Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts.
2026/02/09 09:52:08 parsed 1 programs
[ 160.104750][ T29] audit: type=1400 audit(1770630728.424:62): avc: denied { node_bind } for pid=2974 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 160.126040][ T29] audit: type=1400 audit(1770630728.434:63): avc: denied { module_request } for pid=2974 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 163.025707][ T29] audit: type=1400 audit(1770630731.344:64): avc: denied { mounton } for pid=2984 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 163.049798][ T29] audit: type=1400 audit(1770630731.374:65): avc: denied { mount } for pid=2984 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 163.060771][ T2984] cgroup: Unknown subsys name 'net'
[ 163.079410][ T29] audit: type=1400 audit(1770630731.404:66): avc: denied { unmount } for pid=2984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 163.221611][ T2984] cgroup: Unknown subsys name 'cpuset'
[ 163.231009][ T2984] cgroup: Unknown subsys name 'rlimit'
[ 163.480933][ T29] audit: type=1400 audit(1770630731.804:67): avc: denied { setattr } for pid=2984 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 163.504466][ T29] audit: type=1400 audit(1770630731.804:68): avc: denied { create } for pid=2984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 163.525065][ T29] audit: type=1400 audit(1770630731.804:69): avc: denied { write } for pid=2984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 163.545598][ T29] audit: type=1400 audit(1770630731.804:70): avc: denied { read } for pid=2984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 163.575189][ T29] audit: type=1400 audit(1770630731.894:71): avc: denied { sys_module } for pid=2984 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 163.743164][ T2988] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 163.787302][ T2984] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 165.468011][ T29] kauditd_printk_skb: 8 callbacks suppressed
[ 165.468036][ T29] audit: type=1400 audit(1770630733.784:80): avc: denied { execmem } for pid=2990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 165.534486][ T29] audit: type=1400 audit(1770630733.794:81): avc: denied { create } for pid=2990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 165.554879][ T29] audit: type=1400 audit(1770630733.794:82): avc: denied { sys_admin } for pid=2990 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 165.576484][ T29] audit: type=1400 audit(1770630733.814:83): avc: denied { read } for pid=2991 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 165.598064][ T29] audit: type=1400 audit(1770630733.814:84): avc: denied { open } for pid=2991 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 165.621412][ T29] audit: type=1400 audit(1770630733.814:85): avc: denied { mounton } for pid=2991 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 165.642983][ T29] audit: type=1400 audit(1770630733.874:86): avc: denied { mounton } for pid=2991 comm="syz-executor" path="/root/syzkaller.CZOCyM/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 165.667411][ T29] audit: type=1400 audit(1770630733.874:87): avc: denied { mount } for pid=2991 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 165.690262][ T29] audit: type=1400 audit(1770630733.874:88): avc: denied { mounton } for pid=2991 comm="syz-executor" path="/root/syzkaller.CZOCyM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 165.715983][ T29] audit: type=1400 audit(1770630733.894:89): avc: denied { mount } for pid=2991 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 165.789643][ T2991] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 170.476641][ T29] kauditd_printk_skb: 10 callbacks suppressed
[ 170.476665][ T29] audit: type=1400 audit(1770630738.794:100): avc: denied { create } for pid=3018 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 181.287014][ T3018] syz-executor (3018) used greatest stack depth: 22552 bytes left
[ 182.485404][ T29] audit: type=1401 audit(1770630750.804:101): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 182.536456][ T29] audit: type=1400 audit(1770630750.854:102): avc: denied { create } for pid=3508 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
2026/02/09 09:52:31 executed programs: 0
2026/02/09 09:52:45 executed programs: 2
[ 197.193089][ T29] audit: type=1400 audit(1770630765.514:103): avc: denied { read write } for pid=3964 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 197.216886][ T29] audit: type=1400 audit(1770630765.514:104): avc: denied { open } for pid=3964 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 197.243417][ T29] audit: type=1400 audit(1770630765.554:105): avc: denied { ioctl } for pid=3964 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 197.479262][ T1123] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 197.633780][ T1123] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 197.643152][ T1123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 197.651424][ T1123] usb 4-1: Product: syz
[ 197.655645][ T1123] usb 4-1: Manufacturer: syz
[ 197.660406][ T1123] usb 4-1: SerialNumber: syz
[ 197.677425][ T1123] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 197.702732][ T29] audit: type=1400 audit(1770630766.024:106): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 197.737737][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 197.963972][ T1123] usb 4-1: USB disconnect, device number 2
[ 198.799048][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 198.806631][ T9] ath9k_htc: Failed to initialize the device
[ 198.813897][ T1123] usb 4-1: ath9k_htc: USB layer deinitialized
[ 199.109434][ T1123] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 199.259012][ T1123] usb 4-1: Using ep0 maxpacket: 8
[ 199.265961][ T1123] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 199.277122][ T1123] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 199.287293][ T1123] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 199.297403][ T1123] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 199.310521][ T1123] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 199.320103][ T1123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 199.533575][ T1123] usb 4-1: GET_CAPABILITIES returned 0
[ 199.539343][ T1123] usbtmc 4-1:16.0: can't read capabilities
[ 199.740181][ T29] audit: type=1400 audit(1770630768.064:107): avc: denied { write } for pid=3964 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
2026/02/09 09:53:19 executed programs: 3
[ 231.008969][ T1123] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 231.163554][ T1123] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 231.172742][ T1123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 231.180848][ T1123] usb 5-1: Product: syz
[ 231.185075][ T1123] usb 5-1: Manufacturer: syz
[ 231.189869][ T1123] usb 5-1: SerialNumber: syz
[ 231.202450][ T1123] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 231.220037][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 231.423258][ T38] usb 5-1: USB disconnect, device number 2
[ 232.318981][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 232.326160][ T9] ath9k_htc: Failed to initialize the device
[ 232.333029][ T38] usb 5-1: ath9k_htc: USB layer deinitialized
[ 232.629032][ T38] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 232.779048][ T38] usb 5-1: Using ep0 maxpacket: 8
[ 232.785979][ T38] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 232.797186][ T38] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 232.807529][ T38] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 232.817536][ T38] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 232.830592][ T38] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 232.839888][ T38] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 233.052159][ T38] usb 5-1: GET_CAPABILITIES returned 0
[ 233.057820][ T38] usbtmc 5-1:16.0: can't read capabilities
2026/02/09 09:53:52 executed programs: 4
[ 264.218911][ T38] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 264.372771][ T38] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 264.382021][ T38] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 264.390168][ T38] usb 6-1: Product: syz
[ 264.394402][ T38] usb 6-1: Manufacturer: syz
[ 264.399129][ T38] usb 6-1: SerialNumber: syz
[ 264.410916][ T38] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 264.427497][ T2487] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 264.628911][ T9] usb 6-1: USB disconnect, device number 2
[ 265.518914][ T2487] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 265.526165][ T2487] ath9k_htc: Failed to initialize the device
[ 265.533137][ T9] usb 6-1: ath9k_htc: USB layer deinitialized
[ 265.829153][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 265.978950][ T9] usb 6-1: Using ep0 maxpacket: 8
[ 265.985884][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 265.997099][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 266.008316][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 266.018784][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 266.031897][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 266.041193][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 266.254120][ T9] usb 6-1: GET_CAPABILITIES returned 0
[ 266.259803][ T9] usbtmc 6-1:16.0: can't read capabilities
2026/02/09 09:54:25 executed programs: 5
[ 297.488886][ T38] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 297.642680][ T38] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 297.651866][ T38] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 297.659996][ T38] usb 7-1: Product: syz
[ 297.664227][ T38] usb 7-1: Manufacturer: syz
[ 297.668948][ T38] usb 7-1: SerialNumber: syz
[ 297.681404][ T38] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 297.697924][ T5335] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 297.899589][ T1123] usb 7-1: USB disconnect, device number 2
[ 298.798936][ T5335] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 298.806055][ T5335] ath9k_htc: Failed to initialize the device
[ 298.812916][ T1123] usb 7-1: ath9k_htc: USB layer deinitialized
[ 299.108951][ T1123] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 299.258951][ T1123] usb 7-1: Using ep0 maxpacket: 8
[ 299.265648][ T1123] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 299.276939][ T1123] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 299.287315][ T1123] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 299.297333][ T1123] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 299.310417][ T1123] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 299.319596][ T1123] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 299.539573][ T1123] usb 7-1: GET_CAPABILITIES returned 0
[ 299.545194][ T1123] usbtmc 7-1:16.0: can't read capabilities
2026/02/09 09:54:58 executed programs: 6
[ 330.748897][ T38] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 330.902825][ T38] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 330.912056][ T38] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 330.920188][ T38] usb 8-1: Product: syz
[ 330.924418][ T38] usb 8-1: Manufacturer: syz
[ 330.929123][ T38] usb 8-1: SerialNumber: syz
[ 330.940401][ T38] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 330.967294][ T5792] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 331.193004][ T38] usb 8-1: USB disconnect, device number 2
[ 331.998977][ T5792] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 332.006071][ T5792] ath9k_htc: Failed to initialize the device
[ 332.012843][ T38] usb 8-1: ath9k_htc: USB layer deinitialized
[ 332.308858][ T38] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 332.458837][ T38] usb 8-1: Using ep0 maxpacket: 8
[ 332.466023][ T38] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 332.477215][ T38] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 332.487335][ T38] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 332.497397][ T38] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 332.510501][ T38] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 332.519693][ T38] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 332.732492][ T38] usb 8-1: GET_CAPABILITIES returned 0
[ 332.738160][ T38] usbtmc 8-1:16.0: can't read capabilities
[ 347.599012][ T30] INFO: task syz.3.17:3964 blocked for more than 143 seconds.
[ 347.606614][ T30] Not tainted syzkaller #0
[ 347.611696][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 347.620479][ T30] task:syz.3.17 state:D stack:27128 pid:3964 tgid:3964 ppid:3515 task_flags:0x400040 flags:0x00080002
[ 347.632662][ T30] Call Trace:
[ 347.636023][ T30]
[ 347.639076][ T30] __schedule+0xeb0/0x3e50
[ 347.643625][ T30] ? __pfx___schedule+0x10/0x10
[ 347.648580][ T30] ? find_held_lock+0x2b/0x80
[ 347.653402][ T30] ? schedule+0x2bf/0x390
[ 347.657849][ T30] schedule+0xdd/0x390
[ 347.662083][ T30] schedule_timeout+0x127/0x280
[ 347.667037][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 347.672514][ T30] ? __pfx_process_timeout+0x10/0x10
[ 347.677954][ T30] ? mark_held_locks+0x40/0x70
[ 347.682863][ T30] __wait_for_common+0x2e7/0x4c0
[ 347.687917][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 347.693424][ T30] ? __pfx___wait_for_common+0x10/0x10
[ 347.699031][ T30] usb_start_wait_urb+0x147/0x4c0
[ 347.704157][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 347.709841][ T30] ? __asan_memset+0x23/0x50
[ 347.714547][ T30] usb_bulk_msg+0x22b/0x580
[ 347.719193][ T30] usbtmc_read+0x5f4/0x10b0
[ 347.723812][ T30] ? futex_hash_put+0x43/0x50
[ 347.728611][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 347.733690][ T30] ? security_file_permission+0x21/0x80
[ 347.739406][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 347.744460][ T30] vfs_read+0x1e4/0xb30
[ 347.748848][ T30] ? __pfx_vfs_read+0x10/0x10
[ 347.753637][ T30] ? do_futex+0x192/0x350
[ 347.758051][ T30] ? __pfx_do_futex+0x10/0x10
[ 347.762856][ T30] ? __pfx_do_sys_openat2+0x10/0x10
[ 347.768168][ T30] ? __x64_sys_futex+0x34f/0x4d0
[ 347.773222][ T30] ? __x64_sys_futex+0x358/0x4d0
[ 347.778248][ T30] ksys_read+0x12a/0x250
[ 347.782624][ T30] ? __pfx_ksys_read+0x10/0x10
[ 347.787495][ T30] do_syscall_64+0xc9/0x570
[ 347.792131][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 347.798135][ T30] RIP: 0033:0x7f1c641aaeb9
[ 347.802676][ T30] RSP: 002b:00007ffcc3ddcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 347.811480][ T30] RAX: ffffffffffffffda RBX: 00007f1c64425fa0 RCX: 00007f1c641aaeb9
[ 347.819558][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 347.827659][ T30] RBP: 00007f1c64218c1f R08: 0000000000000000 R09: 0000000000000000
[ 347.835750][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 347.843851][ T30] R13: 00007f1c64425fac R14: 00007f1c64425fa0 R15: 00007f1c64425fa0
[ 347.851961][ T30]
[ 347.863198][ T30]
[ 347.863198][ T30] Showing all locks held in the system:
[ 347.871126][ T30] 6 locks held by kworker/0:0/9:
[ 347.876153][ T30] #0: ffff88810528b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.887156][ T30] #1: ffffc9000009fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.898583][ T30] #2: ffff88810ab08198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 347.907679][ T30] #3: ffff88811dc3f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.917162][ T30] #4: ffff888114b7f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.926599][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 347.936236][ T30] 1 lock held by khungtaskd/30:
[ 347.941177][ T30] #0: ffffffff894da3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 347.951198][ T30] 6 locks held by kworker/1:1/38:
[ 347.956289][ T30] #0: ffff88810528b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 347.967303][ T30] #1: ffffc90000287ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 347.978787][ T30] #2: ffff88810aba8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 347.987836][ T30] #3: ffff888120002198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 347.997591][ T30] #4: ffff888112736160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 348.007014][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 348.016617][ T30] 6 locks held by kworker/0:2/1123:
[ 348.021960][ T30] #0: ffff88810528b548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 348.032954][ T30] #1: ffffc90001e2fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 348.044713][ T30] #2: ffff88810ab90198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 348.053803][ T30] #3: ffff88811e8c2198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 348.063249][ T30] #4: ffff88811e8c5160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 348.072680][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 348.082281][ T30] 2 locks held by kworker/u8:11/1173:
[ 348.087725][ T30] #0: ffff888100089148 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 348.099243][ T30] #1: ffffc90001d7fca8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 348.110933][ T30] 3 locks held by kworker/1:2/2487:
[ 348.116211][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 348.126868][ T30] #1: ffffc900039ffca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 348.138469][ T30] #2: ffff88810ab08198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 348.148860][ T30] 2 locks held by getty/2929:
[ 348.153608][ T30] #0: ffff8881127e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 348.163591][ T30] #1: ffffc900000452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 348.173886][ T30] 1 lock held by syz.3.17/3964:
[ 348.178830][ T30] #0: ffff888117be9cd8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x154/0x10b0
[ 348.188800][ T30] 2 locks held by syz.4.18/4420:
[ 348.193806][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 348.202606][ T30] #1: ffff888117be9cd8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950
[ 348.212129][ T30] 1 lock held by syz.5.19/4875:
[ 348.217090][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 348.225898][ T30] 1 lock held by syz.6.20/5331:
[ 348.230854][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 348.239717][ T30] 3 locks held by kworker/1:3/5335:
[ 348.244989][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 348.255629][ T30] #1: ffffc9000553fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 348.267230][ T30] #2: ffff88810ab90198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 348.277662][ T30] 1 lock held by syz.7.21/5788:
[ 348.282621][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 348.291423][ T30] 3 locks held by kworker/1:4/5792:
[ 348.296689][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 348.307345][ T30] #1: ffffc900066a7ca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 348.318943][ T30] #2: ffff88810aba8198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 348.329361][ T30] 1 lock held by modprobe/5855:
[ 348.334329][ T30]
[ 348.336723][ T30] =============================================
[ 348.336723][ T30]
[ 348.345256][ T30] NMI backtrace for cpu 1
[ 348.345290][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 348.345326][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 348.345350][ T30] Call Trace:
[ 348.345361][ T30]
[ 348.345372][ T30] dump_stack_lvl+0x100/0x190
[ 348.345431][ T30] nmi_cpu_backtrace.cold+0x12d/0x151
[ 348.345467][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 348.345506][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 348.345551][ T30] sys_info+0x141/0x190
[ 348.345585][ T30] watchdog+0xcc3/0xfe0
[ 348.345638][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.345680][ T30] ? __kthread_parkme+0x18c/0x230
[ 348.345714][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.345756][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.345793][ T30] kthread+0x3b3/0x730
[ 348.345834][ T30] ? __pfx_kthread+0x10/0x10
[ 348.345872][ T30] ? ret_from_fork+0x79/0xa20
[ 348.345902][ T30] ? ret_from_fork+0x79/0xa20
[ 348.345938][ T30] ? rcu_is_watching+0x12/0xc0
[ 348.345983][ T30] ? __pfx_kthread+0x10/0x10
[ 348.346024][ T30] ret_from_fork+0x6c3/0xa20
[ 348.346064][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 348.346100][ T30] ? __switch_to+0x7af/0x10b0
[ 348.346140][ T30] ? __pfx_kthread+0x10/0x10
[ 348.346181][ T30] ret_from_fork_asm+0x1a/0x30
[ 348.346240][ T30]
[ 348.346279][ T30] Sending NMI from CPU 1 to CPUs 0:
[ 348.487298][ C0] NMI backtrace for cpu 0
[ 348.487318][ C0] CPU: 0 UID: 0 PID: 5856 Comm: modprobe Not tainted syzkaller #0 PREEMPT(voluntary)
[ 348.487348][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 348.487363][ C0] RIP: 0010:mas_next_slot+0x315/0x18b0
[ 348.487399][ C0] Code: 44 24 48 4d 8b 3f 48 89 44 24 18 48 8b 44 24 50 49 83 c7 01 80 38 00 0f 85 6e 12 00 00 4d 89 7d 08 e8 af f6 63 fa 48 8b 0c 24 <45> 8d 7e 01 48 be 00 00 00 00 00 fc ff df 48 89 c8 83 e1 07 48 c1
[ 348.487425][ C0] RSP: 0018:ffffc9000691f9f8 EFLAGS: 00000293
[ 348.487445][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9000691fb85
[ 348.487461][ C0] RDX: ffff88810f3c8000 RSI: ffffffff874d4551 RDI: ffff88810f3c8000
[ 348.487477][ C0] RBP: ffff88810dbf2800 R08: 0000000000000000 R09: 0000000000000003
[ 348.487492][ C0] R10: 000000000000000e R11: 0000000000000000 R12: 000000000000000e
[ 348.487507][ C0] R13: ffffc9000691fb38 R14: 0000000000000003 R15: 00007fbad9e9e000
[ 348.487523][ C0] FS: 00007fbad9c08c80(0000) GS:ffff88826896a000(0000) knlGS:0000000000000000
[ 348.487551][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 348.487568][ C0] CR2: 00007fbad9c9d2fe CR3: 0000000109bdc000 CR4: 00000000003506f0
[ 348.487584][ C0] Call Trace:
[ 348.487591][ C0]
[ 348.487605][ C0] ? __pfx___up_read+0x10/0x10
[ 348.487636][ C0] ? validate_mm+0x261/0x4e0
[ 348.487675][ C0] ? validate_mm+0x261/0x4e0
[ 348.487713][ C0] mas_find+0x2ad/0x740
[ 348.487738][ C0] validate_mm+0x11d/0x4e0
[ 348.487777][ C0] ? __pfx_validate_mm+0x10/0x10
[ 348.487818][ C0] ? vm_area_alloc+0x1f/0x160
[ 348.487871][ C0] do_brk_flags+0x914/0xf30
[ 348.487916][ C0] ? __pfx_do_brk_flags+0x10/0x10
[ 348.487962][ C0] ? mas_next_slot+0x1003/0x18b0
[ 348.487989][ C0] ? mas_prev_setup.constprop.0+0xb6/0x9c0
[ 348.488033][ C0] ? mas_prev+0x9b/0xf0
[ 348.488058][ C0] ? __pfx_mas_prev+0x10/0x10
[ 348.488089][ C0] __do_sys_brk+0x66f/0xa40
[ 348.488126][ C0] ? import_ubuf+0x1b6/0x220
[ 348.488158][ C0] ? __pfx___do_sys_brk+0x10/0x10
[ 348.488189][ C0] ? __x64_sys_getrandom+0x18b/0x290
[ 348.488224][ C0] ? do_user_addr_fault+0x3e3/0x11d0
[ 348.488263][ C0] do_syscall_64+0xc9/0x570
[ 348.488288][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 348.488314][ C0] RIP: 0033:0x7fbad9dc76c7
[ 348.488333][ C0] Code: 4d 85 ed 74 e0 4d 85 e4 74 0b 48 89 ef 41 ff d4 4c 89 ee eb da 48 89 f7 e8 e6 1c f3 ff eb f1 0f 1f 40 00 b8 0c 00 00 00 0f 05 <48> 8b 15 6a a7 0d 00 48 89 02 48 39 f8 72 0a 31 c0 c3 0f 1f 80 00
[ 348.488356][ C0] RSP: 002b:00007ffc55277358 EFLAGS: 00000206 ORIG_RAX: 000000000000000c
[ 348.488381][ C0] RAX: ffffffffffffffda RBX: 000055a87aa59000 RCX: 00007fbad9dc76c7
[ 348.488399][ C0] RDX: 00007fbad9ea9e50 RSI: 00007fbad9ea2ac0 RDI: 000055a87aa59000
[ 348.488415][ C0] RBP: 000055a87aa38000 R08: 0000000000021000 R09: 0000000000000000
[ 348.488431][ C0] R10: 00007fbad9ea2ac0 R11: 0000000000000206 R12: 00007fbad9ea9e50
[ 348.488446][ C0] R13: 00007fbad9ea2b20 R14: 0000000000001000 R15: 00000000000002b0
[ 348.488471][ C0]
[ 348.489311][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 348.489375][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 348.489476][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 348.489521][ T30] Call Trace:
[ 348.489552][ T30]
[ 348.489584][ T30] dump_stack_lvl+0x100/0x190
[ 348.489734][ T30] vpanic+0x20d/0x630
[ 348.489840][ T30] panic+0xd1/0xd1
[ 348.489926][ T30] ? __pfx_panic+0x10/0x10
[ 348.490036][ T30] ? delay_tsc+0x32/0xc0
[ 348.490152][ T30] ? wq_watchdog_touch+0xec/0x1a0
[ 348.490266][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 348.490410][ T30] ? watchdog.cold+0x198/0x1ca
[ 348.490514][ T30] ? watchdog+0xcd3/0xfe0
[ 348.490628][ T30] watchdog.cold+0x1a9/0x1ca
[ 348.490765][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.490885][ T30] ? __kthread_parkme+0x18c/0x230
[ 348.490976][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.491103][ T30] ? __pfx_watchdog+0x10/0x10
[ 348.491201][ T30] kthread+0x3b3/0x730
[ 348.491322][ T30] ? __pfx_kthread+0x10/0x10
[ 348.491419][ T30] ? ret_from_fork+0x79/0xa20
[ 348.491502][ T30] ? ret_from_fork+0x79/0xa20
[ 348.491587][ T30] ? rcu_is_watching+0x12/0xc0
[ 348.491723][ T30] ? __pfx_kthread+0x10/0x10
[ 348.491861][ T30] ret_from_fork+0x6c3/0xa20
[ 348.491954][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 348.492049][ T30] ? __switch_to+0x7af/0x10b0
[ 348.492160][ T30] ? __pfx_kthread+0x10/0x10
[ 348.492268][ T30] ret_from_fork_asm+0x1a/0x30
[ 348.492423][ T30]
[ 348.937701][ T30] Kernel Offset: disabled
[ 348.942046][ T30] Rebooting in 86400 seconds..