Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts.
2026/02/23 13:19:42 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 90.491200][ T29] audit: type=1400 audit(1771852784.132:103): avc: denied { unlink } for pid=3981 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 90.565793][ T3981] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 103.130604][ T29] audit: type=1401 audit(1771852796.772:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2026/02/23 13:19:57 executed programs: 0
2026/02/23 13:20:07 executed programs: 2
[ 113.937370][ T29] audit: type=1400 audit(1771852807.572:105): avc: denied { read write } for pid=4965 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 113.969106][ T29] audit: type=1400 audit(1771852807.572:106): avc: denied { open } for pid=4965 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 113.993109][ T29] audit: type=1400 audit(1771852807.582:107): avc: denied { ioctl } for pid=4965 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 114.208141][ T918] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 114.361820][ T918] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 114.371108][ T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 114.379251][ T918] usb 4-1: Product: syz
[ 114.383437][ T918] usb 4-1: Manufacturer: syz
[ 114.388234][ T918] usb 4-1: SerialNumber: syz
[ 114.401328][ T918] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 114.468821][ T29] audit: type=1400 audit(1771852808.102:108): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 114.501849][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 114.704129][ T28] usb 4-1: USB disconnect, device number 2
[ 115.567861][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 115.575031][ T10] ath9k_htc: Failed to initialize the device
[ 115.581925][ T28] usb 4-1: ath9k_htc: USB layer deinitialized
[ 115.877870][ T28] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 116.027834][ T28] usb 4-1: Using ep0 maxpacket: 8
[ 116.034577][ T28] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 116.045757][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 116.055902][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 116.065981][ T28] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 116.078998][ T28] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 116.088209][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 116.300063][ T28] usb 4-1: GET_CAPABILITIES returned 0
[ 116.305570][ T28] usbtmc 4-1:16.0: can't read capabilities
[ 116.500976][ T29] audit: type=1400 audit(1771852810.142:109): avc: denied { write } for pid=4965 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
2026/02/23 13:20:35 executed programs: 3
[ 141.787835][ T28] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 141.941543][ T28] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 141.950721][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 141.958787][ T28] usb 5-1: Product: syz
[ 141.963100][ T28] usb 5-1: Manufacturer: syz
[ 141.967764][ T28] usb 5-1: SerialNumber: syz
[ 141.978484][ T28] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 141.999456][ T2919] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 142.239674][ T28] usb 5-1: USB disconnect, device number 2
[ 143.088350][ T2919] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 143.095786][ T2919] ath9k_htc: Failed to initialize the device
[ 143.103367][ T28] usb 5-1: ath9k_htc: USB layer deinitialized
[ 143.407826][ T28] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 143.557811][ T28] usb 5-1: Using ep0 maxpacket: 8
[ 143.564504][ T28] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 143.575718][ T28] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 143.585780][ T28] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 143.595785][ T28] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 143.609332][ T28] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 143.618561][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 143.830264][ T28] usb 5-1: GET_CAPABILITIES returned 0
[ 143.835918][ T28] usbtmc 5-1:16.0: can't read capabilities
2026/02/23 13:21:02 executed programs: 4
[ 169.177748][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 169.331325][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 169.340581][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 169.348627][ T10] usb 6-1: Product: syz
[ 169.352826][ T10] usb 6-1: Manufacturer: syz
[ 169.357439][ T10] usb 6-1: SerialNumber: syz
[ 169.367896][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 169.382816][ T918] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 169.584334][ T28] usb 6-1: USB disconnect, device number 2
[ 170.447765][ T918] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 170.454966][ T918] ath9k_htc: Failed to initialize the device
[ 170.461695][ T28] usb 6-1: ath9k_htc: USB layer deinitialized
[ 170.757823][ T28] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 170.907790][ T28] usb 6-1: Using ep0 maxpacket: 8
[ 170.914432][ T28] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 170.925678][ T28] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 170.935841][ T28] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 170.945966][ T28] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 170.959090][ T28] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 170.968282][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 171.180552][ T28] usb 6-1: GET_CAPABILITIES returned 0
[ 171.186112][ T28] usbtmc 6-1:16.0: can't read capabilities
2026/02/23 13:21:30 executed programs: 5
[ 196.857833][ T2919] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 197.011276][ T2919] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 197.020504][ T2919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 197.028574][ T2919] usb 7-1: Product: syz
[ 197.032763][ T2919] usb 7-1: Manufacturer: syz
[ 197.037371][ T2919] usb 7-1: SerialNumber: syz
[ 197.047434][ T2919] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 197.065046][ T5425] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 197.267854][ T10] usb 7-1: USB disconnect, device number 2
[ 198.127762][ T5425] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 198.134864][ T5425] ath9k_htc: Failed to initialize the device
[ 198.141590][ T10] usb 7-1: ath9k_htc: USB layer deinitialized
[ 198.437794][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 198.587782][ T10] usb 7-1: Using ep0 maxpacket: 8
[ 198.594670][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 198.605839][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 198.617160][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 198.627471][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 198.641123][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 198.650327][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 198.861836][ T10] usb 7-1: GET_CAPABILITIES returned 0
[ 198.867426][ T10] usbtmc 7-1:16.0: can't read capabilities
2026/02/23 13:21:57 executed programs: 6
[ 223.927771][ T6339] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 224.081145][ T6339] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 224.090318][ T6339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 224.098383][ T6339] usb 8-1: Product: syz
[ 224.102568][ T6339] usb 8-1: Manufacturer: syz
[ 224.107326][ T6339] usb 8-1: SerialNumber: syz
[ 224.117596][ T6339] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 224.132597][ T6798] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 224.335591][ T2919] usb 8-1: USB disconnect, device number 2
[ 225.167751][ T6798] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 225.174841][ T6798] ath9k_htc: Failed to initialize the device
[ 225.181542][ T2919] usb 8-1: ath9k_htc: USB layer deinitialized
[ 225.477832][ T2919] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 225.627760][ T2919] usb 8-1: Using ep0 maxpacket: 8
[ 225.634336][ T2919] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 225.645519][ T2919] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 225.655823][ T2919] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 225.665808][ T2919] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 225.678861][ T2919] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 225.688162][ T2919] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 225.902137][ T2919] usb 8-1: GET_CAPABILITIES returned 0
[ 225.907746][ T2919] usbtmc 8-1:16.0: can't read capabilities
2026/02/23 13:22:24 executed programs: 7
[ 251.147748][ T6799] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 251.301564][ T6799] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 251.310723][ T6799] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 251.318794][ T6799] usb 9-1: Product: syz
[ 251.323119][ T6799] usb 9-1: Manufacturer: syz
[ 251.327762][ T6799] usb 9-1: SerialNumber: syz
[ 251.336946][ T6799] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 251.353672][ T7256] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 251.555195][ T6339] usb 9-1: USB disconnect, device number 2
[ 252.447799][ T7256] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 252.454883][ T7256] ath9k_htc: Failed to initialize the device
[ 252.461737][ T6339] usb 9-1: ath9k_htc: USB layer deinitialized
[ 252.757748][ T6339] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 252.907742][ T6339] usb 9-1: Using ep0 maxpacket: 8
[ 252.914349][ T6339] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 252.925465][ T6339] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 252.935595][ T6339] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 252.945554][ T6339] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 252.958650][ T6339] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 252.967850][ T6339] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 253.179249][ T6339] usb 9-1: GET_CAPABILITIES returned 0
[ 253.184788][ T6339] usbtmc 9-1:16.0: can't read capabilities
[ 266.607761][ T30] INFO: task syz.3.17:4966 blocked for more than 143 seconds.
[ 266.615455][ T30] Not tainted syzkaller #0
[ 266.620896][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 266.629977][ T30] task:syz.3.17 state:D stack:27512 pid:4966 tgid:4965 ppid:4515 task_flags:0x400040 flags:0x00080002
[ 266.642628][ T30] Call Trace:
[ 266.646001][ T30]
[ 266.649480][ T30] __schedule+0xeb1/0x41f0
[ 266.653958][ T30] ? __pfx___schedule+0x10/0x10
[ 266.659382][ T30] ? find_held_lock+0x2b/0x80
[ 266.664104][ T30] ? schedule+0x2bf/0x390
[ 266.669037][ T30] schedule+0xdd/0x390
[ 266.673162][ T30] schedule_timeout+0x127/0x280
[ 266.678555][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 266.684071][ T30] ? __pfx_process_timeout+0x10/0x10
[ 266.689825][ T30] ? mark_held_locks+0x40/0x70
[ 266.694637][ T30] __wait_for_common+0x2e7/0x4c0
[ 266.699965][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 266.705406][ T30] ? __pfx___wait_for_common+0x10/0x10
[ 266.711342][ T30] usb_start_wait_urb+0x147/0x4c0
[ 266.716409][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 266.722494][ T30] ? __asan_memset+0x23/0x50
[ 266.727148][ T30] usb_bulk_msg+0x22b/0x580
[ 266.732198][ T30] usbtmc_read+0x5f4/0x10b0
[ 266.737017][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 266.742399][ T30] ? security_file_permission+0x21/0x80
[ 266.748334][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 266.753502][ T30] vfs_read+0x1e4/0xb30
[ 266.758177][ T30] ? __pfx_vfs_read+0x10/0x10
[ 266.762922][ T30] ? find_held_lock+0x2b/0x80
[ 266.768048][ T30] ? __fget_files+0x215/0x3d0
[ 266.772754][ T30] ? __fget_files+0x215/0x3d0
[ 266.777470][ T30] ? __fget_files+0x21f/0x3d0
[ 266.782795][ T30] ksys_read+0x12a/0x250
[ 266.787074][ T30] ? __pfx_ksys_read+0x10/0x10
[ 266.792322][ T30] do_syscall_64+0x106/0x7b0
[ 266.797039][ T30] ? irqentry_exit+0x117/0x620
[ 266.802488][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 266.808863][ T30] RIP: 0033:0x7f304703aeb9
[ 266.813328][ T30] RSP: 002b:00007f3046e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 266.822351][ T30] RAX: ffffffffffffffda RBX: 00007f30472b5fa0 RCX: 00007f304703aeb9
[ 266.830797][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 266.839130][ T30] RBP: 00007f30470a8c1f R08: 0000000000000000 R09: 0000000000000000
[ 266.847214][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 266.855757][ T30] R13: 00007f30472b6038 R14: 00007f30472b5fa0 R15: 00007ffcef9fa6f8
[ 266.864077][ T30]
[ 266.867207][ T30]
[ 266.867207][ T30] Showing all locks held in the system:
[ 266.875504][ T30] 6 locks held by kworker/0:1/10:
[ 266.880945][ T30] #0: ffff888103ea4148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 266.892061][ T30] #1: ffffc900000afd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 266.906461][ T30] #2: ffff88810cb01198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 266.917778][ T30] #3: ffff8881174b1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 266.927108][ T30] #4: ffff88812645a160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 266.936648][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 266.946329][ T30] 6 locks held by kworker/1:1/28:
[ 266.951482][ T30] #0: ffff888103ea4148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 266.962590][ T30] #1: ffffc900001e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 266.973999][ T30] #2: ffff88810c7b9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 266.983118][ T30] #3: ffff88810369b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 266.992993][ T30] #4: ffff888120664160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.002676][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 267.012592][ T30] 1 lock held by khungtaskd/30:
[ 267.017497][ T30] #0: ffffffff896e05a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 267.027675][ T30] 2 locks held by kworker/u8:4/63:
[ 267.032836][ T30] #0: ffff8881000ac948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.044897][ T30] #1: ffffc90000567d18 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.056859][ T30] 3 locks held by kworker/0:2/918:
[ 267.062551][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.073440][ T30] #1: ffffc90002a2fd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.085322][ T30] #2: ffff88810c7b9198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 267.096062][ T30] 2 locks held by getty/2916:
[ 267.101062][ T30] #0: ffff88811619b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 267.111274][ T30] #1: ffffc900000432f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 267.121848][ T30] 6 locks held by kworker/1:2/2919:
[ 267.127101][ T30] #0: ffff888103ea4148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.138602][ T30] #1: ffffc9000172fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.150238][ T30] #2: ffff88810cb39198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 267.159754][ T30] #3: ffff88811c342198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.169744][ T30] #4: ffff888136ae9160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.179480][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 267.189291][ T30] 1 lock held by syz.3.17/4966:
[ 267.194205][ T30] #0: ffff88811794f0d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x154/0x10b0
[ 267.204333][ T30] 2 locks held by syz.4.18/5421:
[ 267.209684][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 267.218756][ T30] #1: ffff88811794f0d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950
[ 267.228476][ T30] 3 locks held by kworker/1:3/5425:
[ 267.233755][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.244984][ T30] #1: ffffc90003847d18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.257165][ T30] #2: ffff88810cb01198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 267.268069][ T30] 1 lock held by syz.5.19/5879:
[ 267.272976][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 267.282315][ T30] 1 lock held by syz.6.20/6337:
[ 267.287222][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 267.296379][ T30] 6 locks held by kworker/0:3/6339:
[ 267.302320][ T30] #0: ffff888103ea4148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.313720][ T30] #1: ffffc90005cd7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.325420][ T30] #2: ffff88810cbc9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 267.334774][ T30] #3: ffff888134c3c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.344907][ T30] #4: ffff888134c3a160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 267.354602][ T30] #5: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 267.364625][ T30] 1 lock held by syz.7.21/6794:
[ 267.369807][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 267.378864][ T30] 3 locks held by kworker/0:4/6798:
[ 267.384118][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.395414][ T30] #1: ffffc90006fffd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.407859][ T30] #2: ffff88810cb39198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 267.418519][ T30] 1 lock held by syz.8.22/7253:
[ 267.423508][ T30] #0: ffffffff8a300110 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 267.432752][ T30] 3 locks held by kworker/1:5/7256:
[ 267.438293][ T30] #0: ffff88810006b548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 267.449373][ T30] #1: ffffc900082afd18 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 267.461177][ T30] #2: ffff88810cbc9198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 267.472070][ T30] 1 lock held by modprobe/7313:
[ 267.477015][ T30]
[ 267.480009][ T30] =============================================
[ 267.480009][ T30]
[ 267.489334][ T30] NMI backtrace for cpu 0
[ 267.489365][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 267.489393][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 267.489408][ T30] Call Trace:
[ 267.489419][ T30]
[ 267.489428][ T30] dump_stack_lvl+0x100/0x190
[ 267.489465][ T30] nmi_cpu_backtrace.cold+0x12d/0x151
[ 267.489501][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 267.489541][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 267.489574][ T30] sys_info+0x141/0x190
[ 267.489597][ T30] watchdog+0xd25/0x1050
[ 267.489635][ T30] ? __pfx_watchdog+0x10/0x10
[ 267.489663][ T30] ? __kthread_parkme+0x18c/0x230
[ 267.489705][ T30] ? kthread+0x13a/0x450
[ 267.489729][ T30] ? __pfx_watchdog+0x10/0x10
[ 267.489754][ T30] kthread+0x370/0x450
[ 267.489780][ T30] ? __pfx_kthread+0x10/0x10
[ 267.489808][ T30] ret_from_fork+0x6c3/0xcb0
[ 267.489844][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 267.489880][ T30] ? __switch_to+0x7aa/0x1120
[ 267.489906][ T30] ? __pfx_kthread+0x10/0x10
[ 267.489934][ T30] ret_from_fork_asm+0x1a/0x30
[ 267.489986][ T30]
[ 267.490014][ T30] Sending NMI from CPU 0 to CPUs 1:
[ 267.610550][ C1] NMI backtrace for cpu 1
[ 267.610567][ C1] CPU: 1 UID: 0 PID: 7315 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full)
[ 267.610594][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 267.610607][ C1] RIP: 0010:write_comp_data+0x40/0x90
[ 267.610634][ C1] Code: 43 0b a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 80 b7 b9 05 8b 87 4c 15 00 00 85 c0 74 f1 8b 87 28 15 00 00 <83> f8 03 75 e6 48 8b 87 30 15 00 00 8b bf 2c 15 00 00 48 8b 30 48
[ 267.610657][ C1] RSP: 0018:ffffc900083e7398 EFLAGS: 00000246
[ 267.610675][ C1] RAX: 0000000000000000 RBX: ffffc900083e7488 RCX: ffffffff8208e919
[ 267.610690][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888134c4ba00
[ 267.610704][ C1] RBP: ffff888130673000 R08: 0000000000000005 R09: 0000000000000000
[ 267.610718][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900083e7778
[ 267.610732][ C1] R13: ffff88810bede000 R14: 0000000000000001 R15: 0000000000000051
[ 267.610746][ C1] FS: 0000000000000000(0000) GS:ffff8882687d3000(0000) knlGS:0000000000000000
[ 267.610768][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 267.610783][ C1] CR2: 00007f9744796eb8 CR3: 0000000119f1a000 CR4: 00000000003506f0
[ 267.610798][ C1] Call Trace:
[ 267.610805][ C1]
[ 267.610812][ C1] vma_complete+0xc09/0xf70
[ 267.610851][ C1] __split_vma+0x92f/0xd60
[ 267.610892][ C1] ? __pfx___split_vma+0x10/0x10
[ 267.610926][ C1] ? trace_kmem_cache_alloc+0xf3/0x120
[ 267.610959][ C1] ? __lock_acquire+0x4a5/0x2630
[ 267.610997][ C1] vms_gather_munmap_vmas+0x1c6/0x1480
[ 267.611037][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 267.611077][ C1] ? mas_walk+0x6ef/0x9b0
[ 267.611110][ C1] __mmap_region+0x491/0x26e0
[ 267.611146][ C1] ? mas_ascend+0x53d/0xb30
[ 267.611175][ C1] ? __pfx___mmap_region+0x10/0x10
[ 267.611216][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 267.611242][ C1] ? mas_next_node+0x7f8/0xf30
[ 267.611279][ C1] ? __pfx_mt_validate_nulls+0x10/0x10
[ 267.611317][ C1] ? __lock_acquire+0x4a5/0x2630
[ 267.611367][ C1] ? find_held_lock+0x2b/0x80
[ 267.611393][ C1] ? avc_has_perm_noaudit+0x11e/0x3b0
[ 267.611447][ C1] ? __lock_acquire+0x4a5/0x2630
[ 267.611486][ C1] mmap_region+0x180/0x3e0
[ 267.611511][ C1] do_mmap+0xc53/0x12d0
[ 267.611542][ C1] ? __pfx_do_mmap+0x10/0x10
[ 267.611571][ C1] ? __pfx_down_write_killable+0x10/0x10
[ 267.611607][ C1] vm_mmap_pgoff+0x201/0x390
[ 267.611645][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 267.611680][ C1] ? __fget_files+0x21f/0x3d0
[ 267.611707][ C1] ksys_mmap_pgoff+0x3c8/0x650
[ 267.611738][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10
[ 267.611770][ C1] ? __pfx_ksys_read+0x10/0x10
[ 267.611792][ C1] __x64_sys_mmap+0x125/0x190
[ 267.611824][ C1] do_syscall_64+0x106/0x7b0
[ 267.611855][ C1] ? irqentry_exit+0x117/0x620
[ 267.611885][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 267.611909][ C1] RIP: 0033:0x7f9744a81242
[ 267.611925][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00
[ 267.611946][ C1] RSP: 002b:00007ffc3d58a408 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 267.611966][ C1] RAX: ffffffffffffffda RBX: 00007f9744762000 RCX: 00007f9744a81242
[ 267.611981][ C1] RDX: 0000000000000005 RSI: 000000000001c000 RDI: 00007f9744762000
[ 267.611995][ C1] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000008000
[ 267.612009][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffc3d58a458
[ 267.612023][ C1] R13: 00007f9744a56ab0 R14: 00007ffc3d58a880 R15: 00000fff87ab1484
[ 267.612046][ C1]
[ 267.984454][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 267.991350][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 268.000485][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 268.010557][ T30] Call Trace:
[ 268.013851][ T30]
[ 268.016837][ T30] dump_stack_lvl+0x100/0x190
[ 268.021645][ T30] vpanic+0x552/0x970
[ 268.025676][ T30] ? __pfx_vpanic+0x10/0x10
[ 268.030220][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 268.036498][ T30] panic+0xd1/0xe0
[ 268.040344][ T30] ? __pfx_panic+0x10/0x10
[ 268.044794][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 268.050979][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 268.057171][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 268.063449][ T30] ? watchdog.cold+0x198/0x1ca
[ 268.068252][ T30] ? watchdog+0xd35/0x1050
[ 268.072699][ T30] watchdog.cold+0x1a9/0x1ca
[ 268.077332][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.082053][ T30] ? __kthread_parkme+0x18c/0x230
[ 268.087133][ T30] ? kthread+0x13a/0x450
[ 268.091404][ T30] ? __pfx_watchdog+0x10/0x10
[ 268.096108][ T30] kthread+0x370/0x450
[ 268.100305][ T30] ? __pfx_kthread+0x10/0x10
[ 268.104930][ T30] ret_from_fork+0x6c3/0xcb0
[ 268.109559][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 268.114790][ T30] ? __switch_to+0x7aa/0x1120
[ 268.119497][ T30] ? __pfx_kthread+0x10/0x10
[ 268.124124][ T30] ret_from_fork_asm+0x1a/0x30
[ 268.128936][ T30]
[ 268.132440][ T30] Kernel Offset: disabled
[ 268.136856][ T30] Rebooting in 86400 seconds..