Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. 2026/02/08 17:21:44 parsed 1 programs [ 159.332865][ T29] audit: type=1400 audit(1770571304.782:62): avc: denied { node_bind } for pid=2969 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 159.353813][ T29] audit: type=1400 audit(1770571304.782:63): avc: denied { module_request } for pid=2969 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 161.518917][ T29] audit: type=1400 audit(1770571306.962:64): avc: denied { mounton } for pid=2979 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 161.542628][ T29] audit: type=1400 audit(1770571306.992:65): avc: denied { mount } for pid=2979 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 161.545683][ T2979] cgroup: Unknown subsys name 'net' [ 161.572488][ T29] audit: type=1400 audit(1770571307.022:66): avc: denied { unmount } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 161.703496][ T2979] cgroup: Unknown subsys name 'cpuset' [ 161.711892][ T2979] cgroup: Unknown subsys name 'rlimit' [ 161.940514][ T29] audit: type=1400 audit(1770571307.382:67): avc: denied { setattr } for pid=2979 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.963994][ T29] audit: type=1400 audit(1770571307.392:68): avc: denied { create } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.984645][ T29] audit: type=1400 audit(1770571307.392:69): avc: denied { write } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.005196][ T29] audit: type=1400 audit(1770571307.392:70): avc: denied { read } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.025924][ T29] audit: type=1400 audit(1770571307.432:71): avc: denied { sys_module } for pid=2979 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.091289][ T2983] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 162.175470][ T2979] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 163.989549][ T2986] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 176.504269][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 176.504313][ T29] audit: type=1400 audit(1770571321.952:98): avc: denied { create } for pid=3469 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 176.530513][ T29] audit: type=1400 audit(1770571321.952:99): avc: denied { sys_admin } for pid=3469 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 176.552784][ T29] audit: type=1400 audit(1770571322.012:100): avc: denied { sys_chroot } for pid=3470 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 176.828778][ T29] audit: type=1400 audit(1770571322.272:101): avc: denied { create } for pid=3481 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.921678][ T29] audit: type=1401 audit(1770571322.372:102): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/02/08 17:22:03 executed programs: 0 2026/02/08 17:22:15 executed programs: 2 [ 190.027488][ T29] audit: type=1400 audit(1770571335.472:103): avc: denied { read write } for pid=3964 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.050844][ T29] audit: type=1400 audit(1770571335.472:104): avc: denied { open } for pid=3964 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.075566][ T29] audit: type=1400 audit(1770571335.522:105): avc: denied { ioctl } for pid=3964 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.310890][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 190.464683][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 190.473878][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.481932][ T9] usb 4-1: Product: syz [ 190.486120][ T9] usb 4-1: Manufacturer: syz [ 190.490760][ T9] usb 4-1: SerialNumber: syz [ 190.503943][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.544348][ T29] audit: type=1400 audit(1770571335.992:106): avc: denied { firmware_load } for pid=1119 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 190.578534][ T1119] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.809196][ T9] usb 4-1: USB disconnect, device number 2 [ 191.610830][ T1119] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 191.618360][ T1119] ath9k_htc: Failed to initialize the device [ 191.625355][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 191.921123][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 192.070735][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 192.077431][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 192.088588][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 192.098644][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.108604][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.121611][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.130812][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.343070][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 192.348656][ T9] usbtmc 4-1:16.0: can't read capabilities [ 192.545445][ T29] audit: type=1400 audit(1770571338.002:107): avc: denied { write } for pid=3964 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 2026/02/08 17:22:45 executed programs: 3 [ 220.190821][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 220.344638][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 220.353760][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.361840][ T9] usb 5-1: Product: syz [ 220.366042][ T9] usb 5-1: Manufacturer: syz [ 220.370726][ T9] usb 5-1: SerialNumber: syz [ 220.381052][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 220.402816][ T1119] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.638567][ T9] usb 5-1: USB disconnect, device number 2 [ 221.450810][ T1119] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 221.457893][ T1119] ath9k_htc: Failed to initialize the device [ 221.464632][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 221.760815][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 221.910779][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 221.917539][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 221.928777][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.939066][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.949075][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.962134][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.971227][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.184306][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 222.189877][ T9] usbtmc 5-1:16.0: can't read capabilities 2026/02/08 17:23:15 executed programs: 4 [ 250.430767][ T38] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 250.584964][ T38] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 250.594188][ T38] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.602361][ T38] usb 6-1: Product: syz [ 250.606574][ T38] usb 6-1: Manufacturer: syz [ 250.611373][ T38] usb 6-1: SerialNumber: syz [ 250.622893][ T38] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 250.638477][ T23] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 250.840054][ T9] usb 6-1: USB disconnect, device number 2 [ 251.690784][ T23] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 251.697870][ T23] ath9k_htc: Failed to initialize the device [ 251.704723][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 252.000792][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 252.150759][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 252.157646][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 252.168897][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 252.179416][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.189402][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.202539][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.211820][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.424352][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 252.429901][ T9] usbtmc 6-1:16.0: can't read capabilities 2026/02/08 17:23:45 executed programs: 5 [ 280.420767][ T1119] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 280.574264][ T1119] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.583414][ T1119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.591760][ T1119] usb 7-1: Product: syz [ 280.596056][ T1119] usb 7-1: Manufacturer: syz [ 280.600732][ T1119] usb 7-1: SerialNumber: syz [ 280.613068][ T1119] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.629354][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.831135][ T38] usb 7-1: USB disconnect, device number 2 [ 281.690739][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 281.697979][ T10] ath9k_htc: Failed to initialize the device [ 281.704834][ T38] usb 7-1: ath9k_htc: USB layer deinitialized [ 282.000766][ T38] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 282.150738][ T38] usb 7-1: Using ep0 maxpacket: 8 [ 282.157333][ T38] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 282.168482][ T38] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 282.178556][ T38] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.188563][ T38] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.201947][ T38] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.211048][ T38] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.423111][ T38] usb 7-1: GET_CAPABILITIES returned 0 [ 282.428697][ T38] usbtmc 7-1:16.0: can't read capabilities 2026/02/08 17:24:15 executed programs: 6 [ 310.050760][ T5334] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 310.204842][ T5334] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 310.214006][ T5334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.222191][ T5334] usb 8-1: Product: syz [ 310.226376][ T5334] usb 8-1: Manufacturer: syz [ 310.231023][ T5334] usb 8-1: SerialNumber: syz [ 310.240816][ T5334] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 310.262723][ T3968] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 310.492027][ T5334] usb 8-1: USB disconnect, device number 2 [ 311.290881][ T3968] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 311.298049][ T3968] ath9k_htc: Failed to initialize the device [ 311.304923][ T5334] usb 8-1: ath9k_htc: USB layer deinitialized [ 311.600745][ T5334] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 311.750738][ T5334] usb 8-1: Using ep0 maxpacket: 8 [ 311.757562][ T5334] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 311.768725][ T5334] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 311.779205][ T5334] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 311.789503][ T5334] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.802773][ T5334] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 311.811918][ T5334] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.024306][ T5334] usb 8-1: GET_CAPABILITIES returned 0 [ 312.029864][ T5334] usbtmc 8-1:16.0: can't read capabilities 2026/02/08 17:24:44 executed programs: 7 [ 339.700703][ T4879] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 339.853871][ T4879] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 339.863548][ T4879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.871595][ T4879] usb 9-1: Product: syz [ 339.875799][ T4879] usb 9-1: Manufacturer: syz [ 339.880404][ T4879] usb 9-1: SerialNumber: syz [ 339.891732][ T4879] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 339.917859][ T5791] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 340.143412][ T4879] usb 9-1: USB disconnect, device number 2 [ 340.970713][ T5791] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 340.977921][ T5791] ath9k_htc: Failed to initialize the device [ 340.984764][ T4879] usb 9-1: ath9k_htc: USB layer deinitialized [ 341.280727][ T4879] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 341.430663][ T4879] usb 9-1: Using ep0 maxpacket: 8 [ 341.437257][ T4879] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 341.448554][ T4879] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 341.458619][ T4879] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.468862][ T4879] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.481902][ T4879] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.491013][ T4879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.702782][ T4879] usb 9-1: GET_CAPABILITIES returned 0 [ 341.708318][ T4879] usbtmc 9-1:16.0: can't read capabilities [ 347.290830][ T30] INFO: task syz.3.17:3964 blocked for more than 143 seconds. [ 347.298357][ T30] Not tainted syzkaller #0 [ 347.303388][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.312138][ T30] task:syz.3.17 state:D stack:27576 pid:3964 tgid:3964 ppid:3515 task_flags:0x400040 flags:0x00080002 [ 347.324307][ T30] Call Trace: [ 347.327701][ T30] [ 347.330737][ T30] __schedule+0xeb0/0x3e50 [ 347.335236][ T30] ? __pfx___schedule+0x10/0x10 [ 347.340130][ T30] ? find_held_lock+0x2b/0x80 [ 347.344890][ T30] ? schedule+0x2bf/0x390 [ 347.349278][ T30] schedule+0xdd/0x390 [ 347.353468][ T30] schedule_timeout+0x127/0x280 [ 347.358371][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 347.363836][ T30] ? __pfx_process_timeout+0x10/0x10 [ 347.369193][ T30] ? mark_held_locks+0x40/0x70 [ 347.374018][ T30] __wait_for_common+0x2e7/0x4c0 [ 347.379007][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 347.384463][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 347.389991][ T30] usb_start_wait_urb+0x147/0x4c0 [ 347.395216][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 347.400852][ T30] ? __asan_memset+0x23/0x50 [ 347.405474][ T30] usb_bulk_msg+0x22b/0x580 [ 347.410172][ T30] usbtmc_read+0x5f4/0x10b0 [ 347.414811][ T30] ? futex_hash_put+0x43/0x50 [ 347.419600][ T30] ? __pfx_usbtmc_read+0x10/0x10 [ 347.424664][ T30] ? security_file_permission+0x21/0x80 [ 347.430377][ T30] ? __pfx_usbtmc_read+0x10/0x10 [ 347.435413][ T30] vfs_read+0x1e4/0xb30 [ 347.439663][ T30] ? __pfx_vfs_read+0x10/0x10 [ 347.444409][ T30] ? do_futex+0x192/0x350 [ 347.448855][ T30] ? __pfx_do_futex+0x10/0x10 [ 347.453593][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 347.458849][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 347.463844][ T30] ? __x64_sys_futex+0x358/0x4d0 [ 347.468835][ T30] ksys_read+0x12a/0x250 [ 347.473157][ T30] ? __pfx_ksys_read+0x10/0x10 [ 347.477990][ T30] do_syscall_64+0xc9/0x570 [ 347.482560][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.488528][ T30] RIP: 0033:0x7f696319aeb9 [ 347.493128][ T30] RSP: 002b:00007ffd11eb5bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.501655][ T30] RAX: ffffffffffffffda RBX: 00007f6963415fa0 RCX: 00007f696319aeb9 [ 347.509706][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 347.517860][ T30] RBP: 00007f6963208c1f R08: 0000000000000000 R09: 0000000000000000 [ 347.526123][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.534215][ T30] R13: 00007f6963415fac R14: 00007f6963415fa0 R15: 00007f6963415fa0 [ 347.542306][ T30] [ 347.545477][ T30] [ 347.545477][ T30] Showing all locks held in the system: [ 347.553284][ T30] 6 locks held by kworker/0:0/9: [ 347.558340][ T30] #0: ffff888105eb8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 347.569271][ T30] #1: ffffc9000009fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 347.580709][ T30] #2: ffff88810a77b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 347.589701][ T30] #3: ffff88811bbf9198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 347.599043][ T30] #4: ffff8881177d3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 347.608369][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 347.617871][ T30] 3 locks held by kworker/0:1/10: [ 347.622934][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 347.633480][ T30] #1: ffffc900000afca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 347.645499][ T30] #2: ffff88810a793198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 347.655988][ T30] 3 locks held by kworker/1:0/23: [ 347.661161][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 347.671736][ T30] #1: ffffc9000018fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 347.683268][ T30] #2: ffff88810a77b198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 347.693592][ T30] 1 lock held by khungtaskd/30: [ 347.698493][ T30] #0: ffffffff894da3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 347.708562][ T30] 6 locks held by kworker/1:1/38: [ 347.713641][ T30] #0: ffff888105eb8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 347.724541][ T30] #1: ffffc90000287ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 347.735871][ T30] #2: ffff88810a793198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 347.744829][ T30] #3: ffff8881076f7198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 347.754341][ T30] #4: ffff8881076f6160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 347.763673][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 347.773343][ T30] 2 locks held by getty/2922: [ 347.778019][ T30] #0: ffff8881126820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 347.788056][ T30] #1: ffffc900000452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 347.798611][ T30] 1 lock held by syz.3.17/3964: [ 347.803550][ T30] #0: ffff888115be64d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x154/0x10b0 [ 347.813072][ T30] 3 locks held by kworker/0:3/3968: [ 347.818396][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 347.829065][ T30] #1: ffffc90003b37ca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 347.840654][ T30] #2: ffff88810a7f3198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 347.850943][ T30] 2 locks held by syz.4.18/4420: [ 347.855901][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 347.864596][ T30] #1: ffff888115be64d8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950 [ 347.874027][ T30] 1 lock held by syz.5.19/4875: [ 347.878933][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 347.887692][ T30] 6 locks held by kworker/1:3/4879: [ 347.893082][ T30] #0: ffff888105eb8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 347.904147][ T30] #1: ffffc900069cfca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 347.915476][ T30] #2: ffff88810ab41198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 347.924451][ T30] #3: ffff8881052bb198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 347.933817][ T30] #4: ffff8881052b9160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 347.943181][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 347.952668][ T30] 1 lock held by syz.6.20/5331: [ 347.957547][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 347.966331][ T30] 6 locks held by kworker/0:4/5334: [ 347.971586][ T30] #0: ffff888105eb8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 347.982537][ T30] #1: ffffc90006b27ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 347.993864][ T30] #2: ffff88810a7f3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 348.002884][ T30] #3: ffff8881052a8198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 348.012255][ T30] #4: ffff8881176b8160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 348.021720][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 348.031256][ T30] 1 lock held by syz.7.21/5786: [ 348.036141][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 348.044880][ T30] 3 locks held by kworker/1:4/5791: [ 348.050230][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 348.060839][ T30] #1: ffffc90001fbfca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 348.072482][ T30] #2: ffff88810ab41198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 348.082809][ T30] 1 lock held by syz.8.22/6243: [ 348.087695][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 348.096435][ T30] [ 348.098800][ T30] ============================================= [ 348.098800][ T30] [ 348.107545][ T30] NMI backtrace for cpu 0 [ 348.107570][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary) [ 348.107602][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 348.107616][ T30] Call Trace: [ 348.107624][ T30] [ 348.107633][ T30] dump_stack_lvl+0x100/0x190 [ 348.107684][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 348.107716][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 348.107750][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 348.107789][ T30] sys_info+0x141/0x190 [ 348.107819][ T30] watchdog+0xcc3/0xfe0 [ 348.107865][ T30] ? __pfx_watchdog+0x10/0x10 [ 348.107901][ T30] ? __kthread_parkme+0x18c/0x230 [ 348.107931][ T30] ? __pfx_watchdog+0x10/0x10 [ 348.107967][ T30] ? __pfx_watchdog+0x10/0x10 [ 348.108001][ T30] kthread+0x3b3/0x730 [ 348.108039][ T30] ? __pfx_kthread+0x10/0x10 [ 348.108072][ T30] ? ret_from_fork+0x79/0xa20 [ 348.108098][ T30] ? ret_from_fork+0x79/0xa20 [ 348.108127][ T30] ? rcu_is_watching+0x12/0xc0 [ 348.108167][ T30] ? __pfx_kthread+0x10/0x10 [ 348.108204][ T30] ret_from_fork+0x6c3/0xa20 [ 348.108239][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 348.108278][ T30] ? __switch_to+0x7af/0x10b0 [ 348.108314][ T30] ? __pfx_kthread+0x10/0x10 [ 348.108348][ T30] ret_from_fork_asm+0x1a/0x30 [ 348.108409][ T30] [ 348.108420][ T30] Sending NMI from CPU 0 to CPUs 1: [ 348.248795][ C1] NMI backtrace for cpu 1 [ 348.248817][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 348.248842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 348.248853][ C1] RIP: 0010:native_apic_msr_write+0x28/0x40 [ 348.248882][ C1] Code: 90 90 f3 0f 1e fa 8d 87 30 ff ff ff 83 e0 ef 74 20 89 f8 83 e0 ef 83 f8 20 74 16 c1 ef 04 31 d2 89 f0 8d 8f 00 08 00 00 0f 30 <66> 90 e9 11 c9 e8 05 e9 0c c9 e8 05 89 f6 31 d2 89 cf e9 a1 af 65 [ 348.248901][ C1] RSP: 0018:ffffc900001a8ec8 EFLAGS: 00000046 [ 348.248920][ C1] RAX: 0000000002ebb729 RBX: ffff8881f5723d00 RCX: 0000000000000838 [ 348.248934][ C1] RDX: 0000000000000000 RSI: 0000000002ebb729 RDI: 0000000000000038 [ 348.248946][ C1] RBP: 0000000002ebb729 R08: 0000000000000005 R09: 000000000000003f [ 348.248959][ C1] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000000 [ 348.248971][ C1] R13: 0000000000000000 R14: 0000000000000020 R15: ffff8881f57280c0 [ 348.248985][ C1] FS: 0000000000000000(0000) GS:ffff888268a6a000(0000) knlGS:0000000000000000 [ 348.249007][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.249021][ C1] CR2: 00007f1f26d8ce80 CR3: 0000000117314000 CR4: 00000000003506f0 [ 348.249035][ C1] Call Trace: [ 348.249044][ C1] [ 348.249051][ C1] lapic_next_event+0x10/0x20 [ 348.249078][ C1] clockevents_program_event+0x26e/0x360 [ 348.249106][ C1] tick_program_event+0xa9/0x140 [ 348.249135][ C1] hrtimer_interrupt+0x3e9/0x8c0 [ 348.249168][ C1] __sysvec_apic_timer_interrupt+0x109/0x3c0 [ 348.249198][ C1] sysvec_apic_timer_interrupt+0x8a/0xb0 [ 348.249228][ C1] [ 348.249235][ C1] [ 348.249243][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.249267][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 348.249296][ C1] Code: 3a a3 01 e9 53 e3 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 12 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 348.249314][ C1] RSP: 0018:ffffc9000013fe00 EFLAGS: 00000246 [ 348.249329][ C1] RAX: 0000000000cf55a9 RBX: ffff888101ecba80 RCX: ffffffff8753acd5 [ 348.249343][ C1] RDX: 0000000000000000 RSI: ffffffff88dec92b RDI: ffffffff878e97a0 [ 348.249356][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed103eae66c5 [ 348.249368][ C1] R10: ffff8881f573362b R11: 0000000000000000 R12: ffffed10203d9750 [ 348.249382][ C1] R13: 0000000000000001 R14: ffffffff8accd5d0 R15: 0000000000000000 [ 348.249399][ C1] ? ct_kernel_exit+0x125/0x180 [ 348.249431][ C1] default_idle+0x9/0x10 [ 348.249449][ C1] default_idle_call+0x6c/0xb0 [ 348.249468][ C1] do_idle+0x35b/0x4b0 [ 348.249491][ C1] ? __pfx_do_idle+0x10/0x10 [ 348.249515][ C1] cpu_startup_entry+0x4f/0x60 [ 348.249537][ C1] start_secondary+0x21d/0x2d0 [ 348.249560][ C1] ? __pfx_start_secondary+0x10/0x10 [ 348.249586][ C1] common_startup_64+0x13e/0x148 [ 348.249619][ C1] [ 348.249796][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 348.249815][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary) [ 348.249844][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 348.249859][ T30] Call Trace: [ 348.249868][ T30] [ 348.249878][ T30] dump_stack_lvl+0x100/0x190 [ 348.249923][ T30] vpanic+0x20d/0x630 [ 348.249954][ T30] panic+0xd1/0xd1 [ 348.249981][ T30] ? __pfx_panic+0x10/0x10 [ 348.250012][ T30] ? wq_watchdog_touch+0xec/0x1a0 [ 348.250045][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 348.250077][ T30] ? watchdog.cold+0x198/0x1ca [ 348.250107][ T30] ? watchdog+0xcd3/0xfe0 [ 348.250142][ T30] watchdog.cold+0x1a9/0x1ca [ 348.250183][ T30] ? __pfx_watchdog+0x10/0x10 [ 348.250216][ T30] ? __kthread_parkme+0x18c/0x230 [ 348.250243][ T30] ? __pfx_watchdog+0x10/0x10 [ 348.250277][ T30] ? __pfx_watchdog+0x10/0x10 [ 348.250307][ T30] kthread+0x3b3/0x730 [ 348.250340][ T30] ? __pfx_kthread+0x10/0x10 [ 348.250370][ T30] ? ret_from_fork+0x79/0xa20 [ 348.250395][ T30] ? ret_from_fork+0x79/0xa20 [ 348.250429][ T30] ? rcu_is_watching+0x12/0xc0 [ 348.250463][ T30] ? __pfx_kthread+0x10/0x10 [ 348.250497][ T30] ret_from_fork+0x6c3/0xa20 [ 348.250524][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 348.250552][ T30] ? __switch_to+0x7af/0x10b0 [ 348.250590][ T30] ? __pfx_kthread+0x10/0x10 [ 348.250623][ T30] ret_from_fork_asm+0x1a/0x30 [ 348.250670][ T30] [ 348.683132][ T30] Kernel Offset: disabled [ 348.687467][ T30] Rebooting in 86400 seconds..