Warning: Permanently added '10.128.1.234' (ED25519) to the list of known hosts.
2026/02/23 13:12:07 parsed 1 programs
[ 107.301111][ T29] audit: type=1400 audit(1771852330.177:103): avc: denied { unlink } for pid=3982 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 107.402957][ T3982] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 110.861087][ T29] audit: type=1401 audit(1771852333.737:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2026/02/23 13:12:27 executed programs: 0
2026/02/23 13:12:38 executed programs: 2
[ 136.147758][ T29] audit: type=1400 audit(1771852359.017:105): avc: denied { read write } for pid=4967 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 136.173572][ T29] audit: type=1400 audit(1771852359.027:106): avc: denied { open } for pid=4967 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 136.199354][ T29] audit: type=1400 audit(1771852359.027:107): avc: denied { ioctl } for pid=4967 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 136.387599][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 136.552094][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 136.562240][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 136.570788][ T9] usb 4-1: Product: syz
[ 136.575156][ T9] usb 4-1: Manufacturer: syz
[ 136.580023][ T9] usb 4-1: SerialNumber: syz
[ 136.593978][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 136.622674][ T29] audit: type=1400 audit(1771852359.497:108): avc: denied { firmware_load } for pid=921 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 136.662064][ T921] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 136.908298][ T9] usb 4-1: USB disconnect, device number 2
[ 137.737429][ T921] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 137.744814][ T921] ath9k_htc: Failed to initialize the device
[ 137.752039][ T9] usb 4-1: ath9k_htc: USB layer deinitialized
[ 138.047392][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 138.197378][ T9] usb 4-1: Using ep0 maxpacket: 8
[ 138.204477][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 138.215881][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 138.226250][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 138.237317][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 138.251452][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 138.261067][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 138.473496][ T9] usb 4-1: GET_CAPABILITIES returned 0
[ 138.479516][ T9] usbtmc 4-1:16.0: can't read capabilities
[ 138.680455][ T29] audit: type=1400 audit(1771852361.557:109): avc: denied { write } for pid=4967 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
2026/02/23 13:13:09 executed programs: 3
[ 166.847396][ T28] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 167.001508][ T28] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 167.010953][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 167.019138][ T28] usb 5-1: Product: syz
[ 167.023444][ T28] usb 5-1: Manufacturer: syz
[ 167.028290][ T28] usb 5-1: SerialNumber: syz
[ 167.043478][ T28] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 167.062141][ T23] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 167.265959][ T9] usb 5-1: USB disconnect, device number 2
[ 168.137363][ T23] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 168.144938][ T23] ath9k_htc: Failed to initialize the device
[ 168.152263][ T9] usb 5-1: ath9k_htc: USB layer deinitialized
[ 168.457332][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 168.607371][ T9] usb 5-1: Using ep0 maxpacket: 8
[ 168.614585][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 168.626311][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 168.636502][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 168.646697][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 168.660547][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 168.669956][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 168.884039][ T9] usb 5-1: GET_CAPABILITIES returned 0
[ 168.889902][ T9] usbtmc 5-1:16.0: can't read capabilities
2026/02/23 13:13:40 executed programs: 4
[ 197.677470][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 197.831100][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 197.840541][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 197.849724][ T9] usb 6-1: Product: syz
[ 197.853933][ T9] usb 6-1: Manufacturer: syz
[ 197.858624][ T9] usb 6-1: SerialNumber: syz
[ 197.872745][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 197.888789][ T921] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 198.090789][ T23] usb 6-1: USB disconnect, device number 2
[ 198.937314][ T921] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 198.944848][ T921] ath9k_htc: Failed to initialize the device
[ 198.951927][ T23] usb 6-1: ath9k_htc: USB layer deinitialized
[ 199.247479][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 199.397334][ T23] usb 6-1: Using ep0 maxpacket: 8
[ 199.404285][ T23] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 199.416123][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 199.426666][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 199.436968][ T23] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 199.451219][ T23] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 199.461253][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 199.674001][ T23] usb 6-1: GET_CAPABILITIES returned 0
[ 199.679818][ T23] usbtmc 6-1:16.0: can't read capabilities
2026/02/23 13:14:11 executed programs: 5
[ 228.567313][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 228.721721][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 228.731675][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 228.739954][ T9] usb 7-1: Product: syz
[ 228.744423][ T9] usb 7-1: Manufacturer: syz
[ 228.749097][ T9] usb 7-1: SerialNumber: syz
[ 228.760565][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 228.776665][ T4970] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 228.978470][ T28] usb 7-1: USB disconnect, device number 2
[ 229.817431][ T4970] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 229.825090][ T4970] ath9k_htc: Failed to initialize the device
[ 229.833737][ T28] usb 7-1: ath9k_htc: USB layer deinitialized
[ 230.137440][ T28] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 230.287331][ T28] usb 7-1: Using ep0 maxpacket: 8
[ 230.294531][ T28] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 230.306612][ T28] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 230.316871][ T28] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 230.327590][ T28] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 230.342415][ T28] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 230.352434][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 230.568238][ T28] usb 7-1: GET_CAPABILITIES returned 0
[ 230.574070][ T28] usbtmc 7-1:16.0: can't read capabilities
2026/02/23 13:14:41 executed programs: 6
[ 259.247387][ T5883] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 259.401005][ T5883] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 259.410578][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 259.419271][ T5883] usb 8-1: Product: syz
[ 259.423600][ T5883] usb 8-1: Manufacturer: syz
[ 259.428366][ T5883] usb 8-1: SerialNumber: syz
[ 259.439529][ T5883] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 259.455680][ T6798] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 259.658020][ T6341] usb 8-1: USB disconnect, device number 2
[ 260.537367][ T6798] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 260.544773][ T6798] ath9k_htc: Failed to initialize the device
[ 260.551823][ T6341] usb 8-1: ath9k_htc: USB layer deinitialized
[ 260.847386][ T6341] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 260.997379][ T6341] usb 8-1: Using ep0 maxpacket: 8
[ 261.004116][ T6341] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 261.015728][ T6341] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 261.026340][ T6341] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 261.037015][ T6341] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 261.050565][ T6341] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 261.060251][ T6341] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 261.272385][ T6341] usb 8-1: GET_CAPABILITIES returned 0
[ 261.278491][ T6341] usbtmc 8-1:16.0: can't read capabilities
2026/02/23 13:15:12 executed programs: 7
[ 290.117352][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 290.270928][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 290.280414][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 290.288737][ T10] usb 9-1: Product: syz
[ 290.293314][ T10] usb 9-1: Manufacturer: syz
[ 290.298251][ T10] usb 9-1: SerialNumber: syz
[ 290.311361][ T10] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 290.327847][ T7259] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 290.529546][ T5883] usb 9-1: USB disconnect, device number 2
[ 291.417327][ T7259] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 291.424438][ T7259] ath9k_htc: Failed to initialize the device
[ 291.431314][ T5883] usb 9-1: ath9k_htc: USB layer deinitialized
[ 291.727368][ T5883] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 291.877318][ T5883] usb 9-1: Using ep0 maxpacket: 8
[ 291.884396][ T5883] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 291.896433][ T5883] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 291.906775][ T5883] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 291.916849][ T5883] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 291.930516][ T5883] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 291.939916][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 292.154428][ T5883] usb 9-1: GET_CAPABILITIES returned 0
[ 292.160361][ T5883] usbtmc 9-1:16.0: can't read capabilities
[ 295.737461][ T30] INFO: task syz.3.17:4968 blocked for more than 143 seconds.
[ 295.745497][ T30] Not tainted syzkaller #0
[ 295.750935][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 295.760227][ T30] task:syz.3.17 state:D stack:27160 pid:4968 tgid:4967 ppid:4517 task_flags:0x400040 flags:0x00080002
[ 295.773097][ T30] Call Trace:
[ 295.776682][ T30]
[ 295.780099][ T30] __schedule+0xeb1/0x41f0
[ 295.784797][ T30] ? __pfx___schedule+0x10/0x10
[ 295.790014][ T30] ? find_held_lock+0x2b/0x80
[ 295.794874][ T30] ? schedule+0x2bf/0x390
[ 295.799628][ T30] schedule+0xdd/0x390
[ 295.804370][ T30] schedule_timeout+0x127/0x280
[ 295.809402][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 295.815106][ T30] ? __pfx_process_timeout+0x10/0x10
[ 295.820808][ T30] ? mark_held_locks+0x40/0x70
[ 295.825987][ T30] __wait_for_common+0x2e7/0x4c0
[ 295.831630][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 295.837400][ T30] ? __pfx___wait_for_common+0x10/0x10
[ 295.842917][ T30] usb_start_wait_urb+0x147/0x4c0
[ 295.848661][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 295.854727][ T30] ? __asan_memset+0x23/0x50
[ 295.860257][ T30] usb_bulk_msg+0x22b/0x580
[ 295.864939][ T30] usbtmc_read+0x5f4/0x10b0
[ 295.869589][ T30] ? futex_hash_put+0x43/0x50
[ 295.875323][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 295.880961][ T30] ? security_file_permission+0x21/0x80
[ 295.887123][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 295.892595][ T30] vfs_read+0x1e4/0xb30
[ 295.897003][ T30] ? __pfx_vfs_read+0x10/0x10
[ 295.902101][ T30] ? find_held_lock+0x2b/0x80
[ 295.907337][ T30] ? __fget_files+0x215/0x3d0
[ 295.912076][ T30] ? __fget_files+0x215/0x3d0
[ 295.917330][ T30] ? __fget_files+0x21f/0x3d0
[ 295.922360][ T30] ksys_read+0x12a/0x250
[ 295.927296][ T30] ? __pfx_ksys_read+0x10/0x10
[ 295.933200][ T30] do_syscall_64+0x106/0x7b0
[ 295.938315][ T30] ? irqentry_exit+0x117/0x620
[ 295.943427][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 295.949720][ T30] RIP: 0033:0x7f36dcd5aeb9
[ 295.954271][ T30] RSP: 002b:00007f36dcbb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 295.962906][ T30] RAX: ffffffffffffffda RBX: 00007f36dcfd5fa0 RCX: 00007f36dcd5aeb9
[ 295.971445][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 295.979675][ T30] RBP: 00007f36dcdc8c1f R08: 0000000000000000 R09: 0000000000000000
[ 295.987851][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 295.996325][ T30] R13: 00007f36dcfd6038 R14: 00007f36dcfd5fa0 R15: 00007ffed4ea1f68
[ 296.005160][ T30]
[ 296.008304][ T30]
[ 296.008304][ T30] Showing all locks held in the system:
[ 296.016608][ T30] 6 locks held by kworker/1:0/23:
[ 296.022555][ T30] #0: ffff888106291148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 296.034753][ T30] #1: ffffc9000018fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 296.047056][ T30] #2: ffff88810c385198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 296.058472][ T30] #3: ffff8881243a5198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 296.068507][ T30] #4: ffff88811716e160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 296.078271][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 296.088120][ T30] 6 locks held by kworker/1:1/28:
[ 296.093640][ T30] #0: ffff888106291148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 296.105298][ T30] #1: ffffc900001e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 296.116990][ T30] #2: ffff88810c3d5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 296.126206][ T30] #3: ffff88810c6dc198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 296.135867][ T30] #4: ffff888116ce9160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 296.145553][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 296.155426][ T30] 1 lock held by khungtaskd/30:
[ 296.160734][ T30] #0: ffffffff896e05a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 296.171297][ T30] 3 locks held by kworker/0:2/921:
[ 296.176719][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 296.188711][ T30] #1: ffffc90001ebfd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 296.201013][ T30] #2: ffff88810c385198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 296.211975][ T30] 2 locks held by getty/2915:
[ 296.217333][ T30] #0: ffff8881159520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 296.227648][ T30] #1: ffffc900000432f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 296.238534][ T30] 1 lock held by syz.3.17/4968:
[ 296.243612][ T30] #0: ffff888118e6c8d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x154/0x10b0
[ 296.254547][ T30] 3 locks held by kworker/0:3/4970:
[ 296.260103][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 296.271507][ T30] #1: ffffc900063dfd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 296.283802][ T30] #2: ffff88810c3d5198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 296.294344][ T30] 2 locks held by syz.4.18/5423:
[ 296.299489][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 296.308628][ T30] #1: ffff888118e6c8d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950
[ 296.318500][ T30] 1 lock held by syz.5.19/5880:
[ 296.323572][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 296.332664][ T30] 6 locks held by kworker/1:3/5883:
[ 296.338281][ T30] #0: ffff888106291148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 296.349478][ T30] #1: ffffc9000489fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 296.362039][ T30] #2: ffff88810fef5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 296.371856][ T30] #3: ffff888139b8a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 296.382302][ T30] #4: ffff88811f0f0160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 296.392237][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 296.402594][ T30] 1 lock held by syz.6.20/6338:
[ 296.407936][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 296.417739][ T30] 6 locks held by kworker/0:4/6341:
[ 296.423279][ T30] #0: ffff888106291148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 296.434672][ T30] #1: ffffc90001b2fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 296.446286][ T30] #2: ffff888106bad198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 296.455813][ T30] #3: ffff888119f1c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 296.465518][ T30] #4: ffff888119f1a160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 296.474979][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 296.485380][ T30] 1 lock held by syz.7.21/6795:
[ 296.490574][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 296.502088][ T30] 3 locks held by kworker/1:4/6798:
[ 296.508115][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 296.519932][ T30] #1: ffffc9000407fd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 296.532297][ T30] #2: ffff888106bad198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 296.542938][ T30] 1 lock held by syz.8.22/7254:
[ 296.548692][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 296.558407][ T30] 3 locks held by kworker/0:5/7259:
[ 296.564000][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 296.575547][ T30] #1: ffffc90005c7fd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 296.587688][ T30] #2: ffff88810fef5198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 296.598914][ T30]
[ 296.601563][ T30] =============================================
[ 296.601563][ T30]
[ 296.610700][ T30] NMI backtrace for cpu 0
[ 296.610724][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 296.610758][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 296.610774][ T30] Call Trace:
[ 296.610783][ T30]
[ 296.610793][ T30] dump_stack_lvl+0x100/0x190
[ 296.610851][ T30] nmi_cpu_backtrace.cold+0x12d/0x151
[ 296.610890][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 296.610935][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 296.610970][ T30] sys_info+0x141/0x190
[ 296.610995][ T30] watchdog+0xd25/0x1050
[ 296.611036][ T30] ? __pfx_watchdog+0x10/0x10
[ 296.611069][ T30] ? __kthread_parkme+0x18c/0x230
[ 296.611117][ T30] ? kthread+0x13a/0x450
[ 296.611145][ T30] ? __pfx_watchdog+0x10/0x10
[ 296.611175][ T30] kthread+0x370/0x450
[ 296.611218][ T30] ? __pfx_kthread+0x10/0x10
[ 296.611247][ T30] ret_from_fork+0x6c3/0xcb0
[ 296.611282][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 296.611320][ T30] ? __switch_to+0x7aa/0x1120
[ 296.611352][ T30] ? __pfx_kthread+0x10/0x10
[ 296.611382][ T30] ret_from_fork_asm+0x1a/0x30
[ 296.611441][ T30]
[ 296.611481][ T30] Sending NMI from CPU 0 to CPUs 1:
[ 296.738831][ C1] NMI backtrace for cpu 1
[ 296.738851][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
[ 296.738876][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 296.738888][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 296.738923][ C1] Code: ae b1 01 e9 13 e8 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 e1 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 296.738943][ C1] RSP: 0018:ffffc9000013fe00 EFLAGS: 00000246
[ 296.738962][ C1] RAX: 00000000000f0109 RBX: ffff8881022a1d00 RCX: ffffffff876898d5
[ 296.738977][ C1] RDX: 0000000000000000 RSI: ffffffff8901db96 RDI: ffffffff87afa420
[ 296.738991][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed103eae6725
[ 296.739003][ C1] R10: ffff8881f573392b R11: 0000000000000000 R12: ffffed10204543a0
[ 296.739016][ C1] R13: 0000000000000001 R14: ffffffff8aefe2d0 R15: 0000000000000000
[ 296.739029][ C1] FS: 0000000000000000(0000) GS:ffff8882687d3000(0000) knlGS:0000000000000000
[ 296.739051][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 296.739067][ C1] CR2: 00007f2e24a51e80 CR3: 000000011d55c000 CR4: 00000000003506f0
[ 296.739083][ C1] Call Trace:
[ 296.739092][ C1]
[ 296.739100][ C1] default_idle+0x9/0x10
[ 296.739129][ C1] default_idle_call+0x6c/0xb0
[ 296.739158][ C1] do_idle+0x35b/0x4b0
[ 296.739192][ C1] ? __pfx_do_idle+0x10/0x10
[ 296.739229][ C1] cpu_startup_entry+0x4f/0x60
[ 296.739271][ C1] start_secondary+0x21d/0x2d0
[ 296.739301][ C1] ? __pfx_start_secondary+0x10/0x10
[ 296.739334][ C1] common_startup_64+0x13e/0x148
[ 296.739375][ C1]
[ 296.739805][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 296.739825][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 296.739854][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 296.739869][ T30] Call Trace:
[ 296.739878][ T30]
[ 296.739888][ T30] dump_stack_lvl+0x100/0x190
[ 296.739928][ T30] vpanic+0x552/0x970
[ 296.739958][ T30] ? __pfx_vpanic+0x10/0x10
[ 296.739998][ T30] ? rcu_is_watching+0x12/0xc0
[ 296.740033][ T30] panic+0xd1/0xe0
[ 296.740061][ T30] ? __pfx_panic+0x10/0x10
[ 296.740095][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 296.740124][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 296.740154][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 296.740181][ T30] ? watchdog.cold+0x198/0x1ca
[ 296.740220][ T30] ? watchdog+0xd35/0x1050
[ 296.740251][ T30] watchdog.cold+0x1a9/0x1ca
[ 296.740293][ T30] ? __pfx_watchdog+0x10/0x10
[ 296.740323][ T30] ? __kthread_parkme+0x18c/0x230
[ 296.740365][ T30] ? kthread+0x13a/0x450
[ 296.740390][ T30] ? __pfx_watchdog+0x10/0x10
[ 296.740416][ T30] kthread+0x370/0x450
[ 296.740442][ T30] ? __pfx_kthread+0x10/0x10
[ 296.740471][ T30] ret_from_fork+0x6c3/0xcb0
[ 296.740508][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 296.740546][ T30] ? __switch_to+0x7aa/0x1120
[ 296.740571][ T30] ? __pfx_kthread+0x10/0x10
[ 296.740600][ T30] ret_from_fork_asm+0x1a/0x30
[ 296.740654][ T30]
[ 297.070328][ T30] Kernel Offset: disabled
[ 297.074831][ T30] Rebooting in 86400 seconds..