Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts.
2026/02/23 12:52:11 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 90.479404][ T29] audit: type=1400 audit(1771851133.347:103): avc: denied { unlink } for pid=3984 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 90.555557][ T3984] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.735465][ T29] audit: type=1401 audit(1771851135.597:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2026/02/23 12:52:26 executed programs: 0
2026/02/23 12:52:36 executed programs: 2
[ 113.469274][ T29] audit: type=1400 audit(1771851156.327:105): avc: denied { read write } for pid=4965 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 113.494467][ T29] audit: type=1400 audit(1771851156.347:106): avc: denied { open } for pid=4965 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 113.518365][ T29] audit: type=1400 audit(1771851156.347:107): avc: denied { ioctl } for pid=4965 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 113.725924][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 113.879745][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 113.888922][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 113.896933][ T9] usb 4-1: Product: syz
[ 113.901091][ T9] usb 4-1: Manufacturer: syz
[ 113.905723][ T9] usb 4-1: SerialNumber: syz
[ 113.917665][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 113.964259][ T29] audit: type=1400 audit(1771851156.827:108): avc: denied { firmware_load } for pid=3463 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 113.996913][ T3463] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 114.200505][ T23] usb 4-1: USB disconnect, device number 2
[ 115.065698][ T3463] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 115.072981][ T3463] ath9k_htc: Failed to initialize the device
[ 115.079751][ T23] usb 4-1: ath9k_htc: USB layer deinitialized
[ 115.375751][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 115.525711][ T23] usb 4-1: Using ep0 maxpacket: 8
[ 115.532108][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 115.543231][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 115.553446][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 115.563390][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 115.576384][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 115.585398][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 115.797721][ T23] usb 4-1: GET_CAPABILITIES returned 0
[ 115.803251][ T23] usbtmc 4-1:16.0: can't read capabilities
[ 116.010453][ T29] audit: type=1400 audit(1771851158.877:109): avc: denied { write } for pid=4965 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
2026/02/23 12:53:03 executed programs: 3
[ 140.975738][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 141.128599][ T23] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 141.137866][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 141.145960][ T23] usb 5-1: Product: syz
[ 141.150157][ T23] usb 5-1: Manufacturer: syz
[ 141.154765][ T23] usb 5-1: SerialNumber: syz
[ 141.163192][ T23] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 141.180244][ T349] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 141.381765][ T3463] usb 5-1: USB disconnect, device number 2
[ 142.265676][ T349] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 142.272819][ T349] ath9k_htc: Failed to initialize the device
[ 142.279487][ T3463] usb 5-1: ath9k_htc: USB layer deinitialized
[ 142.575737][ T3463] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 142.725708][ T3463] usb 5-1: Using ep0 maxpacket: 8
[ 142.732480][ T3463] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 142.744358][ T3463] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 142.754438][ T3463] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 142.764500][ T3463] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 142.777531][ T3463] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 142.786629][ T3463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 142.998553][ T3463] usb 5-1: GET_CAPABILITIES returned 0
[ 143.004089][ T3463] usbtmc 5-1:16.0: can't read capabilities
2026/02/23 12:53:30 executed programs: 4
[ 167.935672][ T3463] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 168.089074][ T3463] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 168.098228][ T3463] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 168.106282][ T3463] usb 6-1: Product: syz
[ 168.110452][ T3463] usb 6-1: Manufacturer: syz
[ 168.115136][ T3463] usb 6-1: SerialNumber: syz
[ 168.124871][ T3463] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 168.140345][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 168.345884][ T349] usb 6-1: USB disconnect, device number 2
[ 169.225704][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 169.232776][ T9] ath9k_htc: Failed to initialize the device
[ 169.239461][ T349] usb 6-1: ath9k_htc: USB layer deinitialized
[ 169.535726][ T349] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 169.685651][ T349] usb 6-1: Using ep0 maxpacket: 8
[ 169.691936][ T349] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 169.703145][ T349] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 169.713216][ T349] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 169.723282][ T349] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 169.736678][ T349] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 169.745797][ T349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 169.957152][ T349] usb 6-1: GET_CAPABILITIES returned 0
[ 169.962714][ T349] usbtmc 6-1:16.0: can't read capabilities
2026/02/23 12:53:57 executed programs: 5
[ 195.005682][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 195.158492][ T23] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 195.167613][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 195.175679][ T23] usb 7-1: Product: syz
[ 195.179856][ T23] usb 7-1: Manufacturer: syz
[ 195.184452][ T23] usb 7-1: SerialNumber: syz
[ 195.197426][ T23] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 195.220756][ T6339] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 195.448483][ T28] usb 7-1: USB disconnect, device number 2
[ 196.265683][ T6339] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 196.272723][ T6339] ath9k_htc: Failed to initialize the device
[ 196.279615][ T28] usb 7-1: ath9k_htc: USB layer deinitialized
[ 196.575692][ T28] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 196.725608][ T28] usb 7-1: Using ep0 maxpacket: 8
[ 196.732160][ T28] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 196.743298][ T28] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 196.753362][ T28] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 196.763582][ T28] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 196.776583][ T28] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 196.785648][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 196.999859][ T28] usb 7-1: GET_CAPABILITIES returned 0
[ 197.005401][ T28] usbtmc 7-1:16.0: can't read capabilities
2026/02/23 12:54:24 executed programs: 6
[ 222.095686][ T6340] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 222.248791][ T6340] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 222.257955][ T6340] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 222.266009][ T6340] usb 8-1: Product: syz
[ 222.270185][ T6340] usb 8-1: Manufacturer: syz
[ 222.274790][ T6340] usb 8-1: SerialNumber: syz
[ 222.285680][ T6340] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 222.300128][ T6799] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 222.501977][ T3463] usb 8-1: USB disconnect, device number 2
[ 223.385680][ T6799] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 223.392863][ T6799] ath9k_htc: Failed to initialize the device
[ 223.399481][ T3463] usb 8-1: ath9k_htc: USB layer deinitialized
[ 223.695698][ T3463] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 223.845675][ T3463] usb 8-1: Using ep0 maxpacket: 8
[ 223.852227][ T3463] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 223.863345][ T3463] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 223.873572][ T3463] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 223.883562][ T3463] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 223.896588][ T3463] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 223.905668][ T3463] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 224.117620][ T3463] usb 8-1: GET_CAPABILITIES returned 0
[ 224.123219][ T3463] usbtmc 8-1:16.0: can't read capabilities
2026/02/23 12:54:51 executed programs: 7
[ 249.235716][ T6340] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 249.389042][ T6340] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 249.398202][ T6340] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 249.406260][ T6340] usb 9-1: Product: syz
[ 249.410446][ T6340] usb 9-1: Manufacturer: syz
[ 249.415128][ T6340] usb 9-1: SerialNumber: syz
[ 249.425078][ T6340] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 249.445124][ T7257] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 249.660947][ T6340] usb 9-1: USB disconnect, device number 2
[ 250.505695][ T7257] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 250.512773][ T7257] ath9k_htc: Failed to initialize the device
[ 250.519684][ T6340] usb 9-1: ath9k_htc: USB layer deinitialized
[ 250.815680][ T6340] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 250.965656][ T6340] usb 9-1: Using ep0 maxpacket: 8
[ 250.972132][ T6340] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 250.983307][ T6340] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 250.993398][ T6340] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 251.003381][ T6340] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 251.016471][ T6340] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 251.025516][ T6340] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 251.237582][ T6340] usb 9-1: GET_CAPABILITIES returned 0
[ 251.243392][ T6340] usbtmc 9-1:16.0: can't read capabilities
[ 267.226253][ T30] INFO: task syz.3.17:4966 blocked for more than 143 seconds.
[ 267.234023][ T30] Not tainted syzkaller #0
[ 267.244357][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 267.253405][ T30] task:syz.3.17 state:D stack:28184 pid:4966 tgid:4965 ppid:4515 task_flags:0x400040 flags:0x00080002
[ 267.265872][ T30] Call Trace:
[ 267.269232][ T30]
[ 267.272210][ T30] __schedule+0xeb1/0x41f0
[ 267.277190][ T30] ? __pfx___schedule+0x10/0x10
[ 267.282225][ T30] ? find_held_lock+0x2b/0x80
[ 267.287368][ T30] ? schedule+0x2bf/0x390
[ 267.291793][ T30] schedule+0xdd/0x390
[ 267.296326][ T30] schedule_timeout+0x127/0x280
[ 267.301282][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 267.307191][ T30] ? __pfx_process_timeout+0x10/0x10
[ 267.312568][ T30] ? mark_held_locks+0x40/0x70
[ 267.317800][ T30] __wait_for_common+0x2e7/0x4c0
[ 267.322833][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 267.329538][ T30] ? __pfx___wait_for_common+0x10/0x10
[ 267.335094][ T30] usb_start_wait_urb+0x147/0x4c0
[ 267.340664][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 267.346689][ T30] ? __asan_memset+0x23/0x50
[ 267.351409][ T30] usb_bulk_msg+0x22b/0x580
[ 267.356441][ T30] usbtmc_read+0x5f4/0x10b0
[ 267.361040][ T30] ? futex_hash_put+0x43/0x50
[ 267.366241][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 267.371271][ T30] ? security_file_permission+0x21/0x80
[ 267.377629][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 267.382640][ T30] vfs_read+0x1e4/0xb30
[ 267.387269][ T30] ? __pfx_vfs_read+0x10/0x10
[ 267.392031][ T30] ? find_held_lock+0x2b/0x80
[ 267.397157][ T30] ? __fget_files+0x215/0x3d0
[ 267.401930][ T30] ? __fget_files+0x215/0x3d0
[ 267.407241][ T30] ? __fget_files+0x21f/0x3d0
[ 267.412064][ T30] ksys_read+0x12a/0x250
[ 267.416703][ T30] ? __pfx_ksys_read+0x10/0x10
[ 267.421558][ T30] do_syscall_64+0x106/0x7b0
[ 267.426708][ T30] ? irqentry_exit+0x117/0x620
[ 267.431545][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 267.437923][ T30] RIP: 0033:0x7fcf4449aeb9
[ 267.442421][ T30] RSP: 002b:00007fcf442ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 267.451379][ T30] RAX: ffffffffffffffda RBX: 00007fcf44715fa0 RCX: 00007fcf4449aeb9
[ 267.459980][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 267.468364][ T30] RBP: 00007fcf44508c1f R08: 0000000000000000 R09: 0000000000000000
[ 267.476694][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 267.484734][ T30] R13: 00007fcf44716038 R14: 00007fcf44715fa0 R15: 00007ffdc8682fc8
[ 267.493734][ T30]
[ 267.497135][ T30]
[ 267.497135][ T30] Showing all locks held in the system:
[ 267.504908][ T30] 3 locks held by kworker/0:0/9:
[ 267.510434][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.521326][ T30] #1: ffffc9000009fd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.533149][ T30] #2: ffff88810bf09198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 267.544068][ T30] 6 locks held by kworker/1:1/28:
[ 267.549481][ T30] #0: ffff888103ea1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.560705][ T30] #1: ffffc900001e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.572422][ T30] #2: ffff88810bf49198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 267.581700][ T30] #3: ffff888105aca198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.591638][ T30] #4: ffff888105aa8160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.601559][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 267.611454][ T30] 1 lock held by khungtaskd/30:
[ 267.616697][ T30] #0: ffffffff896e05a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 267.627010][ T30] 2 locks held by kworker/u8:1/32:
[ 267.632209][ T30] #0: ffff8881000ac948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.644031][ T30] #1: ffffc90000227d18 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.656001][ T30] 6 locks held by kworker/1:2/349:
[ 267.661171][ T30] #0: ffff888103ea1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.672563][ T30] #1: ffffc90001a0fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.684279][ T30] #2: ffff88810bf09198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 267.693655][ T30] #3: ffff888130ed5198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.703376][ T30] #4: ffff888130ed3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.713001][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 267.722887][ T30] 2 locks held by getty/2919:
[ 267.727903][ T30] #0: ffff888112ee50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 267.738105][ T30] #1: ffffc900000432f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 267.748658][ T30] 6 locks held by kworker/0:3/3463:
[ 267.753920][ T30] #0: ffff888103ea1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.765317][ T30] #1: ffffc90002cffd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.776942][ T30] #2: ffff88810c311198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 267.786227][ T30] #3: ffff88811dd9f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.795861][ T30] #4: ffff88811c497160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.805219][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 267.815316][ T30] 1 lock held by syz.3.17/4966:
[ 267.820572][ T30] #0: ffff8881178410d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x154/0x10b0
[ 267.830479][ T30] 2 locks held by syz.4.18/5422:
[ 267.835473][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 267.844552][ T30] #1: ffff8881178410d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950
[ 267.854492][ T30] 1 lock held by syz.5.19/5879:
[ 267.859724][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 267.868942][ T30] 1 lock held by syz.6.20/6336:
[ 267.873861][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 267.883080][ T30] 3 locks held by kworker/1:3/6339:
[ 267.888673][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.899599][ T30] #1: ffffc900064bfd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.911484][ T30] #2: ffff88810bf49198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 267.922168][ T30] 6 locks held by kworker/1:4/6340:
[ 267.927792][ T30] #0: ffff888103ea1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.939019][ T30] #1: ffffc900064d7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.950705][ T30] #2: ffff88810c369198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 267.960059][ T30] #3: ffff888121815198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.969910][ T30] #4: ffff888121817160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.979716][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 267.989628][ T30] 1 lock held by syz.7.21/6794:
[ 267.994538][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.003769][ T30] 3 locks held by kworker/1:5/6799:
[ 268.009292][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 268.020519][ T30] #1: ffffc900077f7d18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 268.032440][ T30] #2: ffff88810c311198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 268.043019][ T30] 1 lock held by syz.8.22/7253:
[ 268.048282][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.057442][ T30] 3 locks held by kworker/1:6/7257:
[ 268.062700][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 268.074254][ T30] #1: ffffc90007d3fd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 268.086300][ T30] #2: ffff88810c369198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 268.096941][ T30] 5 locks held by modprobe/7411:
[ 268.101961][ T30]
[ 268.104317][ T30] =============================================
[ 268.104317][ T30]
[ 268.116545][ T30] NMI backtrace for cpu 1
[ 268.116578][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 268.116611][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 268.116626][ T30] Call Trace:
[ 268.116634][ T30]
[ 268.116643][ T30] dump_stack_lvl+0x100/0x190
[ 268.116680][ T30] nmi_cpu_backtrace.cold+0x12d/0x151
[ 268.116716][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 268.116756][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 268.116788][ T30] sys_info+0x141/0x190
[ 268.116812][ T30] watchdog+0xd25/0x1050
[ 268.116848][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.116876][ T30] ? __kthread_parkme+0x18c/0x230
[ 268.116917][ T30] ? kthread+0x13a/0x450
[ 268.116941][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.116966][ T30] kthread+0x370/0x450
[ 268.116991][ T30] ? __pfx_kthread+0x10/0x10
[ 268.117019][ T30] ret_from_fork+0x6c3/0xcb0
[ 268.117055][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 268.117092][ T30] ? __switch_to+0x7aa/0x1120
[ 268.117116][ T30] ? __pfx_kthread+0x10/0x10
[ 268.117145][ T30] ret_from_fork_asm+0x1a/0x30
[ 268.117203][ T30]
[ 268.117231][ T30] Sending NMI from CPU 1 to CPUs 0:
[ 268.237938][ C0] NMI backtrace for cpu 0
[ 268.237956][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full)
[ 268.237983][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 268.237996][ C0] RIP: 0010:unwind_next_frame+0x11d2/0x1ea0
[ 268.238030][ C0] Code: 4f 8a 0b 01 e8 6f eb ff ff e9 96 f1 ff ff 80 3d ee 7b 72 09 00 0f 85 85 f1 ff ff e9 40 33 b1 ff 48 b8 00 00 00 00 00 fc ff df <48> 8b 14 24 48 c1 ea 03 80 3c 02 00 0f 85 02 09 00 00 48 89 c8 4d
[ 268.238053][ C0] RSP: 0018:ffffc900000ef778 EFLAGS: 00000246
[ 268.238071][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff8b520886
[ 268.238095][ C0] RDX: 0000000000000005 RSI: 0000000000000001 RDI: ffffffff8afc5ba0
[ 268.238108][ C0] RBP: ffffc900000ef880 R08: ffffffff8b52088a R09: 0000000000000007
[ 268.238122][ C0] R10: 0000000000000200 R11: 0000000000006f93 R12: ffffc900000ef888
[ 268.238136][ C0] R13: ffffc900000ef838 R14: 0000000000000005 R15: 0000000000000000
[ 268.238150][ C0] FS: 0000000000000000(0000) GS:ffff8882686d3000(0000) knlGS:0000000000000000
[ 268.238173][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 268.238189][ C0] CR2: 00007fe770796e9c CR3: 0000000117270000 CR4: 00000000003506f0
[ 268.238204][ C0] Call Trace:
[ 268.238210][ C0]
[ 268.238218][ C0] ? __unwind_start+0x2fb/0x7f0
[ 268.238243][ C0] ? get_stack_info_noinstr+0x18/0x130
[ 268.238268][ C0] __unwind_start+0x3d1/0x7f0
[ 268.238294][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 268.238326][ C0] arch_stack_walk+0x73/0xf0
[ 268.238369][ C0] ? __unwind_start+0x2fb/0x7f0
[ 268.238395][ C0] ? slab_free_after_rcu_debug+0x49/0xf0
[ 268.238418][ C0] stack_trace_save+0x8e/0xc0
[ 268.238444][ C0] ? __pfx_stack_trace_save+0x10/0x10
[ 268.238474][ C0] ? __lock_acquire+0x4a5/0x2630
[ 268.238509][ C0] ? __pfx_stack_trace_save+0x10/0x10
[ 268.238536][ C0] kasan_save_stack+0x30/0x50
[ 268.238590][ C0] kasan_save_track+0x14/0x30
[ 268.238619][ C0] kasan_save_free_info+0x3b/0x70
[ 268.238643][ C0] __kasan_slab_free+0x43/0x70
[ 268.238674][ C0] kfree+0x1dc/0x640
[ 268.238706][ C0] ? rcu_core+0x59d/0x10d0
[ 268.238731][ C0] ? rcu_core+0x59d/0x10d0
[ 268.238751][ C0] slab_free_after_rcu_debug+0x49/0xf0
[ 268.238773][ C0] rcu_core+0x5a2/0x10d0
[ 268.238798][ C0] ? __pfx_rcu_core+0x10/0x10
[ 268.238819][ C0] ? _raw_spin_unlock_irq+0x2e/0x50
[ 268.238844][ C0] ? rcu_is_watching+0x12/0xc0
[ 268.238872][ C0] handle_softirqs+0x1de/0x9d0
[ 268.238906][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 268.238937][ C0] ? run_ksoftirqd+0x5b/0x60
[ 268.238967][ C0] ? rcu_is_watching+0x12/0xc0
[ 268.238992][ C0] ? __pfx_run_ksoftirqd+0x10/0x10
[ 268.239024][ C0] run_ksoftirqd+0x38/0x60
[ 268.239054][ C0] smpboot_thread_fn+0x3d3/0xaa0
[ 268.239079][ C0] ? kthread+0x13a/0x450
[ 268.239100][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 268.239122][ C0] kthread+0x370/0x450
[ 268.239145][ C0] ? __pfx_kthread+0x10/0x10
[ 268.239168][ C0] ret_from_fork+0x6c3/0xcb0
[ 268.239199][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 268.239231][ C0] ? __switch_to+0x7aa/0x1120
[ 268.239252][ C0] ? __pfx_kthread+0x10/0x10
[ 268.239278][ C0] ret_from_fork_asm+0x1a/0x30
[ 268.239319][ C0]
[ 268.559389][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 268.566259][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 268.575392][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 268.585469][ T30] Call Trace:
[ 268.588768][ T30]
[ 268.591715][ T30] dump_stack_lvl+0x100/0x190
[ 268.596426][ T30] vpanic+0x552/0x970
[ 268.600438][ T30] ? __pfx_vpanic+0x10/0x10
[ 268.604977][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 268.611167][ T30] panic+0xd1/0xe0
[ 268.614921][ T30] ? __pfx_panic+0x10/0x10
[ 268.619369][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 268.625554][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 268.631733][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 268.637912][ T30] ? watchdog.cold+0x198/0x1ca
[ 268.642709][ T30] ? watchdog+0xd35/0x1050
[ 268.647162][ T30] watchdog.cold+0x1a9/0x1ca
[ 268.651798][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.656504][ T30] ? __kthread_parkme+0x18c/0x230
[ 268.661570][ T30] ? kthread+0x13a/0x450
[ 268.665840][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.670542][ T30] kthread+0x370/0x450
[ 268.674634][ T30] ? __pfx_kthread+0x10/0x10
[ 268.679254][ T30] ret_from_fork+0x6c3/0xcb0
[ 268.684322][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 268.689485][ T30] ? __switch_to+0x7aa/0x1120
[ 268.694192][ T30] ? __pfx_kthread+0x10/0x10
[ 268.698810][ T30] ret_from_fork_asm+0x1a/0x30
[ 268.703635][ T30]
[ 268.707004][ T30] Kernel Offset: disabled
[ 268.711331][ T30] Rebooting in 86400 seconds..