Warning: Permanently added '10.128.1.238' (ED25519) to the list of known hosts.
2026/02/08 20:29:57 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 92.740424][ T29] kauditd_printk_skb: 7 callbacks suppressed
[ 92.740446][ T29] audit: type=1400 audit(1770582598.953:103): avc: denied { unlink } for pid=3993 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 92.817050][ T3993] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 105.029687][ T29] audit: type=1401 audit(1770582611.243:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2026/02/08 20:30:12 executed programs: 0
2026/02/08 20:30:22 executed programs: 2
[ 116.308473][ T29] audit: type=1400 audit(1770582622.523:105): avc: denied { read write } for pid=4976 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 116.331821][ T29] audit: type=1400 audit(1770582622.523:106): avc: denied { open } for pid=4976 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 116.355225][ T29] audit: type=1400 audit(1770582622.523:107): avc: denied { ioctl } for pid=4976 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 116.545619][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 116.699182][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 116.708377][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 116.716445][ T23] usb 4-1: Product: syz
[ 116.720622][ T23] usb 4-1: Manufacturer: syz
[ 116.725198][ T23] usb 4-1: SerialNumber: syz
[ 116.738740][ T23] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 116.788167][ T29] audit: type=1400 audit(1770582623.003:108): avc: denied { firmware_load } for pid=3481 comm="kworker/1:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 116.797324][ T3481] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 117.026188][ T2989] usb 4-1: USB disconnect, device number 2
[ 117.845758][ T3481] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 117.852994][ T3481] ath9k_htc: Failed to initialize the device
[ 117.860116][ T2989] usb 4-1: ath9k_htc: USB layer deinitialized
[ 118.155465][ T2989] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 118.305392][ T2989] usb 4-1: Using ep0 maxpacket: 8
[ 118.311807][ T2989] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 118.322918][ T2989] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 118.332963][ T2989] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 118.342932][ T2989] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 118.355927][ T2989] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 118.364936][ T2989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 118.586000][ T2989] usb 4-1: GET_CAPABILITIES returned 0
[ 118.591609][ T2989] usbtmc 4-1:16.0: can't read capabilities
[ 118.786808][ T29] audit: type=1400 audit(1770582625.003:109): avc: denied { write } for pid=4976 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 118.787585][ T4978] usbtmc 4-1:16.0: usbtmc_read(count:0)
2026/02/08 20:30:49 executed programs: 3
[ 144.005473][ T3481] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 144.159209][ T3481] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 144.168325][ T3481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 144.176372][ T3481] usb 5-1: Product: syz
[ 144.180557][ T3481] usb 5-1: Manufacturer: syz
[ 144.185213][ T3481] usb 5-1: SerialNumber: syz
[ 144.194619][ T3481] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 144.210086][ T23] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 144.413083][ T2989] usb 5-1: USB disconnect, device number 2
[ 145.285418][ T23] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 145.292466][ T23] ath9k_htc: Failed to initialize the device
[ 145.299162][ T2989] usb 5-1: ath9k_htc: USB layer deinitialized
[ 145.595445][ T2989] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 145.745372][ T2989] usb 5-1: Using ep0 maxpacket: 8
[ 145.751881][ T2989] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 145.763033][ T2989] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 145.773291][ T2989] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 145.783469][ T2989] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 145.796477][ T2989] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 145.805566][ T2989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 146.017353][ T2989] usb 5-1: GET_CAPABILITIES returned 0
[ 146.023017][ T2989] usbtmc 5-1:16.0: can't read capabilities
2026/02/08 20:31:17 executed programs: 4
[ 171.615391][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 171.769099][ T23] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 171.778240][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 171.786303][ T23] usb 6-1: Product: syz
[ 171.790476][ T23] usb 6-1: Manufacturer: syz
[ 171.795071][ T23] usb 6-1: SerialNumber: syz
[ 171.804701][ T23] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 171.820147][ T3481] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 172.021537][ T2989] usb 6-1: USB disconnect, device number 2
[ 172.885450][ T3481] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 172.892527][ T3481] ath9k_htc: Failed to initialize the device
[ 172.899212][ T2989] usb 6-1: ath9k_htc: USB layer deinitialized
[ 173.195419][ T2989] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 173.345392][ T2989] usb 6-1: Using ep0 maxpacket: 8
[ 173.351780][ T2989] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 173.363063][ T2989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 173.373242][ T2989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 173.383221][ T2989] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 173.396226][ T2989] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 173.405364][ T2989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 173.617205][ T2989] usb 6-1: GET_CAPABILITIES returned 0
[ 173.622761][ T2989] usbtmc 6-1:16.0: can't read capabilities
2026/02/08 20:31:45 executed programs: 5
[ 199.315424][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 199.468857][ T23] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 199.477988][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 199.486080][ T23] usb 7-1: Product: syz
[ 199.490251][ T23] usb 7-1: Manufacturer: syz
[ 199.494865][ T23] usb 7-1: SerialNumber: syz
[ 199.504586][ T23] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 199.519954][ T700] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 199.721427][ T9] usb 7-1: USB disconnect, device number 2
[ 200.565367][ T700] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 200.572476][ T700] ath9k_htc: Failed to initialize the device
[ 200.579344][ T9] usb 7-1: ath9k_htc: USB layer deinitialized
[ 200.875380][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 201.025338][ T9] usb 7-1: Using ep0 maxpacket: 8
[ 201.031995][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 201.043315][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 201.053422][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 201.063423][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 201.076458][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 201.085575][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 201.297317][ T9] usb 7-1: GET_CAPABILITIES returned 0
[ 201.302847][ T9] usbtmc 7-1:16.0: can't read capabilities
2026/02/08 20:32:12 executed programs: 6
[ 226.775329][ T6183] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 226.928556][ T6183] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 226.937791][ T6183] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 226.945959][ T6183] usb 8-1: Product: syz
[ 226.950148][ T6183] usb 8-1: Manufacturer: syz
[ 226.954742][ T6183] usb 8-1: SerialNumber: syz
[ 226.964756][ T6183] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 226.981371][ T6809] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 227.182665][ T23] usb 8-1: USB disconnect, device number 2
[ 228.005378][ T6809] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 228.012464][ T6809] ath9k_htc: Failed to initialize the device
[ 228.019324][ T23] usb 8-1: ath9k_htc: USB layer deinitialized
[ 228.315410][ T23] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 228.465345][ T23] usb 8-1: Using ep0 maxpacket: 8
[ 228.471836][ T23] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 228.483065][ T23] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 228.493138][ T23] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 228.503197][ T23] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 228.516494][ T23] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 228.525664][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 228.738144][ T23] usb 8-1: GET_CAPABILITIES returned 0
[ 228.743696][ T23] usbtmc 8-1:16.0: can't read capabilities
2026/02/08 20:32:40 executed programs: 7
[ 254.865388][ T6811] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 255.019070][ T6811] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 255.028205][ T6811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 255.036286][ T6811] usb 9-1: Product: syz
[ 255.040579][ T6811] usb 9-1: Manufacturer: syz
[ 255.045174][ T6811] usb 9-1: SerialNumber: syz
[ 255.057981][ T6811] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 255.073757][ T7269] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 255.279051][ T6183] usb 9-1: USB disconnect, device number 2
[ 256.165372][ T7269] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 256.172473][ T7269] ath9k_htc: Failed to initialize the device
[ 256.179223][ T6183] usb 9-1: ath9k_htc: USB layer deinitialized
[ 256.475362][ T6183] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 256.625325][ T6183] usb 9-1: Using ep0 maxpacket: 8
[ 256.631667][ T6183] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 256.642839][ T6183] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 256.652893][ T6183] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 256.662914][ T6183] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 256.675932][ T6183] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 256.684966][ T6183] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 256.896900][ T6183] usb 9-1: GET_CAPABILITIES returned 0
[ 256.902634][ T6183] usbtmc 9-1:16.0: can't read capabilities
[ 267.925441][ T30] INFO: task syz.3.17:4978 blocked for more than 143 seconds.
[ 267.933009][ T30] Not tainted syzkaller #0
[ 267.938030][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 267.946767][ T30] task:syz.3.17 state:D stack:27432 pid:4978 tgid:4976 ppid:4527 task_flags:0x400040 flags:0x00080002
[ 267.958987][ T30] Call Trace:
[ 267.962351][ T30]
[ 267.965435][ T30] __schedule+0xeb0/0x3e50
[ 267.969892][ T30] ? __pfx___schedule+0x10/0x10
[ 267.974818][ T30] ? find_held_lock+0x2b/0x80
[ 267.979598][ T30] ? schedule+0x2bf/0x390
[ 267.983968][ T30] schedule+0xdd/0x390
[ 267.988111][ T30] schedule_timeout+0x127/0x280
[ 267.992994][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 267.998438][ T30] ? __pfx_process_timeout+0x10/0x10
[ 268.003760][ T30] ? mark_held_locks+0x40/0x70
[ 268.008791][ T30] __wait_for_common+0x2e7/0x4c0
[ 268.013862][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 268.019340][ T30] ? __pfx___wait_for_common+0x10/0x10
[ 268.024855][ T30] usb_start_wait_urb+0x157/0x270
[ 268.029984][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 268.035963][ T30] ? __asan_memset+0x23/0x50
[ 268.040594][ T30] usb_bulk_msg+0x22b/0x580
[ 268.045198][ T30] usbtmc_read.cold+0x48d/0xfe7
[ 268.050134][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 268.055114][ T30] ? security_file_permission+0x21/0x80
[ 268.060766][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 268.065886][ T30] vfs_read+0x1e4/0xb30
[ 268.070095][ T30] ? __pfx_vfs_read+0x10/0x10
[ 268.074814][ T30] ? find_held_lock+0x2b/0x80
[ 268.079669][ T30] ? __fget_files+0x215/0x3d0
[ 268.084381][ T30] ? __fget_files+0x215/0x3d0
[ 268.089140][ T30] ? __fget_files+0x21f/0x3d0
[ 268.093858][ T30] ksys_read+0x12a/0x250
[ 268.098166][ T30] ? __pfx_ksys_read+0x10/0x10
[ 268.103155][ T30] do_syscall_64+0xc9/0x570
[ 268.107842][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 268.113901][ T30] RIP: 0033:0x7eff6393aeb9
[ 268.118550][ T30] RSP: 002b:00007eff63797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 268.127026][ T30] RAX: ffffffffffffffda RBX: 00007eff63bb5fa0 RCX: 00007eff6393aeb9
[ 268.135025][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 268.143098][ T30] RBP: 00007eff639a8c1f R08: 0000000000000000 R09: 0000000000000000
[ 268.151149][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 268.159180][ T30] R13: 00007eff63bb6038 R14: 00007eff63bb5fa0 R15: 00007ffcb37c7118
[ 268.167225][ T30]
[ 268.170282][ T30]
[ 268.170282][ T30] Showing all locks held in the system:
[ 268.178126][ T30] 6 locks held by kworker/0:0/9:
[ 268.183163][ T30] #0: ffff8881056f0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.194119][ T30] #1: ffffc9000009fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.205776][ T30] #2: ffff88810ab0c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 268.214719][ T30] #3: ffff888117bc9198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.224042][ T30] #4: ffff88811edf8160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.233357][ T30] #5: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 268.242871][ T30] 6 locks held by kworker/1:0/23:
[ 268.248129][ T30] #0: ffff8881056f0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.259028][ T30] #1: ffffc9000018fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.270455][ T30] #2: ffff88810ab9c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 268.279415][ T30] #3: ffff88811d544198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.288735][ T30] #4: ffff88811d545160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.298022][ T30] #5: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 268.307594][ T30] 1 lock held by khungtaskd/30:
[ 268.312440][ T30] #0: ffffffff894da3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 268.322336][ T30] 3 locks held by kworker/1:2/700:
[ 268.327495][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.338015][ T30] #1: ffffc90001a2fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.349528][ T30] #2: ffff88810ab0c198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 268.359816][ T30] 2 locks held by getty/2922:
[ 268.364536][ T30] #0: ffff8881012830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 268.374396][ T30] #1: ffffc900000452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 268.384658][ T30] 6 locks held by kworker/0:2/2989:
[ 268.389954][ T30] #0: ffff8881056f0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.400839][ T30] #1: ffffc900017dfca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.412370][ T30] #2: ffff88810a7f4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 268.421337][ T30] #3: ffff88810f39e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.430687][ T30] #4: ffff888105b6d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.440022][ T30] #5: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 268.449541][ T30] 3 locks held by kworker/1:3/3481:
[ 268.454772][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.465664][ T30] #1: ffffc9000183fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.477160][ T30] #2: ffff88810a7f4198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 268.487410][ T30] 1 lock held by syz.3.17/4978:
[ 268.492277][ T30] #0: ffff88811db8bcd8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x14a/0x270
[ 268.501701][ T30] 2 locks held by syz.4.18/5433:
[ 268.506995][ T30] #0: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.515709][ T30] #1: ffff88811db8bcd8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950
[ 268.525062][ T30] 1 lock held by syz.5.19/5891:
[ 268.529964][ T30] #0: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.538663][ T30] 6 locks held by kworker/0:3/6183:
[ 268.543854][ T30] #0: ffff8881056f0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.554722][ T30] #1: ffffc90004f6fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.566139][ T30] #2: ffff88810abb4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 268.575053][ T30] #3: ffff888117bce198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.584340][ T30] #4: ffff888117bca160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 268.593658][ T30] #5: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 268.603206][ T30] 1 lock held by syz.6.20/6348:
[ 268.608298][ T30] #0: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.617028][ T30] 1 lock held by syz.7.21/6805:
[ 268.621891][ T30] #0: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.630627][ T30] 3 locks held by kworker/0:4/6809:
[ 268.635887][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.646422][ T30] #1: ffffc90006a77ca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.657908][ T30] #2: ffff88810ab9c198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 268.668180][ T30] 1 lock held by syz.8.22/7265:
[ 268.673038][ T30] #0: ffffffff8a0d7bd0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 268.681754][ T30] 3 locks held by kworker/1:5/7269:
[ 268.687005][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 268.697570][ T30] #1: ffffc90007cffca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 268.709077][ T30] #2: ffff88810abb4198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 268.719330][ T30]
[ 268.721667][ T30] =============================================
[ 268.721667][ T30]
[ 268.730141][ T30] NMI backtrace for cpu 1
[ 268.730170][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 268.730199][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 268.730212][ T30] Call Trace:
[ 268.730219][ T30]
[ 268.730227][ T30] dump_stack_lvl+0x100/0x190
[ 268.730272][ T30] nmi_cpu_backtrace.cold+0x12d/0x151
[ 268.730299][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 268.730335][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 268.730372][ T30] sys_info+0x141/0x190
[ 268.730395][ T30] watchdog+0xcc3/0xfe0
[ 268.730436][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.730468][ T30] ? __kthread_parkme+0x18c/0x230
[ 268.730496][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.730530][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.730561][ T30] kthread+0x3b3/0x730
[ 268.730594][ T30] ? __pfx_kthread+0x10/0x10
[ 268.730623][ T30] ? ret_from_fork+0x79/0xa20
[ 268.730649][ T30] ? ret_from_fork+0x79/0xa20
[ 268.730675][ T30] ? rcu_is_watching+0x12/0xc0
[ 268.730716][ T30] ? __pfx_kthread+0x10/0x10
[ 268.730749][ T30] ret_from_fork+0x6c3/0xa20
[ 268.730776][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 268.730804][ T30] ? __switch_to+0x7af/0x10b0
[ 268.730836][ T30] ? __pfx_kthread+0x10/0x10
[ 268.730869][ T30] ret_from_fork_asm+0x1a/0x30
[ 268.730916][ T30]
[ 268.730925][ T30] Sending NMI from CPU 1 to CPUs 0:
[ 268.870422][ C0] NMI backtrace for cpu 0
[ 268.870447][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(voluntary)
[ 268.870475][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 268.870488][ C0] RIP: 0010:native_apic_msr_write+0x28/0x40
[ 268.870517][ C0] Code: 90 90 f3 0f 1e fa 8d 87 30 ff ff ff 83 e0 ef 74 20 89 f8 83 e0 ef 83 f8 20 74 16 c1 ef 04 31 d2 89 f0 8d 8f 00 08 00 00 0f 30 <66> 90 e9 11 a9 e8 05 e9 0c a9 e8 05 89 f6 31 d2 89 cf e9 a1 af 65
[ 268.870538][ C0] RSP: 0018:ffffc90000007ec8 EFLAGS: 00000046
[ 268.870556][ C0] RAX: 0000000002db1b93 RBX: ffff8881f5623d00 RCX: 0000000000000838
[ 268.870571][ C0] RDX: 0000000000000000 RSI: 0000000002db1b93 RDI: 0000000000000038
[ 268.870585][ C0] RBP: 0000000002db1b93 R08: 0000000000000005 R09: 000000000000003f
[ 268.870599][ C0] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000000
[ 268.870612][ C0] R13: 0000000000000000 R14: 0000000000000020 R15: ffff8881f56280c0
[ 268.870627][ C0] FS: 0000000000000000(0000) GS:ffff88826896a000(0000) knlGS:0000000000000000
[ 268.870648][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 268.870662][ C0] CR2: 00007fae4eb19e80 CR3: 000000011c80c000 CR4: 00000000003506f0
[ 268.870677][ C0] Call Trace:
[ 268.870686][ C0]
[ 268.870693][ C0] lapic_next_event+0x10/0x20
[ 268.870722][ C0] clockevents_program_event+0x26e/0x360
[ 268.870751][ C0] tick_program_event+0xa9/0x140
[ 268.870783][ C0] hrtimer_interrupt+0x3e9/0x8c0
[ 268.870818][ C0] __sysvec_apic_timer_interrupt+0x109/0x3c0
[ 268.870851][ C0] sysvec_apic_timer_interrupt+0x8a/0xb0
[ 268.870883][ C0]
[ 268.870890][ C0]
[ 268.870898][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 268.870931][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 268.870962][ C0] Code: 4a a3 01 e9 53 e3 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c3 12 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 268.870983][ C0] RSP: 0018:ffffffff89207e10 EFLAGS: 00000246
[ 268.870999][ C0] RAX: 0000000000e57769 RBX: ffffffff8922eac0 RCX: ffffffff87539cd5
[ 268.871014][ C0] RDX: 0000000000000000 RSI: ffffffff88dec98e RDI: ffffffff878e97a0
[ 268.871029][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed103eac66c5
[ 268.871042][ C0] R10: ffff8881f563362b R11: 0000000000000000 R12: fffffbfff1245d58
[ 268.871057][ C0] R13: 0000000000000000 R14: ffffffff8accd4d0 R15: 0000000000000000
[ 268.871076][ C0] ? ct_kernel_exit+0x125/0x180
[ 268.871110][ C0] default_idle+0x9/0x10
[ 268.871129][ C0] default_idle_call+0x6c/0xb0
[ 268.871150][ C0] do_idle+0x35b/0x4b0
[ 268.871174][ C0] ? __pfx_do_idle+0x10/0x10
[ 268.871200][ C0] cpu_startup_entry+0x4f/0x60
[ 268.871223][ C0] rest_init+0x251/0x260
[ 268.871244][ C0] ? __pfx_x86_late_time_init+0x10/0x10
[ 268.871273][ C0] start_kernel+0x475/0x480
[ 268.871299][ C0] x86_64_start_reservations+0x24/0x30
[ 268.871325][ C0] x86_64_start_kernel+0x122/0x130
[ 268.871351][ C0] common_startup_64+0x13e/0x148
[ 268.871385][ C0]
[ 269.172767][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 269.179628][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 269.189231][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 269.199316][ T30] Call Trace:
[ 269.202619][ T30]
[ 269.205545][ T30] dump_stack_lvl+0x100/0x190
[ 269.210243][ T30] vpanic+0x20d/0x630
[ 269.214251][ T30] panic+0xd1/0xd1
[ 269.217986][ T30] ? __pfx_panic+0x10/0x10
[ 269.222518][ T30] ? wq_watchdog_touch+0xec/0x1a0
[ 269.227563][ T30] ? nmi_trigger_cpumask_backtrace+0x1be/0x230
[ 269.233888][ T30] ? watchdog.cold+0x198/0x1ca
[ 269.238656][ T30] ? watchdog+0xcd3/0xfe0
[ 269.243023][ T30] watchdog.cold+0x1a9/0x1ca
[ 269.247619][ T30] ? __pfx_watchdog+0x10/0x10
[ 269.252307][ T30] ? __kthread_parkme+0x18c/0x230
[ 269.257700][ T30] ? __pfx_watchdog+0x10/0x10
[ 269.262417][ T30] ? __pfx_watchdog+0x10/0x10
[ 269.267138][ T30] kthread+0x3b3/0x730
[ 269.271222][ T30] ? __pfx_kthread+0x10/0x10
[ 269.275852][ T30] ? ret_from_fork+0x79/0xa20
[ 269.280550][ T30] ? ret_from_fork+0x79/0xa20
[ 269.285239][ T30] ? rcu_is_watching+0x12/0xc0
[ 269.290010][ T30] ? __pfx_kthread+0x10/0x10
[ 269.294627][ T30] ret_from_fork+0x6c3/0xa20
[ 269.299231][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 269.304429][ T30] ? __switch_to+0x7af/0x10b0
[ 269.309234][ T30] ? __pfx_kthread+0x10/0x10
[ 269.313858][ T30] ret_from_fork_asm+0x1a/0x30
[ 269.318681][ T30]
[ 269.322010][ T30] Kernel Offset: disabled
[ 269.326352][ T30] Rebooting in 86400 seconds..