Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts.
2026/02/08 21:49:02 parsed 1 programs
[ 89.823804][ T29] audit: type=1400 audit(1770587343.885:103): avc: denied { unlink } for pid=3989 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 89.972100][ T3989] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 93.202139][ T29] audit: type=1401 audit(1770587347.255:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2026/02/08 21:49:17 executed programs: 0
2026/02/08 21:49:27 executed programs: 2
[ 113.595147][ T29] audit: type=1400 audit(1770587367.655:105): avc: denied { read write } for pid=4973 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 113.626442][ T29] audit: type=1400 audit(1770587367.655:106): avc: denied { open } for pid=4973 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 113.650173][ T29] audit: type=1400 audit(1770587367.655:107): avc: denied { ioctl } for pid=4973 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 113.832607][ T3000] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 113.987088][ T3000] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 113.996534][ T3000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 114.004652][ T3000] usb 4-1: Product: syz
[ 114.008886][ T3000] usb 4-1: Manufacturer: syz
[ 114.013556][ T3000] usb 4-1: SerialNumber: syz
[ 114.025932][ T3000] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 114.064856][ T29] audit: type=1400 audit(1770587368.125:108): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 114.101919][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 114.323008][ T3000] usb 4-1: USB disconnect, device number 2
[ 115.162448][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 115.170121][ T10] ath9k_htc: Failed to initialize the device
[ 115.177318][ T3000] usb 4-1: ath9k_htc: USB layer deinitialized
[ 115.472372][ T3000] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 115.622327][ T3000] usb 4-1: Using ep0 maxpacket: 8
[ 115.629233][ T3000] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 115.640404][ T3000] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 115.650566][ T3000] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 115.660595][ T3000] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 115.673627][ T3000] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 115.682730][ T3000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 115.894275][ T3000] usb 4-1: GET_CAPABILITIES returned 0
[ 115.899804][ T3000] usbtmc 4-1:16.0: can't read capabilities
[ 116.095162][ T29] audit: type=1400 audit(1770587370.155:109): avc: denied { write } for pid=4973 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 116.102681][ T4974] usbtmc 4-1:16.0: usbtmc_read(count:0)
[ 116.124230][ T4974] usbtmc 4-1:16.0: Timeout set to -1
2026/02/08 21:49:55 executed programs: 3
[ 141.282474][ T3000] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 141.436038][ T3000] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 141.445200][ T3000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 141.453281][ T3000] usb 5-1: Product: syz
[ 141.457461][ T3000] usb 5-1: Manufacturer: syz
[ 141.462156][ T3000] usb 5-1: SerialNumber: syz
[ 141.472611][ T3000] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 141.492558][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 141.727280][ T3000] usb 5-1: USB disconnect, device number 2
[ 142.522351][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 142.529414][ T10] ath9k_htc: Failed to initialize the device
[ 142.536079][ T3000] usb 5-1: ath9k_htc: USB layer deinitialized
[ 142.832341][ T3000] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 142.982313][ T3000] usb 5-1: Using ep0 maxpacket: 8
[ 142.988832][ T3000] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 142.999961][ T3000] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 143.010573][ T3000] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 143.020565][ T3000] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 143.033790][ T3000] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 143.043635][ T3000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 143.256537][ T3000] usb 5-1: GET_CAPABILITIES returned 0
[ 143.262074][ T3000] usbtmc 5-1:16.0: can't read capabilities
2026/02/08 21:50:23 executed programs: 4
[ 169.252338][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 169.405508][ T23] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 169.414717][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 169.422856][ T23] usb 6-1: Product: syz
[ 169.427057][ T23] usb 6-1: Manufacturer: syz
[ 169.431667][ T23] usb 6-1: SerialNumber: syz
[ 169.442819][ T23] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 169.468212][ T1122] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 169.693649][ T65] usb 6-1: USB disconnect, device number 2
[ 170.522335][ T1122] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 170.529411][ T1122] ath9k_htc: Failed to initialize the device
[ 170.536169][ T65] usb 6-1: ath9k_htc: USB layer deinitialized
[ 170.832368][ T65] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 170.982348][ T65] usb 6-1: Using ep0 maxpacket: 8
[ 170.988920][ T65] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 171.000047][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 171.010159][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 171.020176][ T65] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 171.033241][ T65] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 171.042721][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 171.254805][ T65] usb 6-1: GET_CAPABILITIES returned 0
[ 171.260385][ T65] usbtmc 6-1:16.0: can't read capabilities
2026/02/08 21:50:50 executed programs: 5
[ 197.172425][ T3000] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 197.325959][ T3000] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 197.335090][ T3000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 197.343151][ T3000] usb 7-1: Product: syz
[ 197.347416][ T3000] usb 7-1: Manufacturer: syz
[ 197.352017][ T3000] usb 7-1: SerialNumber: syz
[ 197.361718][ T3000] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 197.376982][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 197.580294][ T23] usb 7-1: USB disconnect, device number 2
[ 198.442301][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 198.449399][ T10] ath9k_htc: Failed to initialize the device
[ 198.456104][ T23] usb 7-1: ath9k_htc: USB layer deinitialized
[ 198.752331][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 198.902291][ T23] usb 7-1: Using ep0 maxpacket: 8
[ 198.908867][ T23] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 198.920017][ T23] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 198.930101][ T23] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 198.940184][ T23] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 198.953225][ T23] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 198.962332][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 199.174166][ T23] usb 7-1: GET_CAPABILITIES returned 0
[ 199.179915][ T23] usbtmc 7-1:16.0: can't read capabilities
2026/02/08 21:51:18 executed programs: 6
[ 225.012292][ T3000] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 225.165847][ T3000] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 225.175155][ T3000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 225.183236][ T3000] usb 8-1: Product: syz
[ 225.187422][ T3000] usb 8-1: Manufacturer: syz
[ 225.192035][ T3000] usb 8-1: SerialNumber: syz
[ 225.202089][ T3000] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 225.217906][ T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 225.419389][ T6349] usb 8-1: USB disconnect, device number 2
[ 226.282322][ T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 226.289475][ T9] ath9k_htc: Failed to initialize the device
[ 226.296745][ T6349] usb 8-1: ath9k_htc: USB layer deinitialized
[ 226.592296][ T6349] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 226.742254][ T6349] usb 8-1: Using ep0 maxpacket: 8
[ 226.748797][ T6349] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 226.760190][ T6349] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 226.770292][ T6349] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 226.780271][ T6349] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 226.793384][ T6349] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 226.802636][ T6349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 227.014135][ T6349] usb 8-1: GET_CAPABILITIES returned 0
[ 227.019696][ T6349] usbtmc 8-1:16.0: can't read capabilities
2026/02/08 21:51:46 executed programs: 7
[ 253.052292][ T6808] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 253.205425][ T6808] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 253.214575][ T6808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 253.222706][ T6808] usb 9-1: Product: syz
[ 253.226997][ T6808] usb 9-1: Manufacturer: syz
[ 253.231606][ T6808] usb 9-1: SerialNumber: syz
[ 253.242966][ T6808] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 253.259907][ T7266] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 253.461345][ T3000] usb 9-1: USB disconnect, device number 2
[ 254.282333][ T7266] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 254.289486][ T7266] ath9k_htc: Failed to initialize the device
[ 254.296153][ T3000] usb 9-1: ath9k_htc: USB layer deinitialized
[ 254.592307][ T3000] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 254.742276][ T3000] usb 9-1: Using ep0 maxpacket: 8
[ 254.748793][ T3000] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 254.759992][ T3000] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 254.770059][ T3000] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 254.780035][ T3000] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 254.793164][ T3000] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 254.802269][ T3000] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 255.019831][ T3000] usb 9-1: GET_CAPABILITIES returned 0
[ 255.025461][ T3000] usbtmc 9-1:16.0: can't read capabilities
[ 265.242350][ T30] INFO: task syz.3.17:4974 blocked for more than 143 seconds.
[ 265.249860][ T30] Not tainted syzkaller #0
[ 265.254884][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 265.263600][ T30] task:syz.3.17 state:D stack:27384 pid:4974 tgid:4973 ppid:4524 task_flags:0x400040 flags:0x00080002
[ 265.275681][ T30] Call Trace:
[ 265.279074][ T30]
[ 265.282026][ T30] __schedule+0xeb0/0x3e50
[ 265.286788][ T30] ? __pfx___schedule+0x10/0x10
[ 265.291672][ T30] ? find_held_lock+0x2b/0x80
[ 265.296426][ T30] ? schedule+0x2bf/0x390
[ 265.300790][ T30] schedule+0xdd/0x390
[ 265.304939][ T30] schedule_timeout+0x127/0x280
[ 265.309817][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 265.315313][ T30] ? __pfx_process_timeout+0x10/0x10
[ 265.320733][ T30] ? mark_held_locks+0x40/0x70
[ 265.325586][ T30] __wait_for_common+0x2e7/0x4c0
[ 265.330567][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 265.336084][ T30] ? __pfx___wait_for_common+0x10/0x10
[ 265.341634][ T30] usb_start_wait_urb+0x157/0x270
[ 265.346769][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 265.352400][ T30] ? __asan_memset+0x23/0x50
[ 265.357003][ T30] usb_bulk_msg+0x22b/0x580
[ 265.361513][ T30] usbtmc_read.cold+0x59f/0x1075
[ 265.366620][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 265.371700][ T30] ? security_file_permission+0x21/0x80
[ 265.377405][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 265.382420][ T30] vfs_read+0x1e4/0xb30
[ 265.386623][ T30] ? __pfx_vfs_read+0x10/0x10
[ 265.391333][ T30] ? find_held_lock+0x2b/0x80
[ 265.396082][ T30] ? __fget_files+0x215/0x3d0
[ 265.400898][ T30] ? __fget_files+0x215/0x3d0
[ 265.405672][ T30] ? __fget_files+0x21f/0x3d0
[ 265.410436][ T30] ksys_read+0x12a/0x250
[ 265.414809][ T30] ? __pfx_ksys_read+0x10/0x10
[ 265.419627][ T30] do_syscall_64+0xc9/0x570
[ 265.424324][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 265.430366][ T30] RIP: 0033:0x7fbce20eaeb9
[ 265.434919][ T30] RSP: 002b:00007fbce1f4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 265.443491][ T30] RAX: ffffffffffffffda RBX: 00007fbce2365fa0 RCX: 00007fbce20eaeb9
[ 265.451627][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 265.459863][ T30] RBP: 00007fbce2158c1f R08: 0000000000000000 R09: 0000000000000000
[ 265.467916][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 265.475925][ T30] R13: 00007fbce2366038 R14: 00007fbce2365fa0 R15: 00007ffc4a036e78
[ 265.483967][ T30]
[ 265.487023][ T30]
[ 265.487023][ T30] Showing all locks held in the system:
[ 265.494803][ T30] 3 locks held by kworker/0:0/9:
[ 265.499768][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 265.510517][ T30] #1: ffffc9000009fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 265.522339][ T30] #2: ffff88810af81198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 265.532890][ T30] 3 locks held by kworker/0:1/10:
[ 265.538038][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 265.548628][ T30] #1: ffffc900000afca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 265.560215][ T30] #2: ffff88810abf9198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 265.570551][ T30] 6 locks held by kworker/1:0/23:
[ 265.575951][ T30] #0: ffff888105287548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 265.586861][ T30] #1: ffffc9000018fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 265.598326][ T30] #2: ffff88810abf9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 265.607437][ T30] #3: ffff88811b56e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 265.616782][ T30] #4: ffff888106aed160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 265.626155][ T30] #5: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 265.636848][ T30] 1 lock held by khungtaskd/30:
[ 265.641752][ T30] #0: ffffffff894da3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 265.651695][ T30] 6 locks held by kworker/1:1/65:
[ 265.656794][ T30] #0: ffff888105287548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 265.667725][ T30] #1: ffffc900005b7ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 265.679177][ T30] #2: ffff88810abe1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 265.688441][ T30] #3: ffff888113911198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 265.697878][ T30] #4: ffff888113910160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 265.707227][ T30] #5: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 265.716724][ T30] 3 locks held by kworker/1:2/1122:
[ 265.721948][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 265.732570][ T30] #1: ffffc90001dcfca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 265.744095][ T30] #2: ffff88810abe1198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 265.754485][ T30] 2 locks held by getty/2924:
[ 265.759188][ T30] #0: ffff88811286f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 265.769396][ T30] #1: ffffc900000452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 265.779717][ T30] 6 locks held by kworker/0:2/3000:
[ 265.784985][ T30] #0: ffff888105287548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 265.796014][ T30] #1: ffffc900018efca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 265.807443][ T30] #2: ffff88810af99198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 265.816521][ T30] #3: ffff88811bd0a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 265.825849][ T30] #4: ffff888117864160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 265.835210][ T30] #5: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 265.844897][ T30] 1 lock held by syz.3.17/4974:
[ 265.849774][ T30] #0: ffff88811d6230d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x14a/0x270
[ 265.859303][ T30] 2 locks held by syz.4.18/5430:
[ 265.864944][ T30] #0: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 265.873778][ T30] #1: ffff88811d6230d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950
[ 265.883769][ T30] 1 lock held by syz.5.19/5887:
[ 265.888654][ T30] #0: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 265.897680][ T30] 1 lock held by syz.6.20/6345:
[ 265.902608][ T30] #0: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 265.912522][ T30] 6 locks held by kworker/1:4/6349:
[ 265.917839][ T30] #0: ffff888105287548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 265.929361][ T30] #1: ffffc900051cfca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 265.941779][ T30] #2: ffff88810af81198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 265.951005][ T30] #3: ffff888117993198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 265.960399][ T30] #4: ffff888104ae9160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 265.970035][ T30] #5: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 265.979570][ T30] 1 lock held by syz.7.21/6804:
[ 265.984873][ T30] #0: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 265.993599][ T30] 1 lock held by syz.8.22/7262:
[ 265.998552][ T30] #0: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 266.007269][ T30] 3 locks held by kworker/1:6/7266:
[ 266.012638][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 266.023603][ T30] #1: ffffc900077cfca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 266.035346][ T30] #2: ffff88810af99198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 266.045668][ T30]
[ 266.048026][ T30] =============================================
[ 266.048026][ T30]
[ 266.056513][ T30] NMI backtrace for cpu 0
[ 266.056550][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 266.056578][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 266.056591][ T30] Call Trace:
[ 266.056598][ T30]
[ 266.056606][ T30] dump_stack_lvl+0x100/0x190
[ 266.056651][ T30] nmi_cpu_backtrace.cold+0x12d/0x151
[ 266.056677][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 266.056706][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 266.056739][ T30] sys_info+0x141/0x190
[ 266.056766][ T30] watchdog+0xcc3/0xfe0
[ 266.056809][ T30] ? __pfx_watchdog+0x10/0x10
[ 266.056840][ T30] ? __kthread_parkme+0x18c/0x230
[ 266.056867][ T30] ? __pfx_watchdog+0x10/0x10
[ 266.056902][ T30] ? __pfx_watchdog+0x10/0x10
[ 266.056932][ T30] kthread+0x3b3/0x730
[ 266.056966][ T30] ? __pfx_kthread+0x10/0x10
[ 266.056996][ T30] ? ret_from_fork+0x79/0xa20
[ 266.057021][ T30] ? ret_from_fork+0x79/0xa20
[ 266.057047][ T30] ? rcu_is_watching+0x12/0xc0
[ 266.057083][ T30] ? __pfx_kthread+0x10/0x10
[ 266.057116][ T30] ret_from_fork+0x6c3/0xa20
[ 266.057142][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 266.057166][ T30] ? __switch_to+0x7af/0x10b0
[ 266.057206][ T30] ? __pfx_kthread+0x10/0x10
[ 266.057238][ T30] ret_from_fork_asm+0x1a/0x30
[ 266.057285][ T30]
[ 266.057294][ T30] Sending NMI from CPU 0 to CPUs 1:
[ 266.197413][ C1] NMI backtrace for cpu 1
[ 266.197462][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(voluntary)
[ 266.197489][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 266.197504][ C1] RIP: 0010:sched_balance_update_blocked_averages+0x456/0x1dd0
[ 266.197554][ C1] Code: 00 00 49 8b 9e 98 01 00 00 48 89 84 24 90 00 00 00 0f 85 fb 07 00 00 48 8d bb 28 01 00 00 48 89 f8 48 c1 e8 03 42 80 3c 20 00 <0f> 85 84 0f 00 00 48 8b 44 24 70 48 03 83 28 01 00 00 48 89 c3 48
[ 266.197576][ C1] RSP: 0018:ffffc900001a8d50 EFLAGS: 00000046
[ 266.197595][ C1] RAX: 1ffffffff19a16dd RBX: ffffffff8cd0b5c0 RCX: ffffffff81897273
[ 266.197615][ C1] RDX: 1ffff1103eae7263 RSI: ffffffff878e9720 RDI: ffffffff8cd0b6e8
[ 266.197630][ C1] RBP: ffffc900001a8e20 R08: ffff8881f5739318 R09: fffffbfff1599a9a
[ 266.197645][ C1] R10: ffffffff8accd4d7 R11: ffff8881f5739208 R12: dffffc0000000000
[ 266.197660][ C1] R13: ffff8881f5739998 R14: ffff8881f5739180 R15: ffff8881f57392f8
[ 266.197676][ C1] FS: 0000000000000000(0000) GS:ffff888268a6a000(0000) knlGS:0000000000000000
[ 266.197696][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 266.197711][ C1] CR2: 00007fd3354aae80 CR3: 000000011736a000 CR4: 00000000003506f0
[ 266.197725][ C1] Call Trace:
[ 266.197736][ C1]
[ 266.197749][ C1] ? clockevents_program_event+0x151/0x360
[ 266.197775][ C1] ? clockevents_program_event+0x151/0x360
[ 266.197805][ C1] _nohz_idle_balance.isra.0+0x667/0x860
[ 266.197834][ C1] ? __lock_acquire+0x4a5/0x2630
[ 266.197859][ C1] ? __pfx__nohz_idle_balance.isra.0+0x10/0x10
[ 266.197893][ C1] handle_softirqs+0x1dd/0x8f0
[ 266.197919][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 266.197941][ C1] ? __flush_smp_call_function_queue+0x4e7/0x960
[ 266.197978][ C1] __irq_exit_rcu+0xed/0x150
[ 266.198000][ C1] irq_exit_rcu+0x9/0x30
[ 266.198022][ C1] sysvec_call_function_single+0x8f/0xb0
[ 266.198056][ C1]
[ 266.198063][ C1]
[ 266.198070][ C1] asm_sysvec_call_function_single+0x1a/0x20
[ 266.198096][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 266.198128][ C1] Code: 4a a3 01 e9 53 e3 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c3 12 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 266.198154][ C1] RSP: 0018:ffffc9000013fe00 EFLAGS: 00000246
[ 266.198168][ C1] RAX: 0000000000df6769 RBX: ffff888101ecba80 RCX: ffffffff87539cd5
[ 266.198181][ C1] RDX: 0000000000000000 RSI: ffffffff88dec9ce RDI: ffffffff878e97a0
[ 266.198193][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed103eae66c5
[ 266.198207][ C1] R10: ffff8881f573362b R11: 0000000000000000 R12: ffffed10203d9750
[ 266.198221][ C1] R13: 0000000000000001 R14: ffffffff8accd4d0 R15: 0000000000000000
[ 266.198239][ C1] ? ct_kernel_exit+0x125/0x180
[ 266.198274][ C1] default_idle+0x9/0x10
[ 266.198294][ C1] default_idle_call+0x6c/0xb0
[ 266.198315][ C1] do_idle+0x35b/0x4b0
[ 266.198338][ C1] ? __pfx_do_idle+0x10/0x10
[ 266.198364][ C1] cpu_startup_entry+0x4f/0x60
[ 266.198387][ C1] start_secondary+0x21d/0x2d0
[ 266.198419][ C1] ? __pfx_start_secondary+0x10/0x10
[ 266.198447][ C1] common_startup_64+0x13e/0x148
[ 266.198483][ C1]
[ 266.199400][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 266.199418][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 266.199448][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 266.199464][ T30] Call Trace:
[ 266.199473][ T30]
[ 266.199483][ T30] dump_stack_lvl+0x100/0x190
[ 266.199528][ T30] vpanic+0x20d/0x630
[ 266.199559][ T30] panic+0xd1/0xd1
[ 266.199585][ T30] ? __pfx_panic+0x10/0x10
[ 266.199616][ T30] ? wq_watchdog_touch+0xec/0x1a0
[ 266.199648][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 266.199680][ T30] ? watchdog.cold+0x198/0x1ca
[ 266.199711][ T30] ? watchdog+0xcd3/0xfe0
[ 266.199745][ T30] watchdog.cold+0x1a9/0x1ca
[ 266.199786][ T30] ? __pfx_watchdog+0x10/0x10
[ 266.199819][ T30] ? __kthread_parkme+0x18c/0x230
[ 266.199846][ T30] ? __pfx_watchdog+0x10/0x10
[ 266.199880][ T30] ? __pfx_watchdog+0x10/0x10
[ 266.199910][ T30] kthread+0x3b3/0x730
[ 266.199944][ T30] ? __pfx_kthread+0x10/0x10
[ 266.199973][ T30] ? ret_from_fork+0x79/0xa20
[ 266.199998][ T30] ? ret_from_fork+0x79/0xa20
[ 266.200022][ T30] ? rcu_is_watching+0x12/0xc0
[ 266.200057][ T30] ? __pfx_kthread+0x10/0x10
[ 266.200090][ T30] ret_from_fork+0x6c3/0xa20
[ 266.200117][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 266.200146][ T30] ? __switch_to+0x7af/0x10b0
[ 266.200184][ T30] ? __pfx_kthread+0x10/0x10
[ 266.200217][ T30] ret_from_fork_asm+0x1a/0x30
[ 266.200260][ T30]
[ 266.661444][ T30] Kernel Offset: disabled
[ 266.665785][ T30] Rebooting in 86400 seconds..