Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts.
2026/02/08 11:59:32 parsed 1 programs
[ 160.377999][ T29] audit: type=1400 audit(1770551972.801:62): avc: denied { node_bind } for pid=2973 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 160.399019][ T29] audit: type=1400 audit(1770551972.811:63): avc: denied { module_request } for pid=2973 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 163.281450][ T29] audit: type=1400 audit(1770551975.711:64): avc: denied { mounton } for pid=2983 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 163.305335][ T29] audit: type=1400 audit(1770551975.731:65): avc: denied { mount } for pid=2983 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 163.315435][ T2983] cgroup: Unknown subsys name 'net'
[ 163.335565][ T29] audit: type=1400 audit(1770551975.761:66): avc: denied { unmount } for pid=2983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 163.436199][ T2983] cgroup: Unknown subsys name 'cpuset'
[ 163.444829][ T2983] cgroup: Unknown subsys name 'rlimit'
[ 163.610139][ T29] audit: type=1400 audit(1770551976.031:67): avc: denied { setattr } for pid=2983 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 163.633561][ T29] audit: type=1400 audit(1770551976.031:68): avc: denied { create } for pid=2983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 163.654344][ T29] audit: type=1400 audit(1770551976.031:69): avc: denied { write } for pid=2983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 163.674827][ T29] audit: type=1400 audit(1770551976.031:70): avc: denied { read } for pid=2983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 163.702015][ T29] audit: type=1400 audit(1770551976.131:71): avc: denied { sys_module } for pid=2983 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 163.883291][ T2987] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 163.935433][ T2983] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 165.578121][ T29] kauditd_printk_skb: 8 callbacks suppressed
[ 165.578143][ T29] audit: type=1400 audit(1770551978.001:80): avc: denied { execmem } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 165.606612][ T29] audit: type=1400 audit(1770551978.041:81): avc: denied { read } for pid=2990 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 165.627884][ T29] audit: type=1400 audit(1770551978.041:82): avc: denied { open } for pid=2990 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 165.651204][ T29] audit: type=1400 audit(1770551978.041:83): avc: denied { mounton } for pid=2990 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 165.687759][ T29] audit: type=1400 audit(1770551978.111:84): avc: denied { mounton } for pid=2990 comm="syz-executor" path="/root/syzkaller.liFsqX/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 165.712118][ T29] audit: type=1400 audit(1770551978.111:85): avc: denied { mount } for pid=2990 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 165.734320][ T29] audit: type=1400 audit(1770551978.121:86): avc: denied { mounton } for pid=2990 comm="syz-executor" path="/root/syzkaller.liFsqX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 165.759627][ T29] audit: type=1400 audit(1770551978.121:87): avc: denied { mount } for pid=2990 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 165.781473][ T29] audit: type=1400 audit(1770551978.131:88): avc: denied { mounton } for pid=2990 comm="syz-executor" path="/root/syzkaller.liFsqX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 165.808237][ T29] audit: type=1400 audit(1770551978.131:89): avc: denied { mounton } for pid=2990 comm="syz-executor" path="/root/syzkaller.liFsqX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 165.905993][ T2990] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 170.907164][ T29] kauditd_printk_skb: 11 callbacks suppressed
[ 170.907186][ T29] audit: type=1400 audit(1770551983.331:101): avc: denied { create } for pid=3035 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 181.434293][ T3035] syz-executor (3035) used greatest stack depth: 22632 bytes left
[ 182.520670][ T29] audit: type=1400 audit(1770551994.941:102): avc: denied { create } for pid=3511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
2026/02/08 11:59:55 executed programs: 0
2026/02/08 12:00:09 executed programs: 2
[ 196.784064][ T29] audit: type=1400 audit(1770552009.211:103): avc: denied { read write } for pid=3967 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 196.808154][ T29] audit: type=1400 audit(1770552009.211:104): avc: denied { open } for pid=3967 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 196.831460][ T29] audit: type=1400 audit(1770552009.211:105): avc: denied { ioctl } for pid=3967 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 197.020999][ T2957] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 197.176083][ T2957] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 197.185380][ T2957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 197.193506][ T2957] usb 4-1: Product: syz
[ 197.197707][ T2957] usb 4-1: Manufacturer: syz
[ 197.202381][ T2957] usb 4-1: SerialNumber: syz
[ 197.217357][ T2957] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 197.253466][ T29] audit: type=1400 audit(1770552009.681:106): avc: denied { firmware_load } for pid=23 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 197.290196][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 197.494415][ T9] usb 4-1: USB disconnect, device number 2
[ 198.370888][ T23] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 198.378121][ T23] ath9k_htc: Failed to initialize the device
[ 198.385240][ T9] usb 4-1: ath9k_htc: USB layer deinitialized
[ 198.680864][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 198.830845][ T9] usb 4-1: Using ep0 maxpacket: 8
[ 198.837584][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 198.848739][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 198.858839][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 198.868854][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 198.882238][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 198.891386][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 199.103761][ T9] usb 4-1: GET_CAPABILITIES returned 0
[ 199.109315][ T9] usbtmc 4-1:16.0: can't read capabilities
[ 199.307062][ T29] audit: type=1400 audit(1770552011.741:107): avc: denied { write } for pid=3967 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
2026/02/08 12:00:42 executed programs: 3
[ 229.910929][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 230.064701][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 230.073857][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 230.082042][ T9] usb 5-1: Product: syz
[ 230.086252][ T9] usb 5-1: Manufacturer: syz
[ 230.090940][ T9] usb 5-1: SerialNumber: syz
[ 230.101129][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 230.125211][ T1121] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 230.358327][ T9] usb 5-1: USB disconnect, device number 2
[ 231.170837][ T1121] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 231.178032][ T1121] ath9k_htc: Failed to initialize the device
[ 231.185785][ T9] usb 5-1: ath9k_htc: USB layer deinitialized
[ 231.481206][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 231.630811][ T9] usb 5-1: Using ep0 maxpacket: 8
[ 231.637741][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 231.648895][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 231.658993][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 231.669192][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 231.682272][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 231.691409][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 231.908760][ T9] usb 5-1: GET_CAPABILITIES returned 0
[ 231.914428][ T9] usbtmc 5-1:16.0: can't read capabilities
2026/02/08 12:01:15 executed programs: 4
[ 263.410824][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 263.565255][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 263.574443][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 263.582514][ T9] usb 6-1: Product: syz
[ 263.586721][ T9] usb 6-1: Manufacturer: syz
[ 263.591419][ T9] usb 6-1: SerialNumber: syz
[ 263.602537][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 263.619458][ T1121] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 263.821579][ T23] usb 6-1: USB disconnect, device number 2
[ 264.690823][ T1121] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 264.698001][ T1121] ath9k_htc: Failed to initialize the device
[ 264.704982][ T23] usb 6-1: ath9k_htc: USB layer deinitialized
[ 265.000808][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 265.150794][ T23] usb 6-1: Using ep0 maxpacket: 8
[ 265.157836][ T23] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 265.169178][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 265.179328][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 265.189515][ T23] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 265.202627][ T23] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 265.211912][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 265.424621][ T23] usb 6-1: GET_CAPABILITIES returned 0
[ 265.430212][ T23] usbtmc 6-1:16.0: can't read capabilities
2026/02/08 12:01:48 executed programs: 5
[ 296.600800][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 296.755055][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 296.764220][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 296.772442][ T9] usb 7-1: Product: syz
[ 296.776650][ T9] usb 7-1: Manufacturer: syz
[ 296.781326][ T9] usb 7-1: SerialNumber: syz
[ 296.791569][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 296.812943][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 297.046253][ T9] usb 7-1: USB disconnect, device number 2
[ 297.890758][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 297.897888][ T10] ath9k_htc: Failed to initialize the device
[ 297.904737][ T9] usb 7-1: ath9k_htc: USB layer deinitialized
[ 298.200815][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 298.350753][ T9] usb 7-1: Using ep0 maxpacket: 8
[ 298.358028][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 298.369189][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 298.379281][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 298.389258][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 298.402443][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 298.411592][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 298.624425][ T9] usb 7-1: GET_CAPABILITIES returned 0
[ 298.630041][ T9] usbtmc 7-1:16.0: can't read capabilities
2026/02/08 12:02:21 executed programs: 6
[ 329.380770][ T2957] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 329.534719][ T2957] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 329.543918][ T2957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 329.552033][ T2957] usb 8-1: Product: syz
[ 329.556250][ T2957] usb 8-1: Manufacturer: syz
[ 329.561114][ T2957] usb 8-1: SerialNumber: syz
[ 329.572044][ T2957] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 329.594469][ T5619] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 329.820427][ T2957] usb 8-1: USB disconnect, device number 2
[ 330.690752][ T5619] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 330.697857][ T5619] ath9k_htc: Failed to initialize the device
[ 330.704961][ T2957] usb 8-1: ath9k_htc: USB layer deinitialized
[ 331.000785][ T2957] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 331.150715][ T2957] usb 8-1: Using ep0 maxpacket: 8
[ 331.157611][ T2957] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 331.168817][ T2957] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 331.178930][ T2957] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 331.188934][ T2957] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 331.201979][ T2957] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 331.211369][ T2957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 331.423466][ T2957] usb 8-1: GET_CAPABILITIES returned 0
[ 331.429113][ T2957] usbtmc 8-1:16.0: can't read capabilities
[ 347.330939][ T30] INFO: task syz.3.17:3967 blocked for more than 143 seconds.
[ 347.338561][ T30] Not tainted syzkaller #0
[ 347.343603][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 347.352347][ T30] task:syz.3.17 state:D stack:27672 pid:3967 tgid:3967 ppid:3518 task_flags:0x400040 flags:0x00080002
[ 347.364606][ T30] Call Trace:
[ 347.367980][ T30]
[ 347.371081][ T30] __schedule+0xeb0/0x3e50
[ 347.375587][ T30] ? __pfx___schedule+0x10/0x10
[ 347.380685][ T30] ? find_held_lock+0x2b/0x80
[ 347.385454][ T30] ? schedule+0x2bf/0x390
[ 347.389847][ T30] schedule+0xdd/0x390
[ 347.394021][ T30] schedule_timeout+0x127/0x280
[ 347.399010][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 347.404492][ T30] ? __pfx_process_timeout+0x10/0x10
[ 347.409865][ T30] ? mark_held_locks+0x40/0x70
[ 347.414743][ T30] __wait_for_common+0x2e7/0x4c0
[ 347.419758][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 347.425238][ T30] ? __pfx___wait_for_common+0x10/0x10
[ 347.430809][ T30] usb_start_wait_urb+0x147/0x4c0
[ 347.435921][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 347.441567][ T30] ? __asan_memset+0x23/0x50
[ 347.446226][ T30] usb_bulk_msg+0x22b/0x580
[ 347.450839][ T30] usbtmc_read+0x5f4/0x10b0
[ 347.455438][ T30] ? futex_hash_put+0x43/0x50
[ 347.460188][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 347.465280][ T30] ? security_file_permission+0x21/0x80
[ 347.470918][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 347.475931][ T30] vfs_read+0x1e4/0xb30
[ 347.480165][ T30] ? __pfx_vfs_read+0x10/0x10
[ 347.484948][ T30] ? do_futex+0x192/0x350
[ 347.489335][ T30] ? __pfx_do_futex+0x10/0x10
[ 347.494092][ T30] ? __pfx_do_sys_openat2+0x10/0x10
[ 347.499360][ T30] ? __x64_sys_futex+0x34f/0x4d0
[ 347.504374][ T30] ? __x64_sys_futex+0x358/0x4d0
[ 347.509371][ T30] ksys_read+0x12a/0x250
[ 347.513787][ T30] ? __pfx_ksys_read+0x10/0x10
[ 347.518633][ T30] do_syscall_64+0xc9/0x570
[ 347.523248][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 347.529218][ T30] RIP: 0033:0x7f01541aaeb9
[ 347.533729][ T30] RSP: 002b:00007ffe99e356f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 347.542247][ T30] RAX: ffffffffffffffda RBX: 00007f0154425fa0 RCX: 00007f01541aaeb9
[ 347.550367][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 347.558414][ T30] RBP: 00007f0154218c1f R08: 0000000000000000 R09: 0000000000000000
[ 347.566460][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 347.574583][ T30] R13: 00007f0154425fac R14: 00007f0154425fa0 R15: 00007f0154425fa0
[ 347.582660][ T30]
[ 347.586399][ T30]
[ 347.586399][ T30] Showing all locks held in the system:
[ 347.594233][ T30] 6 locks held by kworker/0:0/9:
[ 347.599225][ T30] #0: ffff888100ed2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.610186][ T30] #1: ffffc9000009fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.621562][ T30] #2: ffff88810a7cf198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 347.630551][ T30] #3: ffff888105290198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.640002][ T30] #4: ffff888105293160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.649394][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 347.658933][ T30] 3 locks held by kworker/0:1/10:
[ 347.664037][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.674615][ T30] #1: ffffc900000afca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.686272][ T30] #2: ffff88810a7cf198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 347.696614][ T30] 6 locks held by kworker/1:0/23:
[ 347.701703][ T30] #0: ffff888100ed2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.712636][ T30] #1: ffffc9000018fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.724026][ T30] #2: ffff88810a787198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 347.733054][ T30] #3: ffff888104ab7198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.742430][ T30] #4: ffff888104ab3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.751898][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 347.761430][ T30] 1 lock held by khungtaskd/30:
[ 347.766362][ T30] #0: ffffffff894da3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 347.776332][ T30] 3 locks held by kworker/0:2/1121:
[ 347.781597][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.792227][ T30] #1: ffffc90001cafca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.803789][ T30] #2: ffff88810a787198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 347.814132][ T30] 2 locks held by kworker/u8:11/1677:
[ 347.819584][ T30] #0: ffff888100089148 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.831055][ T30] #1: ffffc900024cfca8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.842704][ T30] 2 locks held by getty/2925:
[ 347.847430][ T30] #0: ffff8881073af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 347.857336][ T30] #1: ffffc900000452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 347.867570][ T30] 6 locks held by kworker/1:2/2957:
[ 347.872841][ T30] #0: ffff888100ed2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.883853][ T30] #1: ffffc900017a7ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.895228][ T30] #2: ffff88810a7e7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 347.904289][ T30] #3: ffff8881052a2198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.913661][ T30] #4: ffff8881052a7160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.923021][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 347.932722][ T30] 1 lock held by syz.3.17/3967:
[ 347.937615][ T30] #0: ffff88811a1f84d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x154/0x10b0
[ 347.947154][ T30] 2 locks held by syz.4.18/4422:
[ 347.952174][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 347.960927][ T30] #1: ffff88811a1f84d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950
[ 347.970364][ T30] 1 lock held by syz.5.19/4878:
[ 347.975393][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 347.984137][ T30] 1 lock held by syz.6.20/5333:
[ 347.989025][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 347.997959][ T30] 3 locks held by kworker/1:3/5619:
[ 348.003490][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 348.014120][ T30] #1: ffffc90006e07ca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 348.025760][ T30] #2: ffff88810a7e7198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 348.036098][ T30] 1 lock held by syz.7.21/5790:
[ 348.041020][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 348.049736][ T30] 1 lock held by modprobe/5883:
[ 348.054710][ T30]
[ 348.057079][ T30] =============================================
[ 348.057079][ T30]
[ 348.065858][ T30] NMI backtrace for cpu 0
[ 348.065893][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 348.065930][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 348.065948][ T30] Call Trace:
[ 348.065959][ T30]
[ 348.065970][ T30] dump_stack_lvl+0x100/0x190
[ 348.066032][ T30] nmi_cpu_backtrace.cold+0x12d/0x151
[ 348.066070][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 348.066111][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 348.066157][ T30] sys_info+0x141/0x190
[ 348.066189][ T30] watchdog+0xcc3/0xfe0
[ 348.066238][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.066281][ T30] ? __kthread_parkme+0x18c/0x230
[ 348.066315][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.066359][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.066398][ T30] kthread+0x3b3/0x730
[ 348.066447][ T30] ? __pfx_kthread+0x10/0x10
[ 348.066484][ T30] ? ret_from_fork+0x79/0xa20
[ 348.066514][ T30] ? ret_from_fork+0x79/0xa20
[ 348.066546][ T30] ? rcu_is_watching+0x12/0xc0
[ 348.066590][ T30] ? __pfx_kthread+0x10/0x10
[ 348.066630][ T30] ret_from_fork+0x6c3/0xa20
[ 348.066663][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 348.066699][ T30] ? __switch_to+0x7af/0x10b0
[ 348.066740][ T30] ? __pfx_kthread+0x10/0x10
[ 348.066782][ T30] ret_from_fork_asm+0x1a/0x30
[ 348.066841][ T30]
[ 348.066852][ T30] Sending NMI from CPU 0 to CPUs 1:
[ 348.206928][ C1] NMI backtrace for cpu 1
[ 348.206949][ C1] CPU: 1 UID: 0 PID: 5884 Comm: modprobe Not tainted syzkaller #0 PREEMPT(voluntary)
[ 348.206979][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 348.206994][ C1] RIP: 0010:rcu_is_watching+0x73/0xc0
[ 348.207041][ C1] Code: f6 88 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 e8 02 83 e0 01 65 ff 0d 00 af 34 0b 74 07 5b 5d c3 cc cc cc cc
[ 348.207065][ C1] RSP: 0018:ffffc900072a7868 EFLAGS: 00000246
[ 348.207086][ C1] RAX: 0000000000b67f2c RBX: ffff8881f5733628 RCX: ffffffff8ba0a501
[ 348.207102][ C1] RDX: 0000000000000000 RSI: ffffffff878e9720 RDI: ffffffff88f6cbe8
[ 348.207118][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007
[ 348.207132][ C1] R10: 0000000000000200 R11: 000000000006533f R12: ffffc900072a7988
[ 348.207148][ C1] R13: ffffc900072a7938 R14: ffffc900072a7f58 R15: ffffc900072a796c
[ 348.207166][ C1] FS: 0000000000000000(0000) GS:ffff888268a6a000(0000) knlGS:0000000000000000
[ 348.207189][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 348.207206][ C1] CR2: 00007fd0ccd4afe8 CR3: 000000011efa6000 CR4: 00000000003506f0
[ 348.207222][ C1] Call Trace:
[ 348.207230][ C1]
[ 348.207239][ C1] ? unwind_next_frame+0x3be/0x1ea0
[ 348.207278][ C1] lock_release+0x21e/0x2e0
[ 348.207307][ C1] unwind_next_frame+0x3c3/0x1ea0
[ 348.207345][ C1] ? do_syscall_64+0xc9/0x570
[ 348.207371][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 348.207424][ C1] arch_stack_walk+0x94/0xf0
[ 348.207456][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 348.207485][ C1] stack_trace_save+0x8e/0xc0
[ 348.207522][ C1] ? __pfx_stack_trace_save+0x10/0x10
[ 348.207569][ C1] kasan_save_stack+0x30/0x50
[ 348.207599][ C1] ? kasan_save_stack+0x30/0x50
[ 348.207628][ C1] ? kasan_save_track+0x14/0x30
[ 348.207656][ C1] ? __kasan_slab_alloc+0x6e/0x70
[ 348.207688][ C1] ? kmem_cache_alloc_noprof+0x266/0x760
[ 348.207713][ C1] ? getname_flags.part.0+0x4c/0x540
[ 348.207743][ C1] ? getname_flags+0x93/0xf0
[ 348.207776][ C1] ? do_sys_openat2+0xc5/0x220
[ 348.207803][ C1] ? __x64_sys_openat+0x12d/0x210
[ 348.207830][ C1] ? do_syscall_64+0xc9/0x570
[ 348.207877][ C1] kasan_save_track+0x14/0x30
[ 348.207906][ C1] __kasan_slab_alloc+0x6e/0x70
[ 348.207940][ C1] kmem_cache_alloc_noprof+0x266/0x760
[ 348.207966][ C1] ? getname_flags.part.0+0x4c/0x540
[ 348.207999][ C1] ? getname_flags.part.0+0x4c/0x540
[ 348.208029][ C1] getname_flags.part.0+0x4c/0x540
[ 348.208061][ C1] getname_flags+0x93/0xf0
[ 348.208096][ C1] do_sys_openat2+0xc5/0x220
[ 348.208123][ C1] ? __pfx_do_sys_openat2+0x10/0x10
[ 348.208154][ C1] ? rcu_is_watching+0x12/0xc0
[ 348.208188][ C1] ? irqentry_exit+0x15f/0x620
[ 348.208224][ C1] ? lockdep_hardirqs_on+0x78/0x100
[ 348.208260][ C1] ? irqentry_exit+0x15f/0x620
[ 348.208298][ C1] __x64_sys_openat+0x12d/0x210
[ 348.208327][ C1] ? __pfx___x64_sys_openat+0x10/0x10
[ 348.208359][ C1] ? __x64_sys_close+0x94/0x120
[ 348.208392][ C1] do_syscall_64+0xc9/0x570
[ 348.208423][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 348.208448][ C1] RIP: 0033:0x7fd0cd01c0ba
[ 348.208467][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24
[ 348.208490][ C1] RSP: 002b:00007ffe61bbefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[ 348.208513][ C1] RAX: ffffffffffffffda RBX: 00007ffe61bbf060 RCX: 00007fd0cd01c0ba
[ 348.208529][ C1] RDX: 0000000000080000 RSI: 00007ffe61bbf060 RDI: 00000000ffffff9c
[ 348.208545][ C1] RBP: 00007ffe61bbf050 R08: 00007ffe61bbf257 R09: 0000000000000000
[ 348.208561][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000018
[ 348.208576][ C1] R13: 00007fd0ccff0000 R14: 00007ffe61bbf270 R15: 0000000000000000
[ 348.208601][ C1]
[ 348.597328][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 348.604222][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 348.613822][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 348.624360][ T30] Call Trace:
[ 348.627689][ T30]
[ 348.630664][ T30] dump_stack_lvl+0x100/0x190
[ 348.635419][ T30] vpanic+0x20d/0x630
[ 348.639480][ T30] panic+0xd1/0xd1
[ 348.643262][ T30] ? __pfx_panic+0x10/0x10
[ 348.647736][ T30] ? wq_watchdog_touch+0xec/0x1a0
[ 348.652829][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 348.659046][ T30] ? watchdog.cold+0x198/0x1ca
[ 348.663875][ T30] ? watchdog+0xcd3/0xfe0
[ 348.668270][ T30] watchdog.cold+0x1a9/0x1ca
[ 348.672931][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.677669][ T30] ? __kthread_parkme+0x18c/0x230
[ 348.682752][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.687498][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.692362][ T30] kthread+0x3b3/0x730
[ 348.696501][ T30] ? __pfx_kthread+0x10/0x10
[ 348.701156][ T30] ? ret_from_fork+0x79/0xa20
[ 348.705887][ T30] ? ret_from_fork+0x79/0xa20
[ 348.710619][ T30] ? rcu_is_watching+0x12/0xc0
[ 348.715449][ T30] ? __pfx_kthread+0x10/0x10
[ 348.720111][ T30] ret_from_fork+0x6c3/0xa20
[ 348.724751][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 348.729921][ T30] ? __switch_to+0x7af/0x10b0
[ 348.734664][ T30] ? __pfx_kthread+0x10/0x10
[ 348.739327][ T30] ret_from_fork_asm+0x1a/0x30
[ 348.744197][ T30]
[ 348.747829][ T30] Kernel Offset: disabled
[ 348.752197][ T30] Rebooting in 86400 seconds..