Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts.
2026/02/08 01:13:33 parsed 1 programs
[ 155.586717][ T29] audit: type=1400 audit(1770513213.620:62): avc: denied { node_bind } for pid=2970 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 155.607659][ T29] audit: type=1400 audit(1770513213.620:63): avc: denied { module_request } for pid=2970 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 158.474117][ T29] audit: type=1400 audit(1770513216.510:64): avc: denied { mounton } for pid=2980 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 158.498007][ T29] audit: type=1400 audit(1770513216.530:65): avc: denied { mount } for pid=2980 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 158.508587][ T2980] cgroup: Unknown subsys name 'net'
[ 158.528839][ T29] audit: type=1400 audit(1770513216.560:66): avc: denied { unmount } for pid=2980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 158.715798][ T2980] cgroup: Unknown subsys name 'cpuset'
[ 158.724880][ T2980] cgroup: Unknown subsys name 'rlimit'
[ 158.994457][ T29] audit: type=1400 audit(1770513217.030:67): avc: denied { setattr } for pid=2980 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 159.017965][ T29] audit: type=1400 audit(1770513217.030:68): avc: denied { create } for pid=2980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 159.038554][ T29] audit: type=1400 audit(1770513217.030:69): avc: denied { write } for pid=2980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 159.059021][ T29] audit: type=1400 audit(1770513217.030:70): avc: denied { read } for pid=2980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 159.087547][ T29] audit: type=1400 audit(1770513217.120:71): avc: denied { sys_module } for pid=2980 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 159.228921][ T2984] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 159.291212][ T2980] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 160.953016][ T29] kauditd_printk_skb: 8 callbacks suppressed
[ 160.953040][ T29] audit: type=1400 audit(1770513218.980:80): avc: denied { execmem } for pid=2986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 160.978517][ T29] audit: type=1400 audit(1770513218.980:81): avc: denied { create } for pid=2986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 160.998543][ T29] audit: type=1400 audit(1770513218.980:82): avc: denied { sys_admin } for pid=2986 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 161.048049][ T29] audit: type=1400 audit(1770513218.990:83): avc: denied { read } for pid=2987 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 161.069337][ T29] audit: type=1400 audit(1770513218.990:84): avc: denied { open } for pid=2987 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 161.092736][ T29] audit: type=1400 audit(1770513218.990:85): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 161.114131][ T29] audit: type=1400 audit(1770513219.080:86): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/root/syzkaller.Pf2wZC/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 161.138391][ T29] audit: type=1400 audit(1770513219.080:87): avc: denied { mount } for pid=2987 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 161.160457][ T29] audit: type=1400 audit(1770513219.080:88): avc: denied { mounton } for pid=2987 comm="syz-executor" path="/root/syzkaller.Pf2wZC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 161.185766][ T29] audit: type=1400 audit(1770513219.080:89): avc: denied { mount } for pid=2987 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 161.261058][ T2987] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 175.761701][ T3002] syz-executor (3002) used greatest stack depth: 22552 bytes left
[ 175.977775][ T29] kauditd_printk_skb: 11 callbacks suppressed
[ 175.977799][ T29] audit: type=1400 audit(1770513234.010:101): avc: denied { create } for pid=3461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 177.806319][ T29] audit: type=1401 audit(1770513235.840:102): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2026/02/08 01:13:56 executed programs: 0
2026/02/08 01:14:10 executed programs: 2
[ 192.293894][ T29] audit: type=1400 audit(1770513250.330:103): avc: denied { read write } for pid=3963 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 192.317644][ T29] audit: type=1400 audit(1770513250.330:104): avc: denied { open } for pid=3963 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 192.344870][ T29] audit: type=1400 audit(1770513250.330:105): avc: denied { ioctl } for pid=3963 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 192.533311][ T38] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 192.687909][ T38] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 192.697155][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 192.705230][ T38] usb 4-1: Product: syz
[ 192.709432][ T38] usb 4-1: Manufacturer: syz
[ 192.714131][ T38] usb 4-1: SerialNumber: syz
[ 192.729086][ T38] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 192.768373][ T29] audit: type=1400 audit(1770513250.800:106): avc: denied { firmware_load } for pid=23 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 192.801192][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 193.007619][ T9] usb 4-1: USB disconnect, device number 2
[ 193.893123][ T23] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 193.900483][ T23] ath9k_htc: Failed to initialize the device
[ 193.907482][ T9] usb 4-1: ath9k_htc: USB layer deinitialized
[ 194.203120][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 194.353057][ T9] usb 4-1: Using ep0 maxpacket: 8
[ 194.359540][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 194.370784][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 194.380904][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 194.391024][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 194.404080][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 194.413219][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 194.625225][ T9] usb 4-1: GET_CAPABILITIES returned 0
[ 194.630821][ T9] usbtmc 4-1:16.0: can't read capabilities
[ 194.825855][ T29] audit: type=1400 audit(1770513252.860:107): avc: denied { write } for pid=3963 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
2026/02/08 01:14:43 executed programs: 3
[ 225.373082][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 225.527192][ T23] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 225.536367][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 225.544483][ T23] usb 5-1: Product: syz
[ 225.548779][ T23] usb 5-1: Manufacturer: syz
[ 225.553477][ T23] usb 5-1: SerialNumber: syz
[ 225.564106][ T23] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 225.582781][ T38] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 225.784968][ T9] usb 5-1: USB disconnect, device number 2
[ 226.613210][ T38] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 226.620424][ T38] ath9k_htc: Failed to initialize the device
[ 226.627302][ T9] usb 5-1: ath9k_htc: USB layer deinitialized
[ 226.922998][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 227.073070][ T9] usb 5-1: Using ep0 maxpacket: 8
[ 227.079564][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 227.090750][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 227.100901][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 227.110930][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 227.124073][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 227.133274][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 227.345501][ T9] usb 5-1: GET_CAPABILITIES returned 0
[ 227.351051][ T9] usbtmc 5-1:16.0: can't read capabilities
2026/02/08 01:15:16 executed programs: 4
[ 258.573009][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 258.727151][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 258.736336][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 258.744436][ T9] usb 6-1: Product: syz
[ 258.748650][ T9] usb 6-1: Manufacturer: syz
[ 258.753371][ T9] usb 6-1: SerialNumber: syz
[ 258.765192][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 258.781384][ T2820] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 258.983447][ T38] usb 6-1: USB disconnect, device number 2
[ 259.813067][ T2820] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 259.820181][ T2820] ath9k_htc: Failed to initialize the device
[ 259.827089][ T38] usb 6-1: ath9k_htc: USB layer deinitialized
[ 260.123134][ T38] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 260.273075][ T38] usb 6-1: Using ep0 maxpacket: 8
[ 260.280101][ T38] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 260.291285][ T38] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 260.301368][ T38] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 260.311394][ T38] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 260.324460][ T38] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 260.333587][ T38] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 260.546575][ T38] usb 6-1: GET_CAPABILITIES returned 0
[ 260.552149][ T38] usbtmc 6-1:16.0: can't read capabilities
2026/02/08 01:15:49 executed programs: 5
[ 291.583049][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 291.737206][ T23] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 291.746381][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 291.754537][ T23] usb 7-1: Product: syz
[ 291.758762][ T23] usb 7-1: Manufacturer: syz
[ 291.763572][ T23] usb 7-1: SerialNumber: syz
[ 291.775202][ T23] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 291.792647][ T4877] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 291.995845][ T9] usb 7-1: USB disconnect, device number 2
[ 292.853174][ T4877] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 292.860463][ T4877] ath9k_htc: Failed to initialize the device
[ 292.867364][ T9] usb 7-1: ath9k_htc: USB layer deinitialized
[ 293.163296][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 293.313037][ T9] usb 7-1: Using ep0 maxpacket: 8
[ 293.319577][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 293.330969][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 293.341083][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 293.351080][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 293.364120][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 293.373335][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 293.588201][ T9] usb 7-1: GET_CAPABILITIES returned 0
[ 293.593855][ T9] usbtmc 7-1:16.0: can't read capabilities
2026/02/08 01:16:22 executed programs: 6
[ 324.553165][ T23] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 324.707360][ T23] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 324.716617][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 324.724755][ T23] usb 8-1: Product: syz
[ 324.728962][ T23] usb 8-1: Manufacturer: syz
[ 324.733684][ T23] usb 8-1: SerialNumber: syz
[ 324.749110][ T23] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 324.765072][ T5738] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 324.968317][ T5332] usb 8-1: USB disconnect, device number 2
[ 325.813064][ T5738] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 325.820263][ T5738] ath9k_htc: Failed to initialize the device
[ 325.827150][ T5332] usb 8-1: ath9k_htc: USB layer deinitialized
[ 326.122991][ T5332] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 326.273044][ T5332] usb 8-1: Using ep0 maxpacket: 8
[ 326.280352][ T5332] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 326.291565][ T5332] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 326.301693][ T5332] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 326.311716][ T5332] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 326.324881][ T5332] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 326.334052][ T5332] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 326.546457][ T5332] usb 8-1: GET_CAPABILITIES returned 0
[ 326.552139][ T5332] usbtmc 8-1:16.0: can't read capabilities
[ 347.253134][ T30] INFO: task syz.3.17:3963 blocked for more than 143 seconds.
[ 347.260754][ T30] Not tainted syzkaller #0
[ 347.265815][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 347.274919][ T30] task:syz.3.17 state:D stack:27256 pid:3963 tgid:3963 ppid:3514 task_flags:0x400040 flags:0x00080002
[ 347.287251][ T30] Call Trace:
[ 347.290577][ T30]
[ 347.293770][ T30] __schedule+0xeb0/0x3e50
[ 347.298274][ T30] ? __pfx___schedule+0x10/0x10
[ 347.303228][ T30] ? find_held_lock+0x2b/0x80
[ 347.308018][ T30] ? schedule+0x2bf/0x390
[ 347.312455][ T30] schedule+0xdd/0x390
[ 347.316648][ T30] schedule_timeout+0x127/0x280
[ 347.321573][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 347.327044][ T30] ? __pfx_process_timeout+0x10/0x10
[ 347.332418][ T30] ? mark_held_locks+0x40/0x70
[ 347.337292][ T30] __wait_for_common+0x2e7/0x4c0
[ 347.342326][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 347.347798][ T30] ? __pfx___wait_for_common+0x10/0x10
[ 347.353378][ T30] usb_start_wait_urb+0x147/0x4c0
[ 347.358476][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 347.364231][ T30] ? __asan_memset+0x23/0x50
[ 347.368916][ T30] usb_bulk_msg+0x22b/0x580
[ 347.373561][ T30] usbtmc_read+0x5f4/0x10b0
[ 347.378171][ T30] ? futex_hash_put+0x43/0x50
[ 347.382960][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 347.387983][ T30] ? security_file_permission+0x21/0x80
[ 347.393650][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 347.398684][ T30] vfs_read+0x1e4/0xb30
[ 347.402955][ T30] ? __pfx_vfs_read+0x10/0x10
[ 347.407710][ T30] ? do_futex+0x192/0x350
[ 347.412109][ T30] ? __pfx_do_futex+0x10/0x10
[ 347.417087][ T30] ? __pfx_do_sys_openat2+0x10/0x10
[ 347.422364][ T30] ? __x64_sys_futex+0x34f/0x4d0
[ 347.427428][ T30] ? __x64_sys_futex+0x358/0x4d0
[ 347.432525][ T30] ksys_read+0x12a/0x250
[ 347.436885][ T30] ? __pfx_ksys_read+0x10/0x10
[ 347.441743][ T30] do_syscall_64+0xc9/0x570
[ 347.446336][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 347.452304][ T30] RIP: 0033:0x7f2b159faeb9
[ 347.456816][ T30] RSP: 002b:00007ffc49719d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 347.465312][ T30] RAX: ffffffffffffffda RBX: 00007f2b15c75fa0 RCX: 00007f2b159faeb9
[ 347.473622][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 347.481651][ T30] RBP: 00007f2b15a68c1f R08: 0000000000000000 R09: 0000000000000000
[ 347.489714][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 347.497777][ T30] R13: 00007f2b15c75fac R14: 00007f2b15c75fa0 R15: 00007f2b15c75fa0
[ 347.505853][ T30]
[ 347.510242][ T30]
[ 347.510242][ T30] Showing all locks held in the system:
[ 347.518086][ T30] 6 locks held by kworker/0:0/9:
[ 347.523109][ T30] #0: ffff88810569bd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.534054][ T30] #1: ffffc9000009fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.545430][ T30] #2: ffff88810a7c6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 347.554537][ T30] #3: ffff88810ca9f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.563919][ T30] #4: ffff88810ca9c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.573285][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 347.582790][ T30] 1 lock held by khungtaskd/30:
[ 347.587730][ T30] #0: ffffffff894da3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 347.597705][ T30] 6 locks held by kworker/1:1/38:
[ 347.602774][ T30] #0: ffff88810569bd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.613746][ T30] #1: ffffc90000287ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.625120][ T30] #2: ffff88810a7ae198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 347.634158][ T30] #3: ffff888103eaf198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.643546][ T30] #4: ffff888103eab160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.653030][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 347.662558][ T30] 2 locks held by kworker/u8:10/1609:
[ 347.668038][ T30] #0: ffff888100089148 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.679519][ T30] #1: ffffc900022dfca8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.691224][ T30] 2 locks held by kworker/u8:13/2771:
[ 347.696679][ T30] #0: ffff888100089148 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.708195][ T30] #1: ffffc9000406fca8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.719862][ T30] 3 locks held by kworker/0:2/2820:
[ 347.725164][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.735855][ T30] #1: ffffc900041afca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.747442][ T30] #2: ffff88810a7ae198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 347.757781][ T30] 2 locks held by getty/2925:
[ 347.762503][ T30] #0: ffff88811277a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 347.772536][ T30] #1: ffffc900000452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 347.782907][ T30] 1 lock held by syz.3.17/3963:
[ 347.787805][ T30] #0: ffff88811b42ccd8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x154/0x10b0
[ 347.797428][ T30] 2 locks held by syz.4.18/4418:
[ 347.802420][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 347.811189][ T30] #1: ffff88811b42ccd8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950
[ 347.820653][ T30] 1 lock held by syz.5.19/4873:
[ 347.825614][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 347.834355][ T30] 3 locks held by kworker/1:3/4877:
[ 347.839777][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.850376][ T30] #1: ffffc90006717ca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.861948][ T30] #2: ffff88810a7c6198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 347.872286][ T30] 1 lock held by syz.6.20/5329:
[ 347.877310][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 347.886159][ T30] 6 locks held by kworker/0:3/5332:
[ 347.891486][ T30] #0: ffff88810569bd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.902504][ T30] #1: ffffc90006e57ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.913895][ T30] #2: ffff88810ab4e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 347.922923][ T30] #3: ffff888103ea8198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.932278][ T30] #4: ffff88810b6c3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.941749][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 347.951291][ T30] 3 locks held by kworker/1:4/5738:
[ 347.956590][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.967317][ T30] #1: ffffc90005bafca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.978930][ T30] #2: ffff88810ab4e198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 347.989243][ T30] 1 lock held by syz.7.21/5786:
[ 347.994187][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 348.002934][ T30] 2 locks held by modprobe/5990:
[ 348.007921][ T30]
[ 348.010290][ T30] =============================================
[ 348.010290][ T30]
[ 348.018849][ T30] NMI backtrace for cpu 1
[ 348.018886][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 348.018923][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 348.018941][ T30] Call Trace:
[ 348.018951][ T30]
[ 348.018962][ T30] dump_stack_lvl+0x100/0x190
[ 348.019022][ T30] nmi_cpu_backtrace.cold+0x12d/0x151
[ 348.019061][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 348.019102][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 348.019148][ T30] sys_info+0x141/0x190
[ 348.019183][ T30] watchdog+0xcc3/0xfe0
[ 348.019232][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.019273][ T30] ? __kthread_parkme+0x18c/0x230
[ 348.019314][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.019358][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.019394][ T30] kthread+0x3b3/0x730
[ 348.019436][ T30] ? __pfx_kthread+0x10/0x10
[ 348.019473][ T30] ? ret_from_fork+0x79/0xa20
[ 348.019504][ T30] ? ret_from_fork+0x79/0xa20
[ 348.019536][ T30] ? rcu_is_watching+0x12/0xc0
[ 348.019582][ T30] ? __pfx_kthread+0x10/0x10
[ 348.019623][ T30] ret_from_fork+0x6c3/0xa20
[ 348.019655][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 348.019689][ T30] ? __switch_to+0x7af/0x10b0
[ 348.019736][ T30] ? __pfx_kthread+0x10/0x10
[ 348.019783][ T30] ret_from_fork_asm+0x1a/0x30
[ 348.019841][ T30]
[ 348.019852][ T30] Sending NMI from CPU 1 to CPUs 0:
[ 348.160152][ C0] NMI backtrace for cpu 0
[ 348.160172][ C0] CPU: 0 UID: 0 PID: 5991 Comm: modprobe Not tainted syzkaller #0 PREEMPT(voluntary)
[ 348.160202][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 348.160218][ C0] RIP: 0010:__lock_acquire+0x341/0x2630
[ 348.160253][ C0] Code: 38 c7 44 0f 47 f8 80 be c6 00 00 00 02 44 0f 44 f8 41 83 c6 01 48 83 c3 28 44 3b b5 a0 0a 00 00 0f 8d b2 00 00 00 0f b7 43 20 <66> 25 ff 1f 0f b7 c0 48 0f a3 05 10 d5 42 0d 72 a9 44 8b 1d 27 81
[ 348.160278][ C0] RSP: 0000:ffffc9000411f8a0 EFLAGS: 00000006
[ 348.160299][ C0] RAX: 00000000000083c5 RBX: ffff888116cc6268 RCX: 0000000000000005
[ 348.160315][ C0] RDX: 0000000000000001 RSI: ffff888116cc6240 RDI: 0000000000000000
[ 348.160331][ C0] RBP: ffff888116cc57c0 R08: 0000000000000000 R09: 0000000000000007
[ 348.160346][ C0] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888116cc6330
[ 348.160361][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005
[ 348.160377][ C0] FS: 00007feb72295c80(0000) GS:ffff88826896a000(0000) knlGS:0000000000000000
[ 348.160401][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 348.160417][ C0] CR2: 00007feb724d4b45 CR3: 0000000122c10000 CR4: 00000000003506f0
[ 348.160434][ C0] Call Trace:
[ 348.160441][ C0]
[ 348.160451][ C0] ? mark_held_locks+0x40/0x70
[ 348.160476][ C0] ? irqentry_exit+0x15f/0x620
[ 348.160513][ C0] ? lockdep_hardirqs_on+0x78/0x100
[ 348.160556][ C0] ? irqentry_exit+0x15f/0x620
[ 348.160594][ C0] lock_acquire+0x17c/0x330
[ 348.160618][ C0] ? page_table_check_set+0x2be/0xa10
[ 348.160649][ C0] ? page_table_check_set+0x179/0xa10
[ 348.160677][ C0] ? page_table_check_set+0x179/0xa10
[ 348.160709][ C0] page_table_check_set+0x2d3/0xa10
[ 348.160738][ C0] ? page_table_check_set+0x2be/0xa10
[ 348.160769][ C0] __page_table_check_ptes_set+0x1db/0x230
[ 348.160801][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10
[ 348.160833][ C0] ? folio_add_file_rmap_ptes+0x41c/0x940
[ 348.160872][ C0] set_pte_range+0x54f/0x630
[ 348.160909][ C0] filemap_map_pages+0x91f/0x1df0
[ 348.160961][ C0] ? __pfx_filemap_map_pages+0x10/0x10
[ 348.160996][ C0] ? rcu_read_unlock+0x2d/0xb0
[ 348.161020][ C0] ? ___pte_offset_map+0x179/0x300
[ 348.161049][ C0] __handle_mm_fault+0x1e8c/0x2d30
[ 348.161083][ C0] ? lock_vma_under_rcu+0x11d/0x5a0
[ 348.161124][ C0] ? __pfx___handle_mm_fault+0x10/0x10
[ 348.161170][ C0] ? lock_vma_under_rcu+0x17c/0x5a0
[ 348.161229][ C0] handle_mm_fault+0x36d/0xa20
[ 348.161277][ C0] do_user_addr_fault+0x5ae/0x11d0
[ 348.161314][ C0] exc_page_fault+0x66/0xc0
[ 348.161349][ C0] asm_exc_page_fault+0x26/0x30
[ 348.161373][ C0] RIP: 0033:0x7feb723976c0
[ 348.161391][ C0] Code: 48 89 ef e8 b2 ec fe ff 85 c0 75 de 49 8b 47 08 80 38 2f 48 89 44 24 08 0f 85 8c 01 00 00 48 63 44 24 30 48 8d 15 80 d4 13 00 <0f> b6 1c 02 48 89 c7 48 8d 05 92 d4 13 00 48 01 c3 e8 ea e4 ff ff
[ 348.161414][ C0] RSP: 002b:00007ffc4877cef0 EFLAGS: 00010246
[ 348.161433][ C0] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000000
[ 348.161447][ C0] RDX: 00007feb724d4b40 RSI: 0000000000000000 RDI: 00007feb725309e0
[ 348.161463][ C0] RBP: 00007feb724eec96 R08: 00007feb725309e0 R09: 0000000000000000
[ 348.161483][ C0] R10: 000000000000006c R11: 0000000000000217 R12: 00007feb724ef1e4
[ 348.161499][ C0] R13: ffffffffffffff88 R14: 0000000000000002 R15: 0000000000000000
[ 348.161522][ C0]
[ 348.496416][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 348.503316][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 348.513039][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 348.523162][ T30] Call Trace:
[ 348.526661][ T30]
[ 348.529646][ T30] dump_stack_lvl+0x100/0x190
[ 348.534409][ T30] vpanic+0x20d/0x630
[ 348.538484][ T30] panic+0xd1/0xd1
[ 348.542259][ T30] ? __pfx_panic+0x10/0x10
[ 348.546731][ T30] ? wq_watchdog_touch+0xec/0x1a0
[ 348.551821][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 348.558040][ T30] ? watchdog.cold+0x198/0x1ca
[ 348.562875][ T30] ? watchdog+0xcd3/0xfe0
[ 348.567274][ T30] watchdog.cold+0x1a9/0x1ca
[ 348.571937][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.576690][ T30] ? __kthread_parkme+0x18c/0x230
[ 348.581786][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.586553][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.591331][ T30] kthread+0x3b3/0x730
[ 348.595474][ T30] ? __pfx_kthread+0x10/0x10
[ 348.600125][ T30] ? ret_from_fork+0x79/0xa20
[ 348.604863][ T30] ? ret_from_fork+0x79/0xa20
[ 348.609607][ T30] ? rcu_is_watching+0x12/0xc0
[ 348.614441][ T30] ? __pfx_kthread+0x10/0x10
[ 348.619098][ T30] ret_from_fork+0x6c3/0xa20
[ 348.623752][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 348.628928][ T30] ? __switch_to+0x7af/0x10b0
[ 348.633680][ T30] ? __pfx_kthread+0x10/0x10
[ 348.638518][ T30] ret_from_fork_asm+0x1a/0x30
[ 348.643371][ T30]
[ 348.646584][ T30] Kernel Offset: disabled
[ 348.650956][ T30] Rebooting in 86400 seconds..