Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. 2026/02/08 15:46:06 parsed 1 programs [ 103.437117][ T29] audit: type=1400 audit(1770565569.055:103): avc: denied { unlink } for pid=3997 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 103.537933][ T3997] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.092497][ T29] audit: type=1401 audit(1770565571.705:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/02/08 15:46:25 executed programs: 0 2026/02/08 15:46:37 executed programs: 2 [ 132.314150][ T29] audit: type=1400 audit(1770565597.935:105): avc: denied { read write } for pid=4980 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.339260][ T29] audit: type=1400 audit(1770565597.935:106): avc: denied { open } for pid=4980 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.363311][ T29] audit: type=1400 audit(1770565597.935:107): avc: denied { ioctl } for pid=4980 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.573230][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.727800][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 132.737411][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.746110][ T9] usb 4-1: Product: syz [ 132.750729][ T9] usb 4-1: Manufacturer: syz [ 132.755490][ T9] usb 4-1: SerialNumber: syz [ 132.769165][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.796763][ T29] audit: type=1400 audit(1770565598.415:108): avc: denied { firmware_load } for pid=1069 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 132.834874][ T1069] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 133.038773][ T38] usb 4-1: USB disconnect, device number 2 [ 133.863064][ T1069] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 133.870580][ T1069] ath9k_htc: Failed to initialize the device [ 133.878266][ T38] usb 4-1: ath9k_htc: USB layer deinitialized [ 134.173523][ T38] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.323166][ T38] usb 4-1: Using ep0 maxpacket: 8 [ 134.330279][ T38] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 134.341815][ T38] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 134.352342][ T38] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.362628][ T38] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.375939][ T38] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.385636][ T38] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.598752][ T38] usb 4-1: GET_CAPABILITIES returned 0 [ 134.604966][ T38] usbtmc 4-1:16.0: can't read capabilities [ 134.799634][ T29] audit: type=1400 audit(1770565600.415:109): avc: denied { write } for pid=4980 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.803253][ T4981] usbtmc 4-1:16.0: usbtmc_read(count:0) 2026/02/08 15:47:08 executed programs: 3 [ 163.152964][ T38] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.307081][ T38] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 163.316526][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.324665][ T38] usb 5-1: Product: syz [ 163.328869][ T38] usb 5-1: Manufacturer: syz [ 163.333518][ T38] usb 5-1: SerialNumber: syz [ 163.344029][ T38] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 163.367354][ T23] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 163.596901][ T38] usb 5-1: USB disconnect, device number 2 [ 164.423014][ T23] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 164.430689][ T23] ath9k_htc: Failed to initialize the device [ 164.438122][ T38] usb 5-1: ath9k_htc: USB layer deinitialized [ 164.733041][ T38] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.883024][ T38] usb 5-1: Using ep0 maxpacket: 8 [ 164.890125][ T38] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 164.901559][ T38] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 164.912179][ T38] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.922387][ T38] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.935642][ T38] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.945101][ T38] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.158013][ T38] usb 5-1: GET_CAPABILITIES returned 0 [ 165.163910][ T38] usbtmc 5-1:16.0: can't read capabilities 2026/02/08 15:47:39 executed programs: 4 [ 193.732979][ T38] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 193.887175][ T38] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.897268][ T38] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.905581][ T38] usb 6-1: Product: syz [ 193.909980][ T38] usb 6-1: Manufacturer: syz [ 193.914753][ T38] usb 6-1: SerialNumber: syz [ 193.925953][ T38] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.941845][ T23] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 194.143801][ T1069] usb 6-1: USB disconnect, device number 2 [ 194.982991][ T23] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 194.990540][ T23] ath9k_htc: Failed to initialize the device [ 194.998238][ T1069] usb 6-1: ath9k_htc: USB layer deinitialized [ 195.303061][ T1069] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 195.453002][ T1069] usb 6-1: Using ep0 maxpacket: 8 [ 195.460061][ T1069] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 195.471892][ T1069] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 195.482264][ T1069] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.492500][ T1069] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.505879][ T1069] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.515133][ T1069] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.728002][ T1069] usb 6-1: GET_CAPABILITIES returned 0 [ 195.733658][ T1069] usbtmc 6-1:16.0: can't read capabilities 2026/02/08 15:48:10 executed programs: 5 [ 224.683026][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 224.837346][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 224.846981][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.855369][ T9] usb 7-1: Product: syz [ 224.860045][ T9] usb 7-1: Manufacturer: syz [ 224.864877][ T9] usb 7-1: SerialNumber: syz [ 224.877589][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 224.894296][ T5899] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 225.096972][ T38] usb 7-1: USB disconnect, device number 2 [ 225.943036][ T5899] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 225.950510][ T5899] ath9k_htc: Failed to initialize the device [ 225.957551][ T38] usb 7-1: ath9k_htc: USB layer deinitialized [ 226.253014][ T38] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 226.403022][ T38] usb 7-1: Using ep0 maxpacket: 8 [ 226.409749][ T38] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 226.420996][ T38] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.431358][ T38] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.441627][ T38] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.455003][ T38] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.464205][ T38] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.677541][ T38] usb 7-1: GET_CAPABILITIES returned 0 [ 226.683761][ T38] usbtmc 7-1:16.0: can't read capabilities 2026/02/08 15:48:41 executed programs: 6 [ 255.743041][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 255.897091][ T9] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 255.906939][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.915670][ T9] usb 8-1: Product: syz [ 255.919981][ T9] usb 8-1: Manufacturer: syz [ 255.925030][ T9] usb 8-1: SerialNumber: syz [ 255.940142][ T9] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 255.956951][ T6813] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 256.160780][ T5441] usb 8-1: USB disconnect, device number 2 [ 256.982961][ T6813] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 256.990468][ T6813] ath9k_htc: Failed to initialize the device [ 256.997528][ T5441] usb 8-1: ath9k_htc: USB layer deinitialized [ 257.293001][ T5441] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 257.442983][ T5441] usb 8-1: Using ep0 maxpacket: 8 [ 257.449811][ T5441] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 257.461945][ T5441] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 257.472888][ T5441] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 257.483198][ T5441] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.496550][ T5441] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.505897][ T5441] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.719104][ T5441] usb 8-1: GET_CAPABILITIES returned 0 [ 257.725255][ T5441] usbtmc 8-1:16.0: can't read capabilities 2026/02/08 15:49:12 executed programs: 7 [ 287.153025][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 287.307038][ T9] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 287.316631][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.324882][ T9] usb 9-1: Product: syz [ 287.329273][ T9] usb 9-1: Manufacturer: syz [ 287.334163][ T9] usb 9-1: SerialNumber: syz [ 287.348006][ T9] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 287.365161][ T6814] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 287.569430][ T6815] usb 9-1: USB disconnect, device number 2 [ 288.423040][ T6814] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 288.430527][ T6814] ath9k_htc: Failed to initialize the device [ 288.437568][ T6815] usb 9-1: ath9k_htc: USB layer deinitialized [ 288.733013][ T6815] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 288.882996][ T6815] usb 9-1: Using ep0 maxpacket: 8 [ 288.889580][ T6815] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 288.901260][ T6815] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 288.911689][ T6815] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.922190][ T6815] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.935742][ T6815] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.945221][ T6815] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.157523][ T6815] usb 9-1: GET_CAPABILITIES returned 0 [ 289.163591][ T6815] usbtmc 9-1:16.0: can't read capabilities [ 291.863028][ T30] INFO: task syz.3.17:4981 blocked for more than 143 seconds. [ 291.870761][ T30] Not tainted syzkaller #0 [ 291.876109][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.885736][ T30] task:syz.3.17 state:D stack:26904 pid:4981 tgid:4980 ppid:4531 task_flags:0x400040 flags:0x00080002 [ 291.898125][ T30] Call Trace: [ 291.901820][ T30] [ 291.904836][ T30] __schedule+0xeb0/0x3e50 [ 291.909552][ T30] ? __pfx___schedule+0x10/0x10 [ 291.914925][ T30] ? find_held_lock+0x2b/0x80 [ 291.919815][ T30] ? schedule+0x2bf/0x390 [ 291.924508][ T30] schedule+0xdd/0x390 [ 291.928748][ T30] schedule_timeout+0x127/0x280 [ 291.933905][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 291.939837][ T30] ? __pfx_process_timeout+0x10/0x10 [ 291.945480][ T30] ? mark_held_locks+0x40/0x70 [ 291.950623][ T30] __wait_for_common+0x2e7/0x4c0 [ 291.955786][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 291.961244][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 291.966879][ T30] usb_start_wait_urb+0x147/0x4c0 [ 291.972149][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 291.978003][ T30] ? __asan_memset+0x23/0x50 [ 291.982707][ T30] usb_bulk_msg+0x22b/0x580 [ 291.987616][ T30] usbtmc_read.cold+0x48d/0xfe7 [ 291.992723][ T30] ? __pfx_usbtmc_read+0x10/0x10 [ 291.997964][ T30] ? security_file_permission+0x21/0x80 [ 292.004042][ T30] ? __pfx_usbtmc_read+0x10/0x10 [ 292.009370][ T30] vfs_read+0x1e4/0xb30 [ 292.013763][ T30] ? __pfx_vfs_read+0x10/0x10 [ 292.018623][ T30] ? find_held_lock+0x2b/0x80 [ 292.023714][ T30] ? __fget_files+0x215/0x3d0 [ 292.028620][ T30] ? __fget_files+0x215/0x3d0 [ 292.033787][ T30] ? __fget_files+0x21f/0x3d0 [ 292.038651][ T30] ksys_read+0x12a/0x250 [ 292.043640][ T30] ? __pfx_ksys_read+0x10/0x10 [ 292.049299][ T30] do_syscall_64+0xc9/0x570 [ 292.054041][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.060163][ T30] RIP: 0033:0x7fab75baaeb9 [ 292.064786][ T30] RSP: 002b:00007fab75a0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.073394][ T30] RAX: ffffffffffffffda RBX: 00007fab75e25fa0 RCX: 00007fab75baaeb9 [ 292.081540][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 292.090051][ T30] RBP: 00007fab75c18c1f R08: 0000000000000000 R09: 0000000000000000 [ 292.098151][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.106474][ T30] R13: 00007fab75e26038 R14: 00007fab75e25fa0 R15: 00007ffcbc60e758 [ 292.114962][ T30] [ 292.118186][ T30] [ 292.118186][ T30] Showing all locks held in the system: [ 292.126638][ T30] 3 locks held by kworker/1:0/23: [ 292.132178][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 292.143300][ T30] #1: ffffc9000018fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 292.155057][ T30] #2: ffff88810ab98198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 292.166327][ T30] 1 lock held by khungtaskd/30: [ 292.171373][ T30] #0: ffffffff894da3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 292.181616][ T30] 6 locks held by kworker/1:1/38: [ 292.186858][ T30] #0: ffff888103e88548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 292.198280][ T30] #1: ffffc90000287ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 292.209865][ T30] #2: ffff88810abb0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 292.219429][ T30] #3: ffff88810529f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 292.228841][ T30] #4: ffff88810529e160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 292.238957][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 292.248652][ T30] 6 locks held by kworker/0:2/1069: [ 292.254049][ T30] #0: ffff888103e88548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 292.265130][ T30] #1: ffffc90001d6fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 292.276600][ T30] #2: ffff88810ab98198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 292.286096][ T30] #3: ffff888117f24198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 292.295996][ T30] #4: ffff888117f21160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 292.305976][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 292.315800][ T30] 1 lock held by klogd/2853: [ 292.320443][ T30] #0: ffff8881f56390d8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2c5/0x3e50 [ 292.330028][ T30] 2 locks held by getty/2928: [ 292.334970][ T30] #0: ffff8881163f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 292.345251][ T30] #1: ffffc900000452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 292.356097][ T30] 1 lock held by syz.3.17/4981: [ 292.361081][ T30] #0: ffff888120d3a0d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x14a/0x270 [ 292.370805][ T30] 2 locks held by syz.4.18/5437: [ 292.376084][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 292.385151][ T30] #1: ffff888120d3a0d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950 [ 292.395155][ T30] 6 locks held by kworker/1:3/5441: [ 292.400724][ T30] #0: ffff888103e88548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 292.411978][ T30] #1: ffffc9000197fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 292.424036][ T30] #2: ffff88810af38198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 292.433199][ T30] #3: ffff8881076c0198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 292.443243][ T30] #4: ffff888104af0160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 292.452630][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 292.462423][ T30] 1 lock held by syz.5.19/5896: [ 292.468085][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 292.477016][ T30] 3 locks held by kworker/0:3/5899: [ 292.482504][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 292.493642][ T30] #1: ffffc90003dafca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 292.505794][ T30] #2: ffff88810abb0198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 292.516585][ T30] 1 lock held by syz.6.20/6352: [ 292.521656][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 292.530549][ T30] 1 lock held by syz.7.21/6809: [ 292.535941][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 292.545123][ T30] 3 locks held by kworker/0:4/6813: [ 292.550817][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 292.561789][ T30] #1: ffffc90006557ca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 292.573641][ T30] #2: ffff88810af38198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 292.584245][ T30] 3 locks held by kworker/0:5/6814: [ 292.590032][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 292.601267][ T30] #1: ffffc9000659fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 292.613111][ T30] #2: ffff88810af50198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 292.623685][ T30] 6 locks held by kworker/1:4/6815: [ 292.629070][ T30] #0: ffff888103e88548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 292.640168][ T30] #1: ffffc900065afca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 292.651873][ T30] #2: ffff88810af50198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 292.661305][ T30] #3: ffff88810529d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 292.670795][ T30] #4: ffff888105285160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 292.680486][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 292.690563][ T30] 1 lock held by syz.8.22/7270: [ 292.695623][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 292.704499][ T30] [ 292.707219][ T30] ============================================= [ 292.707219][ T30] [ 292.716154][ T30] NMI backtrace for cpu 1 [ 292.716177][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.716208][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 292.716225][ T30] Call Trace: [ 292.716238][ T30] [ 292.716251][ T30] dump_stack_lvl+0x100/0x190 [ 292.716309][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 292.716377][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 292.716410][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 292.716448][ T30] sys_info+0x141/0x190 [ 292.716476][ T30] watchdog+0xcc3/0xfe0 [ 292.716518][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.716553][ T30] ? __kthread_parkme+0x18c/0x230 [ 292.716584][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.716620][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.716649][ T30] kthread+0x3b3/0x730 [ 292.716684][ T30] ? __pfx_kthread+0x10/0x10 [ 292.716716][ T30] ? ret_from_fork+0x79/0xa20 [ 292.716744][ T30] ? ret_from_fork+0x79/0xa20 [ 292.716772][ T30] ? rcu_is_watching+0x12/0xc0 [ 292.716811][ T30] ? __pfx_kthread+0x10/0x10 [ 292.716848][ T30] ret_from_fork+0x6c3/0xa20 [ 292.716877][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 292.716909][ T30] ? __switch_to+0x7af/0x10b0 [ 292.716945][ T30] ? __pfx_kthread+0x10/0x10 [ 292.716982][ T30] ret_from_fork_asm+0x1a/0x30 [ 292.717035][ T30] [ 292.717079][ T30] Sending NMI from CPU 1 to CPUs 0: [ 292.862201][ C0] NMI backtrace for cpu 0 [ 292.862226][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.862253][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 292.862265][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 292.862301][ C0] Code: 3a a3 01 e9 53 e3 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 12 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 292.862321][ C0] RSP: 0018:ffffffff89207e10 EFLAGS: 00000246 [ 292.862340][ C0] RAX: 000000000015142d RBX: ffffffff8922eac0 RCX: ffffffff8753acd5 [ 292.862353][ C0] RDX: 0000000000000000 RSI: ffffffff88dec96c RDI: ffffffff878e97a0 [ 292.862365][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed103eac66c5 [ 292.862378][ C0] R10: ffff8881f563362b R11: 0000000000000000 R12: fffffbfff1245d58 [ 292.862392][ C0] R13: 0000000000000000 R14: ffffffff8accd4d0 R15: 0000000000000000 [ 292.862409][ C0] FS: 0000000000000000(0000) GS:ffff88826896a000(0000) knlGS:0000000000000000 [ 292.862433][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.862447][ C0] CR2: 00007ff97c59ce80 CR3: 000000011e9b8000 CR4: 00000000003506f0 [ 292.862461][ C0] Call Trace: [ 292.862472][ C0] [ 292.862480][ C0] default_idle+0x9/0x10 [ 292.862528][ C0] default_idle_call+0x6c/0xb0 [ 292.862550][ C0] do_idle+0x35b/0x4b0 [ 292.862576][ C0] ? __pfx_do_idle+0x10/0x10 [ 292.862602][ C0] cpu_startup_entry+0x4f/0x60 [ 292.862624][ C0] rest_init+0x251/0x260 [ 292.862644][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 292.862670][ C0] start_kernel+0x475/0x480 [ 292.862699][ C0] x86_64_start_reservations+0x24/0x30 [ 292.862724][ C0] x86_64_start_kernel+0x122/0x130 [ 292.862748][ C0] common_startup_64+0x13e/0x148 [ 292.862781][ C0] [ 292.863165][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 292.863190][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.863220][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 292.863234][ T30] Call Trace: [ 292.863253][ T30] [ 292.863264][ T30] dump_stack_lvl+0x100/0x190 [ 292.863311][ T30] vpanic+0x20d/0x630 [ 292.863344][ T30] panic+0xd1/0xd1 [ 292.863371][ T30] ? __pfx_panic+0x10/0x10 [ 292.863401][ T30] ? delay_tsc+0x49/0xc0 [ 292.863431][ T30] ? wq_watchdog_touch+0xec/0x1a0 [ 292.863464][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 292.863497][ T30] ? watchdog.cold+0x198/0x1ca [ 292.863527][ T30] ? watchdog+0xcd3/0xfe0 [ 292.863562][ T30] watchdog.cold+0x1a9/0x1ca [ 292.863602][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.863636][ T30] ? __kthread_parkme+0x18c/0x230 [ 292.863664][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.863698][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.863727][ T30] kthread+0x3b3/0x730 [ 292.863761][ T30] ? __pfx_kthread+0x10/0x10 [ 292.863790][ T30] ? ret_from_fork+0x79/0xa20 [ 292.863815][ T30] ? ret_from_fork+0x79/0xa20 [ 292.863841][ T30] ? rcu_is_watching+0x12/0xc0 [ 292.863877][ T30] ? __pfx_kthread+0x10/0x10 [ 292.863909][ T30] ret_from_fork+0x6c3/0xa20 [ 292.863936][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 292.863965][ T30] ? __switch_to+0x7af/0x10b0 [ 292.863997][ T30] ? __pfx_kthread+0x10/0x10 [ 292.864031][ T30] ret_from_fork_asm+0x1a/0x30 [ 292.864077][ T30] [ 293.209390][ T30] Kernel Offset: disabled [ 293.213901][ T30] Rebooting in 86400 seconds..