Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts.
2026/02/08 14:58:19 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 92.149361][ T29] audit: type=1400 audit(1770562701.148:103): avc: denied { unlink } for pid=3992 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 92.233884][ T3992] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 105.116538][ T29] audit: type=1401 audit(1770562714.118:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2026/02/08 14:58:34 executed programs: 0
2026/02/08 14:58:44 executed programs: 2
[ 115.483847][ T29] audit: type=1400 audit(1770562724.488:105): avc: denied { read write } for pid=4971 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 115.507194][ T29] audit: type=1400 audit(1770562724.488:106): avc: denied { open } for pid=4971 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 115.531527][ T29] audit: type=1400 audit(1770562724.538:107): avc: denied { ioctl } for pid=4971 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 115.771262][ T2808] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 115.925031][ T2808] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 115.934272][ T2808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 115.942306][ T2808] usb 4-1: Product: syz
[ 115.946466][ T2808] usb 4-1: Manufacturer: syz
[ 115.951091][ T2808] usb 4-1: SerialNumber: syz
[ 115.964377][ T2808] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 115.999024][ T29] audit: type=1400 audit(1770562724.998:108): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 116.039115][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 116.273246][ T2808] usb 4-1: USB disconnect, device number 2
[ 117.071060][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 117.078731][ T9] ath9k_htc: Failed to initialize the device
[ 117.085682][ T2808] usb 4-1: ath9k_htc: USB layer deinitialized
[ 117.380991][ T2808] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 117.531011][ T2808] usb 4-1: Using ep0 maxpacket: 8
[ 117.537551][ T2808] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 117.548647][ T2808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 117.558675][ T2808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 117.568628][ T2808] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 117.581630][ T2808] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 117.590641][ T2808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 117.801811][ T2808] usb 4-1: GET_CAPABILITIES returned 0
[ 117.807313][ T2808] usbtmc 4-1:16.0: can't read capabilities
[ 118.002719][ T29] audit: type=1400 audit(1770562727.008:109): avc: denied { write } for pid=4971 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 118.003747][ T4972] usbtmc 4-1:16.0: usbtmc_read(count:0)
2026/02/08 14:59:12 executed programs: 3
[ 143.611057][ T1121] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 143.764134][ T1121] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 143.773298][ T1121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 143.781339][ T1121] usb 5-1: Product: syz
[ 143.785527][ T1121] usb 5-1: Manufacturer: syz
[ 143.790119][ T1121] usb 5-1: SerialNumber: syz
[ 143.801347][ T1121] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 143.821199][ T37] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 144.044065][ T1121] usb 5-1: USB disconnect, device number 2
[ 144.911008][ T37] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 144.918055][ T37] ath9k_htc: Failed to initialize the device
[ 144.924697][ T1121] usb 5-1: ath9k_htc: USB layer deinitialized
[ 145.221009][ T1121] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 145.370933][ T1121] usb 5-1: Using ep0 maxpacket: 8
[ 145.378153][ T1121] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 145.389294][ T1121] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 145.399345][ T1121] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 145.409290][ T1121] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 145.422402][ T1121] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 145.431508][ T1121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 145.643291][ T1121] usb 5-1: GET_CAPABILITIES returned 0
[ 145.648837][ T1121] usbtmc 5-1:16.0: can't read capabilities
2026/02/08 14:59:39 executed programs: 4
[ 171.050973][ T2808] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 171.204480][ T2808] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 171.213632][ T2808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 171.221688][ T2808] usb 6-1: Product: syz
[ 171.225864][ T2808] usb 6-1: Manufacturer: syz
[ 171.230446][ T2808] usb 6-1: SerialNumber: syz
[ 171.240099][ T2808] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 171.255556][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 171.457276][ T1121] usb 6-1: USB disconnect, device number 2
[ 172.271026][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 172.278095][ T9] ath9k_htc: Failed to initialize the device
[ 172.284970][ T1121] usb 6-1: ath9k_htc: USB layer deinitialized
[ 172.580981][ T1121] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 172.730968][ T1121] usb 6-1: Using ep0 maxpacket: 8
[ 172.737498][ T1121] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 172.748647][ T1121] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 172.758814][ T1121] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 172.768779][ T1121] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 172.781981][ T1121] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 172.791097][ T1121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 173.003123][ T1121] usb 6-1: GET_CAPABILITIES returned 0
[ 173.008848][ T1121] usbtmc 6-1:16.0: can't read capabilities
2026/02/08 15:00:07 executed programs: 5
[ 198.581017][ T2808] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 198.734731][ T2808] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 198.743881][ T2808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 198.751955][ T2808] usb 7-1: Product: syz
[ 198.756265][ T2808] usb 7-1: Manufacturer: syz
[ 198.760923][ T2808] usb 7-1: SerialNumber: syz
[ 198.772298][ T2808] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 198.807137][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 199.033533][ T2808] usb 7-1: USB disconnect, device number 2
[ 199.871032][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 199.878144][ T10] ath9k_htc: Failed to initialize the device
[ 199.884954][ T2808] usb 7-1: ath9k_htc: USB layer deinitialized
[ 200.181000][ T2808] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 200.330990][ T2808] usb 7-1: Using ep0 maxpacket: 8
[ 200.337602][ T2808] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 200.348773][ T2808] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 200.358831][ T2808] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 200.368826][ T2808] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 200.381921][ T2808] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 200.391057][ T2808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 200.603185][ T2808] usb 7-1: GET_CAPABILITIES returned 0
[ 200.608752][ T2808] usbtmc 7-1:16.0: can't read capabilities
2026/02/08 15:00:35 executed programs: 6
[ 226.310940][ T6347] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 226.464467][ T6347] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 226.473632][ T6347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 226.481686][ T6347] usb 8-1: Product: syz
[ 226.485862][ T6347] usb 8-1: Manufacturer: syz
[ 226.490450][ T6347] usb 8-1: SerialNumber: syz
[ 226.501072][ T6347] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 226.521381][ T4975] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 226.763793][ T6347] usb 8-1: USB disconnect, device number 2
[ 227.550962][ T4975] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 227.558033][ T4975] ath9k_htc: Failed to initialize the device
[ 227.564714][ T6347] usb 8-1: ath9k_htc: USB layer deinitialized
[ 227.860970][ T6347] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 228.010947][ T6347] usb 8-1: Using ep0 maxpacket: 8
[ 228.017583][ T6347] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 228.028737][ T6347] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 228.038877][ T6347] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 228.048954][ T6347] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 228.062080][ T6347] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 228.071228][ T6347] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 228.283994][ T6347] usb 8-1: GET_CAPABILITIES returned 0
[ 228.289567][ T6347] usbtmc 8-1:16.0: can't read capabilities
2026/02/08 15:01:02 executed programs: 7
[ 254.140941][ T37] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 254.294315][ T37] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 254.303501][ T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 254.311539][ T37] usb 9-1: Product: syz
[ 254.315721][ T37] usb 9-1: Manufacturer: syz
[ 254.320307][ T37] usb 9-1: SerialNumber: syz
[ 254.330869][ T37] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 254.351441][ T5432] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 254.569618][ T37] usb 9-1: USB disconnect, device number 2
[ 255.390935][ T5432] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 255.398055][ T5432] ath9k_htc: Failed to initialize the device
[ 255.404707][ T37] usb 9-1: ath9k_htc: USB layer deinitialized
[ 255.701279][ T37] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 255.860921][ T37] usb 9-1: Using ep0 maxpacket: 8
[ 255.867343][ T37] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 255.878487][ T37] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 255.888552][ T37] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 255.898517][ T37] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 255.911737][ T37] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 255.920784][ T37] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 256.166893][ T37] usb 9-1: GET_CAPABILITIES returned 0
[ 256.172618][ T37] usbtmc 9-1:16.0: can't read capabilities
[ 267.871037][ T30] INFO: task syz.3.17:4972 blocked for more than 143 seconds.
[ 267.878570][ T30] Not tainted syzkaller #0
[ 267.883604][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 267.892335][ T30] task:syz.3.17 state:D stack:28120 pid:4972 tgid:4971 ppid:4522 task_flags:0x400040 flags:0x00080002
[ 267.904428][ T30] Call Trace:
[ 267.907723][ T30]
[ 267.910678][ T30] __schedule+0xeb0/0x3e50
[ 267.915179][ T30] ? __pfx___schedule+0x10/0x10
[ 267.920056][ T30] ? find_held_lock+0x2b/0x80
[ 267.924818][ T30] ? schedule+0x2bf/0x390
[ 267.929173][ T30] schedule+0xdd/0x390
[ 267.933402][ T30] schedule_timeout+0x127/0x280
[ 267.938271][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 267.943707][ T30] ? __pfx_process_timeout+0x10/0x10
[ 267.949109][ T30] ? mark_held_locks+0x40/0x70
[ 267.953947][ T30] __wait_for_common+0x2e7/0x4c0
[ 267.958902][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 267.964346][ T30] ? __pfx___wait_for_common+0x10/0x10
[ 267.969853][ T30] usb_start_wait_urb+0x147/0x4c0
[ 267.974970][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 267.980567][ T30] ? __asan_memset+0x23/0x50
[ 267.985364][ T30] usb_bulk_msg+0x22b/0x580
[ 267.990111][ T30] usbtmc_read.cold+0x48d/0xfe7
[ 267.995103][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 268.000100][ T30] ? security_file_permission+0x21/0x80
[ 268.005763][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 268.010748][ T30] vfs_read+0x1e4/0xb30
[ 268.014996][ T30] ? __pfx_vfs_read+0x10/0x10
[ 268.019694][ T30] ? find_held_lock+0x2b/0x80
[ 268.024438][ T30] ? __fget_files+0x215/0x3d0
[ 268.029143][ T30] ? __fget_files+0x215/0x3d0
[ 268.033924][ T30] ? __fget_files+0x21f/0x3d0
[ 268.038782][ T30] ksys_read+0x12a/0x250
[ 268.043113][ T30] ? __pfx_ksys_read+0x10/0x10
[ 268.047935][ T30] do_syscall_64+0xc9/0x570
[ 268.052545][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 268.058483][ T30] RIP: 0033:0x7f8ae743aeb9
[ 268.063084][ T30] RSP: 002b:00007f8ae729f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 268.071562][ T30] RAX: ffffffffffffffda RBX: 00007f8ae76b5fa0 RCX: 00007f8ae743aeb9
[ 268.079552][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 268.087581][ T30] RBP: 00007f8ae74a8c1f R08: 0000000000000000 R09: 0000000000000000
[ 268.095634][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 268.103670][ T30] R13: 00007f8ae76b6038 R14: 00007f8ae76b5fa0 R15: 00007ffff317e338
[ 268.111721][ T30]
[ 268.114844][ T30]
[ 268.114844][ T30] Showing all locks held in the system:
[ 268.122836][ T30] 3 locks held by kworker/0:0/9:
[ 268.127759][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.138270][ T30] #1: ffffc9000009fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.149844][ T30] #2: ffff88810a745198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 268.160175][ T30] 3 locks held by kworker/0:1/10:
[ 268.165297][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.175828][ T30] #1: ffffc900000afca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.187323][ T30] #2: ffff88810a75d198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 268.197611][ T30] 1 lock held by khungtaskd/30:
[ 268.202516][ T30] #0: ffffffff894da3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 268.212403][ T30] 6 locks held by kworker/1:1/37:
[ 268.217438][ T30] #0: ffff888100ed2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.228276][ T30] #1: ffffc90000277ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.239592][ T30] #2: ffff88810a7fd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 268.248538][ T30] #3: ffff88811ffd8198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.257854][ T30] #4: ffff888117964160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.267323][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 268.276874][ T30] 6 locks held by kworker/1:2/1121:
[ 268.282262][ T30] #0: ffff888100ed2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.293226][ T30] #1: ffffc90001c3fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.304663][ T30] #2: ffff88810a745198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 268.313791][ T30] #3: ffff88811e01c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.323180][ T30] #4: ffff88810cac4160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.332514][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 268.342128][ T30] 6 locks held by kworker/0:2/2808:
[ 268.347450][ T30] #0: ffff888100ed2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.358419][ T30] #1: ffffc9000415fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.369760][ T30] #2: ffff88810a75d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 268.378739][ T30] #3: ffff888113946198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.388048][ T30] #4: ffff888113be7160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.397437][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 268.406918][ T30] 2 locks held by getty/2922:
[ 268.411646][ T30] #0: ffff888115caa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 268.421486][ T30] #1: ffffc900000452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 268.431682][ T30] 1 lock held by syz.3.17/4972:
[ 268.436659][ T30] #0: ffff88810bf5e4d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x14a/0x270
[ 268.446100][ T30] 3 locks held by kworker/0:3/4975:
[ 268.451369][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.461968][ T30] #1: ffffc90001dffca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.473618][ T30] #2: ffff88810a7ed198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 268.483893][ T30] 2 locks held by syz.4.18/5429:
[ 268.488948][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.497618][ T30] #1: ffff88810bf5e4d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950
[ 268.507048][ T30] 3 locks held by kworker/1:3/5432:
[ 268.512402][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.522993][ T30] #1: ffffc9000424fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.534532][ T30] #2: ffff88810a7fd198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 268.544808][ T30] 1 lock held by syz.5.19/5886:
[ 268.549665][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.558334][ T30] 1 lock held by syz.6.20/6344:
[ 268.563346][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.572101][ T30] 6 locks held by kworker/0:4/6347:
[ 268.577339][ T30] #0: ffff888100ed2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.588231][ T30] #1: ffffc90006c5fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.599566][ T30] #2: ffff88810a7ed198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 268.608538][ T30] #3: ffff888117210198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.617850][ T30] #4: ffff888117211160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.627156][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 268.636650][ T30] 1 lock held by syz.7.21/6802:
[ 268.641542][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.650208][ T30] 1 lock held by syz.8.22/7261:
[ 268.655093][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.663814][ T30]
[ 268.666157][ T30] =============================================
[ 268.666157][ T30]
[ 268.674598][ T30] NMI backtrace for cpu 1
[ 268.674635][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 268.674664][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 268.674677][ T30] Call Trace:
[ 268.674686][ T30]
[ 268.674693][ T30] dump_stack_lvl+0x100/0x190
[ 268.674741][ T30] nmi_cpu_backtrace.cold+0x12d/0x151
[ 268.674767][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 268.674795][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 268.674830][ T30] sys_info+0x141/0x190
[ 268.674854][ T30] watchdog+0xcc3/0xfe0
[ 268.674897][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.674930][ T30] ? __kthread_parkme+0x18c/0x230
[ 268.674957][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.674985][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.675013][ T30] kthread+0x3b3/0x730
[ 268.675047][ T30] ? __pfx_kthread+0x10/0x10
[ 268.675075][ T30] ? ret_from_fork+0x79/0xa20
[ 268.675100][ T30] ? ret_from_fork+0x79/0xa20
[ 268.675124][ T30] ? rcu_is_watching+0x12/0xc0
[ 268.675166][ T30] ? __pfx_kthread+0x10/0x10
[ 268.675198][ T30] ret_from_fork+0x6c3/0xa20
[ 268.675230][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 268.675259][ T30] ? __switch_to+0x7af/0x10b0
[ 268.675292][ T30] ? __pfx_kthread+0x10/0x10
[ 268.675326][ T30] ret_from_fork_asm+0x1a/0x30
[ 268.675374][ T30]
[ 268.675404][ T30] Sending NMI from CPU 1 to CPUs 0:
[ 268.814893][ C0] NMI backtrace for cpu 0
[ 268.814919][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(voluntary)
[ 268.814946][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 268.814961][ C0] RIP: 0010:update_sd_lb_stats.constprop.0+0xa/0x3630
[ 268.815003][ C0] Code: 04 24 e8 69 fa a0 ff 4c 8b 04 24 e9 76 f9 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 00 00 00 00 fc ff df <41> 57 41 56 49 89 fe 41 55 41 54 55 53 48 81 ec a0 01 00 00 48 8d
[ 268.815025][ C0] RSP: 0018:ffffc90000007968 EFLAGS: 00000246
[ 268.815044][ C0] RAX: 0000000000000000 RBX: ffffc90000007c30 RCX: 0000000000000000
[ 268.815058][ C0] RDX: dffffc0000000000 RSI: ffffc900000079b8 RDI: ffffc90000007c30
[ 268.815073][ C0] RBP: 1ffff92000000f31 R08: 0000000000000000 R09: ffffed103eac485c
[ 268.815087][ C0] R10: ffff8881f56242e7 R11: ffff888100ecd400 R12: ffff8881f56242d0
[ 268.815102][ C0] R13: ffffc90000007da8 R14: dffffc0000000000 R15: 0000000000000000
[ 268.815119][ C0] FS: 0000000000000000(0000) GS:ffff88826896a000(0000) knlGS:0000000000000000
[ 268.815141][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 268.815156][ C0] CR2: 0000561ec5730d28 CR3: 00000001174aa000 CR4: 00000000003506f0
[ 268.815171][ C0] Call Trace:
[ 268.815182][ C0]
[ 268.815190][ C0] sched_balance_find_src_group+0x99/0xc70
[ 268.815223][ C0] ? __pfx_sched_balance_find_src_group+0x10/0x10
[ 268.815251][ C0] ? __lock_acquire+0x4a5/0x2630
[ 268.815286][ C0] ? find_held_lock+0x2b/0x80
[ 268.815317][ C0] ? sched_balance_rq+0x1a28/0x33a0
[ 268.815350][ C0] ? sched_balance_rq+0x1a28/0x33a0
[ 268.815379][ C0] sched_balance_rq+0x7f0/0x33a0
[ 268.815417][ C0] ? __pfx_sched_balance_rq+0x10/0x10
[ 268.815443][ C0] ? kvm_sched_clock_read+0x11/0x20
[ 268.815474][ C0] ? sched_clock+0x38/0x60
[ 268.815513][ C0] ? __lock_acquire+0x4a5/0x2630
[ 268.815542][ C0] sched_balance_domains+0x46d/0xd40
[ 268.815573][ C0] ? __pfx_sched_balance_domains+0x10/0x10
[ 268.815600][ C0] ? find_held_lock+0x2b/0x80
[ 268.815630][ C0] ? _nohz_idle_balance.isra.0+0x62b/0x860
[ 268.815657][ C0] ? _nohz_idle_balance.isra.0+0x62b/0x860
[ 268.815691][ C0] _nohz_idle_balance.isra.0+0x654/0x860
[ 268.815723][ C0] ? __pfx__nohz_idle_balance.isra.0+0x10/0x10
[ 268.815761][ C0] handle_softirqs+0x1dd/0x8f0
[ 268.815787][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 268.815811][ C0] ? __flush_smp_call_function_queue+0x4e7/0x960
[ 268.815850][ C0] __irq_exit_rcu+0xed/0x150
[ 268.815872][ C0] irq_exit_rcu+0x9/0x30
[ 268.815894][ C0] sysvec_call_function_single+0x8f/0xb0
[ 268.815926][ C0]
[ 268.815933][ C0]
[ 268.815941][ C0] asm_sysvec_call_function_single+0x1a/0x20
[ 268.815969][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 268.816000][ C0] Code: 3a a3 01 e9 53 e3 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 12 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 268.816020][ C0] RSP: 0018:ffffffff89207e10 EFLAGS: 00000242
[ 268.816037][ C0] RAX: 0000000000161aa1 RBX: ffffffff8922eac0 RCX: ffffffff8753acd5
[ 268.816052][ C0] RDX: 0000000000000000 RSI: ffffffff88dec902 RDI: ffffffff878e97a0
[ 268.816067][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed103eac66c5
[ 268.816080][ C0] R10: ffff8881f563362b R11: 0000000000000000 R12: fffffbfff1245d58
[ 268.816097][ C0] R13: 0000000000000000 R14: ffffffff8accd4d0 R15: 0000000000000000
[ 268.816116][ C0] ? ct_kernel_exit+0x125/0x180
[ 268.816151][ C0] default_idle+0x9/0x10
[ 268.816171][ C0] default_idle_call+0x6c/0xb0
[ 268.816191][ C0] do_idle+0x35b/0x4b0
[ 268.816216][ C0] ? __pfx_do_idle+0x10/0x10
[ 268.816244][ C0] cpu_startup_entry+0x4f/0x60
[ 268.816268][ C0] rest_init+0x251/0x260
[ 268.816289][ C0] ? __pfx_x86_late_time_init+0x10/0x10
[ 268.816319][ C0] start_kernel+0x475/0x480
[ 268.816353][ C0] x86_64_start_reservations+0x24/0x30
[ 268.816382][ C0] x86_64_start_kernel+0x122/0x130
[ 268.816409][ C0] common_startup_64+0x13e/0x148
[ 268.816444][ C0]
[ 268.816886][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 268.816908][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 268.816940][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 268.816954][ T30] Call Trace:
[ 268.816964][ T30]
[ 268.816975][ T30] dump_stack_lvl+0x100/0x190
[ 268.817028][ T30] vpanic+0x20d/0x630
[ 268.817059][ T30] panic+0xd1/0xd1
[ 268.817098][ T30] ? __pfx_panic+0x10/0x10
[ 268.817129][ T30] ? wq_watchdog_touch+0xec/0x1a0
[ 268.817162][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 268.817194][ T30] ? watchdog.cold+0x198/0x1ca
[ 268.817225][ T30] ? watchdog+0xcd3/0xfe0
[ 268.817261][ T30] watchdog.cold+0x1a9/0x1ca
[ 268.817301][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.817334][ T30] ? __kthread_parkme+0x18c/0x230
[ 268.817362][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.817396][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.817425][ T30] kthread+0x3b3/0x730
[ 268.817459][ T30] ? __pfx_kthread+0x10/0x10
[ 268.817489][ T30] ? ret_from_fork+0x79/0xa20
[ 268.817514][ T30] ? ret_from_fork+0x79/0xa20
[ 268.817540][ T30] ? rcu_is_watching+0x12/0xc0
[ 268.817574][ T30] ? __pfx_kthread+0x10/0x10
[ 268.817607][ T30] ret_from_fork+0x6c3/0xa20
[ 268.817634][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 268.817663][ T30] ? __switch_to+0x7af/0x10b0
[ 268.817695][ T30] ? __pfx_kthread+0x10/0x10
[ 268.817728][ T30] ret_from_fork_asm+0x1a/0x30
[ 268.817775][ T30]
[ 269.357604][ T30] Kernel Offset: disabled
[ 269.362008][ T30] Rebooting in 86400 seconds..