Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. 2026/03/09 16:22:00 parsed 1 programs [ 93.070449][ T28] audit: type=1400 audit(1773073322.172:103): avc: denied { unlink } for pid=3980 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 93.187788][ T3980] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.857279][ T28] audit: type=1401 audit(1773073324.962:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/03/09 16:22:15 executed programs: 0 2026/03/09 16:22:25 executed programs: 2 [ 116.847148][ T28] audit: type=1400 audit(1773073345.952:105): avc: denied { read write } for pid=4960 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.872535][ T28] audit: type=1400 audit(1773073345.952:106): avc: denied { open } for pid=4960 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.899067][ T28] audit: type=1400 audit(1773073345.952:107): avc: denied { ioctl } for pid=4960 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.106102][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.260113][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 117.269949][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.278087][ T9] usb 4-1: Product: syz [ 117.282342][ T9] usb 4-1: Manufacturer: syz [ 117.287009][ T9] usb 4-1: SerialNumber: syz [ 117.300873][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 117.338374][ T28] audit: type=1400 audit(1773073346.442:108): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 117.373006][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 117.580407][ T23] usb 4-1: USB disconnect, device number 2 [ 118.465943][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 118.473356][ T10] ath9k_htc: Failed to initialize the device [ 118.480386][ T23] usb 4-1: ath9k_htc: USB layer deinitialized [ 118.775943][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.925896][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 118.932582][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 118.943695][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.953768][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.963791][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.977059][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.986163][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.197743][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 119.203315][ T23] usbtmc 4-1:16.0: can't read capabilities [ 119.398583][ T28] audit: type=1400 audit(1773073348.502:109): avc: denied { write } for pid=4960 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 2026/03/09 16:22:53 executed programs: 3 [ 144.815888][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.969550][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 144.978777][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.986844][ T10] usb 5-1: Product: syz [ 144.991041][ T10] usb 5-1: Manufacturer: syz [ 144.995723][ T10] usb 5-1: SerialNumber: syz [ 145.006658][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.028343][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.257356][ T10] usb 5-1: USB disconnect, device number 2 [ 146.065877][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 146.073400][ T9] ath9k_htc: Failed to initialize the device [ 146.080597][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 146.375981][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.525856][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 146.532473][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 146.543619][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 146.553759][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.563743][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.576761][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.585851][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.797978][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 146.803516][ T10] usbtmc 5-1:16.0: can't read capabilities 2026/03/09 16:23:21 executed programs: 4 [ 172.265884][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.419394][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 172.428518][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.436571][ T10] usb 6-1: Product: syz [ 172.440743][ T10] usb 6-1: Manufacturer: syz [ 172.445337][ T10] usb 6-1: SerialNumber: syz [ 172.455279][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 172.470886][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 172.672445][ T23] usb 6-1: USB disconnect, device number 2 [ 173.505914][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 173.513226][ T9] ath9k_htc: Failed to initialize the device [ 173.519911][ T23] usb 6-1: ath9k_htc: USB layer deinitialized [ 173.815870][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 173.965859][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 173.972695][ T23] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 173.983949][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 173.994100][ T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.004068][ T23] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.017115][ T23] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.026254][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.238321][ T23] usb 6-1: GET_CAPABILITIES returned 0 [ 174.244053][ T23] usbtmc 6-1:16.0: can't read capabilities 2026/03/09 16:23:48 executed programs: 5 [ 200.125851][ T1115] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 200.278980][ T1115] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 200.288092][ T1115] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.296129][ T1115] usb 7-1: Product: syz [ 200.300328][ T1115] usb 7-1: Manufacturer: syz [ 200.305014][ T1115] usb 7-1: SerialNumber: syz [ 200.315396][ T1115] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 200.330831][ T6137] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 200.534664][ T10] usb 7-1: USB disconnect, device number 2 [ 201.425888][ T6137] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 201.433060][ T6137] ath9k_htc: Failed to initialize the device [ 201.439804][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 201.735867][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 201.885843][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 201.892390][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 201.903759][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 201.913895][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.923910][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.937071][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.946175][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.158291][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 202.163951][ T10] usbtmc 7-1:16.0: can't read capabilities 2026/03/09 16:24:16 executed programs: 6 [ 227.865834][ T6336] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 228.018732][ T6336] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 228.027850][ T6336] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.035894][ T6336] usb 8-1: Product: syz [ 228.040094][ T6336] usb 8-1: Manufacturer: syz [ 228.045048][ T6336] usb 8-1: SerialNumber: syz [ 228.055182][ T6336] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 228.070163][ T36] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 228.271424][ T5421] usb 8-1: USB disconnect, device number 2 [ 229.105874][ T36] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 229.113038][ T36] ath9k_htc: Failed to initialize the device [ 229.119963][ T5421] usb 8-1: ath9k_htc: USB layer deinitialized [ 229.415902][ T5421] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 229.565905][ T5421] usb 8-1: Using ep0 maxpacket: 8 [ 229.572760][ T5421] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 229.583879][ T5421] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 229.593947][ T5421] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.603950][ T5421] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.616972][ T5421] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.626259][ T5421] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.838255][ T5421] usb 8-1: GET_CAPABILITIES returned 0 [ 229.843788][ T5421] usbtmc 8-1:16.0: can't read capabilities 2026/03/09 16:24:44 executed programs: 7 [ 255.535892][ T6794] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 255.689415][ T6794] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 255.698629][ T6794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.706694][ T6794] usb 9-1: Product: syz [ 255.710880][ T6794] usb 9-1: Manufacturer: syz [ 255.715657][ T6794] usb 9-1: SerialNumber: syz [ 255.726221][ T6794] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 255.741435][ T7251] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 255.987388][ T6794] usb 9-1: USB disconnect, device number 2 [ 256.785845][ T7251] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 256.792976][ T7251] ath9k_htc: Failed to initialize the device [ 256.799793][ T6794] usb 9-1: ath9k_htc: USB layer deinitialized [ 257.096474][ T6794] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 257.245857][ T6794] usb 9-1: Using ep0 maxpacket: 8 [ 257.252420][ T6794] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 257.263634][ T6794] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 257.273685][ T6794] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 257.283717][ T6794] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.296740][ T6794] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.305847][ T6794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.517621][ T6794] usb 9-1: GET_CAPABILITIES returned 0 [ 257.523165][ T6794] usbtmc 9-1:16.0: can't read capabilities [ 268.545927][ T29] INFO: task syz.3.17:4961 blocked for more than 143 seconds. [ 268.553569][ T29] Not tainted syzkaller #0 [ 268.558941][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 268.567797][ T29] task:syz.3.17 state:D stack:27112 pid:4961 tgid:4960 ppid:4511 task_flags:0x400040 flags:0x00080002 [ 268.579866][ T29] Call Trace: [ 268.583183][ T29] [ 268.586175][ T29] __schedule+0xeb1/0x41f0 [ 268.590637][ T29] ? __pfx___schedule+0x10/0x10 [ 268.595509][ T29] ? find_held_lock+0x2b/0x80 [ 268.600274][ T29] ? schedule+0x2bf/0x390 [ 268.604733][ T29] schedule+0xdd/0x390 [ 268.608894][ T29] schedule_timeout+0x127/0x280 [ 268.613894][ T29] ? __pfx_schedule_timeout+0x10/0x10 [ 268.619333][ T29] ? __pfx_process_timeout+0x10/0x10 [ 268.624662][ T29] ? mark_held_locks+0x40/0x70 [ 268.629521][ T29] __wait_for_common+0x2e7/0x4c0 [ 268.634509][ T29] ? __pfx_schedule_timeout+0x10/0x10 [ 268.640053][ T29] ? __pfx___wait_for_common+0x10/0x10 [ 268.645553][ T29] usb_start_wait_urb+0x147/0x4c0 [ 268.650677][ T29] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 268.656395][ T29] ? __asan_memset+0x23/0x50 [ 268.661033][ T29] usb_bulk_msg+0x22b/0x580 [ 268.665576][ T29] usbtmc_read+0x5f4/0x10b0 [ 268.670200][ T29] ? futex_hash_put+0x43/0x50 [ 268.674912][ T29] ? __pfx_usbtmc_read+0x10/0x10 [ 268.679928][ T29] ? security_file_permission+0x21/0x80 [ 268.685513][ T29] ? __pfx_usbtmc_read+0x10/0x10 [ 268.690534][ T29] vfs_read+0x1e4/0xb30 [ 268.694713][ T29] ? __pfx_vfs_read+0x10/0x10 [ 268.699430][ T29] ? find_held_lock+0x2b/0x80 [ 268.704142][ T29] ? __fget_files+0x215/0x3d0 [ 268.709007][ T29] ? __fget_files+0x215/0x3d0 [ 268.713724][ T29] ? __fget_files+0x21f/0x3d0 [ 268.718496][ T29] ksys_read+0x12a/0x250 [ 268.722774][ T29] ? __pfx_ksys_read+0x10/0x10 [ 268.727642][ T29] do_syscall_64+0x106/0x7b0 [ 268.732447][ T29] ? irqentry_exit+0x117/0x620 [ 268.737336][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.743271][ T29] RIP: 0033:0x7fe64031aeb9 [ 268.747760][ T29] RSP: 002b:00007fe640177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.756242][ T29] RAX: ffffffffffffffda RBX: 00007fe640595fa0 RCX: 00007fe64031aeb9 [ 268.764327][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 268.772372][ T29] RBP: 00007fe640388c1f R08: 0000000000000000 R09: 0000000000000000 [ 268.780489][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.788630][ T29] R13: 00007fe640596038 R14: 00007fe640595fa0 R15: 00007ffe86f0c968 [ 268.796707][ T29] [ 268.799776][ T29] [ 268.799776][ T29] Showing all locks held in the system: [ 268.807546][ T29] 3 locks held by kworker/0:0/9: [ 268.812509][ T29] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 268.823280][ T29] #1: ffffc9000009fd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 268.834871][ T29] #2: ffff88810b792198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 268.845142][ T29] 6 locks held by kworker/0:1/10: [ 268.850222][ T29] #0: ffff8881052afd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 268.861105][ T29] #1: ffffc900000afd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 268.872620][ T29] #2: ffff88810b7da198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 268.881596][ T29] #3: ffff88810b294198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 268.891000][ T29] #4: ffff88810c6d0160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 268.900317][ T29] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 268.909974][ T29] 6 locks held by kworker/1:0/23: [ 268.915215][ T29] #0: ffff8881052afd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 268.926197][ T29] #1: ffffc9000018fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 268.937619][ T29] #2: ffff88810b792198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 268.946834][ T29] #3: ffff888121407198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 268.956434][ T29] #4: ffff888118ca3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 268.965875][ T29] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 268.975616][ T29] 1 lock held by khungtaskd/29: [ 268.980847][ T29] #0: ffffffff896e05a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 268.990893][ T29] 3 locks held by kworker/1:1/36: [ 268.996053][ T29] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 269.006787][ T29] #1: ffffc90000267d18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 269.018363][ T29] #2: ffff88810bb62198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 269.028833][ T29] 2 locks held by getty/2913: [ 269.033602][ T29] #0: ffff888112a800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 269.043726][ T29] #1: ffffc900000432f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 269.054009][ T29] 1 lock held by syz.3.17/4961: [ 269.059025][ T29] #0: ffff888118c020d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x154/0x10b0 [ 269.068649][ T29] 2 locks held by syz.4.18/5417: [ 269.073879][ T29] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 269.082696][ T29] #1: ffff888118c020d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950 [ 269.092145][ T29] 6 locks held by kworker/0:3/5421: [ 269.097396][ T29] #0: ffff8881052afd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 269.108771][ T29] #1: ffffc900039ffd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 269.120192][ T29] #2: ffff88810bb62198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 269.129266][ T29] #3: ffff88810572e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 269.138645][ T29] #4: ffff888125360160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 269.147938][ T29] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 269.157626][ T29] 1 lock held by syz.5.19/5875: [ 269.162487][ T29] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 269.171162][ T29] 3 locks held by kworker/1:3/6137: [ 269.176578][ T29] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 269.187103][ T29] #1: ffffc900054afd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 269.198614][ T29] #2: ffff88810b7da198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 269.209221][ T29] 1 lock held by syz.6.20/6333: [ 269.214194][ T29] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 269.223218][ T29] 1 lock held by syz.7.21/6790: [ 269.228207][ T29] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 269.237063][ T29] 6 locks held by kworker/0:4/6794: [ 269.242402][ T29] #0: ffff8881052afd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 269.253294][ T29] #1: ffffc900078dfd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 269.264629][ T29] #2: ffff88810bb9a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 269.273628][ T29] #3: ffff8881213d3198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 269.282956][ T29] #4: ffff8881213d4160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 269.292299][ T29] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 269.301895][ T29] 1 lock held by syz.8.22/7249: [ 269.306791][ T29] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 269.315601][ T29] 3 locks held by kworker/0:5/7251: [ 269.320852][ T29] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 269.331386][ T29] #1: ffffc900079efd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 269.342898][ T29] #2: ffff88810bb9a198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 269.353197][ T29] [ 269.355632][ T29] ============================================= [ 269.355632][ T29] [ 269.364334][ T29] NMI backtrace for cpu 1 [ 269.364368][ T29] CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 269.364398][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.364413][ T29] Call Trace: [ 269.364425][ T29] [ 269.364432][ T29] dump_stack_lvl+0x100/0x190 [ 269.364472][ T29] nmi_cpu_backtrace.cold+0x12d/0x151 [ 269.364506][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 269.364543][ T29] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 269.364573][ T29] sys_info+0x141/0x190 [ 269.364599][ T29] watchdog+0xd25/0x1050 [ 269.364637][ T29] ? __pfx_watchdog+0x10/0x10 [ 269.364666][ T29] ? __kthread_parkme+0x18c/0x230 [ 269.364709][ T29] ? kthread+0x13a/0x450 [ 269.364733][ T29] ? __pfx_watchdog+0x10/0x10 [ 269.364759][ T29] kthread+0x370/0x450 [ 269.364787][ T29] ? __pfx_kthread+0x10/0x10 [ 269.364817][ T29] ret_from_fork+0x6c3/0xcb0 [ 269.364934][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 269.364972][ T29] ? __switch_to+0x7aa/0x1120 [ 269.364997][ T29] ? __pfx_kthread+0x10/0x10 [ 269.365024][ T29] ret_from_fork_asm+0x1a/0x30 [ 269.365076][ T29] [ 269.365114][ T29] Sending NMI from CPU 1 to CPUs 0: [ 269.486334][ C0] NMI backtrace for cpu 0 [ 269.486357][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 269.486385][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.486399][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 269.486435][ C0] Code: ae b1 01 e9 13 e8 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 e1 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 269.486457][ C0] RSP: 0018:ffffffff89407e10 EFLAGS: 00000246 [ 269.486476][ C0] RAX: 0000000000138f65 RBX: ffffffff8942ea40 RCX: ffffffff876898d5 [ 269.486493][ C0] RDX: 0000000000000000 RSI: ffffffff8901db96 RDI: ffffffff87afa420 [ 269.486508][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed103eac6725 [ 269.486522][ C0] R10: ffff8881f563392b R11: 0000000000000000 R12: fffffbfff1285d48 [ 269.486537][ C0] R13: 0000000000000000 R14: ffffffff8aefe2d0 R15: 0000000000000000 [ 269.486553][ C0] FS: 0000000000000000(0000) GS:ffff8882686d3000(0000) knlGS:0000000000000000 [ 269.486575][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.486590][ C0] CR2: 0000555fbda45df0 CR3: 0000000117576000 CR4: 00000000003506f0 [ 269.486606][ C0] Call Trace: [ 269.486615][ C0] [ 269.486622][ C0] default_idle+0x9/0x10 [ 269.486655][ C0] default_idle_call+0x6c/0xb0 [ 269.486689][ C0] do_idle+0x35b/0x4b0 [ 269.486727][ C0] ? __pfx_do_idle+0x10/0x10 [ 269.486766][ C0] cpu_startup_entry+0x4f/0x60 [ 269.486802][ C0] rest_init+0x251/0x260 [ 269.486838][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 269.486873][ C0] start_kernel+0x47a/0x480 [ 269.486912][ C0] x86_64_start_reservations+0x24/0x30 [ 269.486946][ C0] x86_64_start_kernel+0x12b/0x130 [ 269.486980][ C0] common_startup_64+0x13e/0x148 [ 269.487025][ C0] [ 269.487303][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 269.487321][ T29] CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 269.487352][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.487370][ T29] Call Trace: [ 269.487379][ T29] [ 269.487390][ T29] dump_stack_lvl+0x100/0x190 [ 269.487425][ T29] vpanic+0x552/0x970 [ 269.487455][ T29] ? __pfx_vpanic+0x10/0x10 [ 269.487486][ T29] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 269.487516][ T29] ? rcu_is_watching+0x12/0xc0 [ 269.487551][ T29] panic+0xd1/0xe0 [ 269.487581][ T29] ? __pfx_panic+0x10/0x10 [ 269.487611][ T29] ? delay_tsc+0x49/0xc0 [ 269.487638][ T29] ? wq_watchdog_touch+0xec/0x1a0 [ 269.487681][ T29] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 269.487710][ T29] ? watchdog.cold+0x198/0x1ca [ 269.487742][ T29] ? watchdog+0xd35/0x1050 [ 269.487772][ T29] watchdog.cold+0x1a9/0x1ca [ 269.487814][ T29] ? __pfx_watchdog+0x10/0x10 [ 269.487844][ T29] ? __kthread_parkme+0x18c/0x230 [ 269.487892][ T29] ? kthread+0x13a/0x450 [ 269.487917][ T29] ? __pfx_watchdog+0x10/0x10 [ 269.487944][ T29] kthread+0x370/0x450 [ 269.487970][ T29] ? __pfx_kthread+0x10/0x10 [ 269.487999][ T29] ret_from_fork+0x6c3/0xcb0 [ 269.488037][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 269.488075][ T29] ? __switch_to+0x7aa/0x1120 [ 269.488101][ T29] ? __pfx_kthread+0x10/0x10 [ 269.488130][ T29] ret_from_fork_asm+0x1a/0x30 [ 269.488184][ T29] [ 269.817407][ T29] Kernel Offset: disabled [ 269.821911][ T29] Rebooting in 86400 seconds..