/0x180 [ 291.133037][ T30] device_release_driver_internal+0x42e/0x600 [ 291.139352][ T30] bus_remove_device+0x22f/0x440 [ 291.144354][ T30] device_del+0x376/0x9b0 [ 291.148896][ T30] ? __pfx_device_del+0x10/0x10 [ 291.153788][ T30] ? kobject_put+0xb9/0x640 [ 291.158375][ T30] usb_disable_device+0x367/0x810 [ 291.163464][ T30] usb_disconnect+0x2e2/0x9a0 [ 291.168342][ T30] hub_event+0x1d0c/0x4af0 [ 291.173101][ T30] ? __lock_acquire+0x4a5/0x2630 [ 291.178131][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 291.183371][ T30] ? __pfx_hub_event+0x10/0x10 [ 291.188210][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 291.193911][ T30] ? rcu_is_watching+0x12/0xc0 [ 291.198740][ T30] process_one_work+0x9d7/0x1920 [ 291.203725][ T30] ? __pfx_process_one_work+0x10/0x10 [ 291.209362][ T30] ? __pfx_hub_event+0x10/0x10 [ 291.214172][ T30] worker_thread+0x5da/0xe40 [ 291.218837][ T30] ? __pfx_worker_thread+0x10/0x10 [ 291.224094][ T30] ? kthread+0x13a/0x450 [ 291.228405][ T30] ? __pfx_worker_thread+0x10/0x10 [ 291.233550][ T30] kthread+0x370/0x450 [ 291.237628][ T30] ? __pfx_kthread+0x10/0x10 [ 291.242283][ T30] ret_from_fork+0x6c3/0xcb0 [ 291.246942][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 291.252164][ T30] ? __switch_to+0x7aa/0x1120 [ 291.256875][ T30] ? __pfx_kthread+0x10/0x10 [ 291.261570][ T30] ret_from_fork_asm+0x1a/0x30 [ 291.266413][ T30] [ 291.269539][ T30] [ 291.269539][ T30] Showing all locks held in the system: [ 291.277359][ T30] 2 locks held by kworker/0:1/10: [ 291.282482][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 291.293034][ T30] #1: ffffc900000afd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 291.304530][ T30] 1 lock held by khungtaskd/30: [ 291.309491][ T30] #0: ffffffff896e05a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 291.319599][ T30] 5 locks held by kworker/1:2/705: [ 291.324835][ T30] #0: ffff888105eac148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 291.335708][ T30] #1: ffffc90001fbfd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 291.347027][ T30] #2: ffff88810b76a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 291.356030][ T30] #3: ffff888106382198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 291.365591][ T30] #4: ffff888115d0a160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 291.376423][ T30] 2 locks held by getty/2917: [ 291.381157][ T30] #0: ffff888115b8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 291.391080][ T30] #1: ffffc900000432f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 291.401402][ T30] [ 291.403756][ T30] ============================================= [ 291.403756][ T30] [ 291.412365][ T30] NMI backtrace for cpu 1 [ 291.412386][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 291.412415][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.412430][ T30] Call Trace: [ 291.412438][ T30] [ 291.412448][ T30] dump_stack_lvl+0x100/0x190 [ 291.412488][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 291.412527][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 291.412582][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 291.412617][ T30] sys_info+0x141/0x190 [ 291.412644][ T30] watchdog+0xd25/0x1050 [ 291.412689][ T30] ? __pfx_watchdog+0x10/0x10 [ 291.412723][ T30] ? __kthread_parkme+0x18c/0x230 [ 291.412772][ T30] ? kthread+0x13a/0x450 [ 291.412799][ T30] ? __pfx_watchdog+0x10/0x10 [ 291.412827][ T30] kthread+0x370/0x450 [ 291.412855][ T30] ? __pfx_kthread+0x10/0x10 [ 291.412885][ T30] ret_from_fork+0x6c3/0xcb0 [ 291.412925][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 291.412967][ T30] ? __switch_to+0x7aa/0x1120 [ 291.412995][ T30] ? __pfx_kthread+0x10/0x10 [ 291.413027][ T30] ret_from_fork_asm+0x1a/0x30 [ 291.413085][ T30] [ 291.413096][ T30] Sending NMI from CPU 1 to CPUs 0: [ 291.533118][ C0] NMI backtrace for cpu 0 [ 291.533137][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 291.533163][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.533175][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 291.533206][ C0] Code: ae b1 01 e9 13 e8 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 e1 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 291.533226][ C0] RSP: 0018:ffffffff89407e10 EFLAGS: 00000242 [ 291.533245][ C0] RAX: 00000000000f7031 RBX: ffffffff8942ea40 RCX: ffffffff876898d5 [ 291.533260][ C0] RDX: 0000000000000000 RSI: ffffffff8901db96 RDI: ffffffff87afa420 [ 291.533274][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed103eac6725 [ 291.533287][ C0] R10: ffff8881f563392b R11: 0000000000000000 R12: fffffbfff1285d48 [ 291.533301][ C0] R13: 0000000000000000 R14: ffffffff8aefe2d0 R15: 0000000000000000 [ 291.533315][ C0] FS: 0000000000000000(0000) GS:ffff8882686d3000(0000) knlGS:0000000000000000 [ 291.533338][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.533352][ C0] CR2: 00007fe3889f5900 CR3: 00000001323d4000 CR4: 00000000003506f0 [ 291.533366][ C0] Call Trace: [ 291.533375][ C0] [ 291.533382][ C0] default_idle+0x9/0x10 [ 291.533411][ C0] default_idle_call+0x6c/0xb0 [ 291.533438][ C0] do_idle+0x35b/0x4b0 [ 291.533470][ C0] ? __pfx_do_idle+0x10/0x10 [ 291.533503][ C0] cpu_startup_entry+0x4f/0x60 [ 291.533533][ C0] rest_init+0x251/0x260 [ 291.533571][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 291.533602][ C0] start_kernel+0x47a/0x480 [ 291.533632][ C0] x86_64_start_reservations+0x24/0x30 [ 291.533661][ C0] x86_64_start_kernel+0x12b/0x130 [ 291.533690][ C0] common_startup_64+0x13e/0x148 [ 291.533728][ C0] [ 291.534107][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 291.534126][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 291.534155][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.534169][ T30] Call Trace: [ 291.534179][ T30] [ 291.534189][ T30] dump_stack_lvl+0x100/0x190 [ 291.534225][ T30] vpanic+0x552/0x970 [ 291.534255][ T30] ? __pfx_vpanic+0x10/0x10 [ 291.534284][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 291.534322][ T30] ? rcu_is_watching+0x12/0xc0 [ 291.534357][ T30] panic+0xd1/0xe0 [ 291.534385][ T30] ? __pfx_panic+0x10/0x10 [ 291.534417][ T30] ? wq_watchdog_touch+0xec/0x1a0 [ 291.534459][ T30] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 291.534487][ T30] ? watchdog.cold+0x198/0x1ca [ 291.534518][ T30] ? watchdog+0xd35/0x1050 [ 291.534548][ T30] watchdog.cold+0x1a9/0x1ca [ 291.534590][ T30] ? __pfx_watchdog+0x10/0x10 [ 291.534619][ T30] ? __kthread_parkme+0x18c/0x230 [ 291.534661][ T30] ? kthread+0x13a/0x450 [ 291.534686][ T30] ? __pfx_watchdog+0x10/0x10 [ 291.534712][ T30] kthread+0x370/0x450 [ 291.534738][ T30] ? __pfx_kthread+0x10/0x10 [ 291.534768][ T30] ret_from_fork+0x6c3/0xcb0 [ 291.534805][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 291.534843][ T30] ? __switch_to+0x7aa/0x1120 [ 291.534869][ T30] ? __pfx_kthread+0x10/0x10 [ 291.534898][ T30] ret_from_fork_asm+0x1a/0x30 [ 291.534952][ T30] [ 291.859271][ T30] Kernel Offset: disabled [ 291.863699][ T30] Rebooting in 86400 seconds..