Warning: Permanently added '10.128.1.200' (ED25519) to the list of known hosts.
2026/02/08 22:49:42 parsed 1 programs
[ 163.145520][ T29] audit: type=1400 audit(1770590982.587:62): avc: denied { node_bind } for pid=2969 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 163.171134][ T29] audit: type=1400 audit(1770590982.597:63): avc: denied { module_request } for pid=2969 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 166.459305][ T29] audit: type=1400 audit(1770590985.907:64): avc: denied { mounton } for pid=2979 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 166.490449][ T29] audit: type=1400 audit(1770590985.937:65): avc: denied { mount } for pid=2979 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 166.505930][ T2979] cgroup: Unknown subsys name 'net'
[ 166.527130][ T29] audit: type=1400 audit(1770590985.977:66): avc: denied { unmount } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 166.709424][ T2979] cgroup: Unknown subsys name 'cpuset'
[ 166.720931][ T2979] cgroup: Unknown subsys name 'rlimit'
[ 166.955052][ T29] audit: type=1400 audit(1770590986.397:67): avc: denied { setattr } for pid=2979 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 166.989627][ T29] audit: type=1400 audit(1770590986.407:68): avc: denied { create } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 167.016117][ T29] audit: type=1400 audit(1770590986.407:69): avc: denied { write } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 167.045083][ T29] audit: type=1400 audit(1770590986.407:70): avc: denied { read } for pid=2979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 167.081291][ T29] audit: type=1400 audit(1770590986.527:71): avc: denied { sys_module } for pid=2979 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 167.221772][ T2983] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 167.305127][ T2979] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 169.272406][ T29] kauditd_printk_skb: 8 callbacks suppressed
[ 169.272430][ T29] audit: type=1400 audit(1770590988.717:80): avc: denied { execmem } for pid=2985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 169.416195][ T29] audit: type=1400 audit(1770590988.857:81): avc: denied { read } for pid=2986 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 169.443443][ T29] audit: type=1400 audit(1770590988.857:82): avc: denied { open } for pid=2986 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 169.470390][ T29] audit: type=1400 audit(1770590988.857:83): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 169.512955][ T29] audit: type=1400 audit(1770590988.957:84): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.NgivNt/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 169.545552][ T29] audit: type=1400 audit(1770590988.957:85): avc: denied { mount } for pid=2986 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 169.575200][ T29] audit: type=1400 audit(1770590988.957:86): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.NgivNt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 169.616647][ T29] audit: type=1400 audit(1770590988.957:87): avc: denied { mount } for pid=2986 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 169.644429][ T29] audit: type=1400 audit(1770590988.957:88): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.NgivNt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 169.681205][ T29] audit: type=1400 audit(1770590988.957:89): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/root/syzkaller.NgivNt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 169.812109][ T2986] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 175.816658][ T29] kauditd_printk_skb: 11 callbacks suppressed
[ 175.816680][ T29] audit: type=1400 audit(1770590995.267:101): avc: denied { create } for pid=3025 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 188.804015][ T3025] syz-executor (3025) used greatest stack depth: 23320 bytes left
[ 189.664112][ T29] audit: type=1400 audit(1770591009.107:102): avc: denied { create } for pid=3497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
2026/02/08 22:50:10 executed programs: 0
2026/02/08 22:50:26 executed programs: 2
[ 207.441522][ T29] audit: type=1400 audit(1770591026.887:103): avc: denied { read write } for pid=3962 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 207.473591][ T29] audit: type=1400 audit(1770591026.887:104): avc: denied { open } for pid=3962 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 207.502285][ T29] audit: type=1400 audit(1770591026.887:105): avc: denied { ioctl } for pid=3962 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 207.706976][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 207.873224][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 207.885409][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 207.895737][ T9] usb 4-1: Product: syz
[ 207.900805][ T9] usb 4-1: Manufacturer: syz
[ 207.906368][ T9] usb 4-1: SerialNumber: syz
[ 207.926487][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 207.995454][ T29] audit: type=1400 audit(1770591027.437:106): avc: denied { firmware_load } for pid=1122 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[ 208.036663][ T1122] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 208.264336][ T9] usb 4-1: USB disconnect, device number 2
[ 209.086634][ T1122] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 209.097184][ T1122] ath9k_htc: Failed to initialize the device
[ 209.107244][ T9] usb 4-1: ath9k_htc: USB layer deinitialized
[ 209.406632][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 209.566677][ T9] usb 4-1: Using ep0 maxpacket: 8
[ 209.575585][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 209.588479][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 209.601042][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 209.618031][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 209.635558][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 209.646344][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 209.861437][ T9] usb 4-1: GET_CAPABILITIES returned 0
[ 209.868539][ T9] usbtmc 4-1:16.0: can't read capabilities
[ 210.062149][ T29] audit: type=1400 audit(1770591029.517:107): avc: denied { write } for pid=3962 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
2026/02/08 22:51:11 executed programs: 3
[ 252.516584][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 252.682096][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 252.694212][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 252.705582][ T9] usb 5-1: Product: syz
[ 252.710893][ T9] usb 5-1: Manufacturer: syz
[ 252.716772][ T9] usb 5-1: SerialNumber: syz
[ 252.729437][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 252.755153][ T1122] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 252.954331][ T38] usb 5-1: USB disconnect, device number 2
[ 253.806563][ T1122] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 253.815537][ T1122] ath9k_htc: Failed to initialize the device
[ 253.823915][ T38] usb 5-1: ath9k_htc: USB layer deinitialized
[ 254.126694][ T38] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 254.286597][ T38] usb 5-1: Using ep0 maxpacket: 8
[ 254.295107][ T38] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 254.311611][ T38] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 254.325510][ T38] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 254.337826][ T38] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 254.353974][ T38] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 254.366794][ T38] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 254.586294][ T38] usb 5-1: GET_CAPABILITIES returned 0
[ 254.593346][ T38] usbtmc 5-1:16.0: can't read capabilities
2026/02/08 22:51:55 executed programs: 4
[ 296.346636][ T38] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 296.513531][ T38] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 296.523247][ T38] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 296.531872][ T38] usb 6-1: Product: syz
[ 296.537422][ T38] usb 6-1: Manufacturer: syz
[ 296.543672][ T38] usb 6-1: SerialNumber: syz
[ 296.559635][ T38] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 296.580957][ T2351] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 296.785329][ T1122] usb 6-1: USB disconnect, device number 2
[ 297.646675][ T2351] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 297.658158][ T2351] ath9k_htc: Failed to initialize the device
[ 297.667464][ T1122] usb 6-1: ath9k_htc: USB layer deinitialized
[ 297.966742][ T1122] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 298.126825][ T1122] usb 6-1: Using ep0 maxpacket: 8
[ 298.135728][ T1122] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 298.149116][ T1122] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 298.160994][ T1122] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 298.174724][ T1122] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 298.191245][ T1122] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 298.203258][ T1122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 298.419296][ T1122] usb 6-1: GET_CAPABILITIES returned 0
[ 298.426660][ T1122] usbtmc 6-1:16.0: can't read capabilities
2026/02/08 22:52:38 executed programs: 5
[ 339.416581][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 339.572293][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 339.582781][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 339.591732][ T9] usb 7-1: Product: syz
[ 339.597406][ T9] usb 7-1: Manufacturer: syz
[ 339.602907][ T9] usb 7-1: SerialNumber: syz
[ 339.617189][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 339.636293][ T3966] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 339.838114][ T38] usb 7-1: USB disconnect, device number 2
[ 340.686564][ T3966] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 340.695532][ T3966] ath9k_htc: Failed to initialize the device
[ 340.702916][ T38] usb 7-1: ath9k_htc: USB layer deinitialized
[ 341.006532][ T38] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 341.166573][ T38] usb 7-1: Using ep0 maxpacket: 8
[ 341.177586][ T38] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 341.192920][ T38] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 341.204443][ T38] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 341.216075][ T38] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 341.233694][ T38] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 341.244143][ T38] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 341.460601][ T38] usb 7-1: GET_CAPABILITIES returned 0
[ 341.466674][ T38] usbtmc 7-1:16.0: can't read capabilities
[ 370.846728][ T30] INFO: task syz.3.17:3962 blocked for more than 143 seconds.
[ 370.854311][ T30] Not tainted syzkaller #0
[ 370.859648][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 370.868529][ T30] task:syz.3.17 state:D stack:26744 pid:3962 tgid:3962 ppid:3513 task_flags:0x400040 flags:0x00080002
[ 370.881271][ T30] Call Trace:
[ 370.884625][ T30]
[ 370.887757][ T30] __schedule+0xeb0/0x3e50
[ 370.892370][ T30] ? __pfx___schedule+0x10/0x10
[ 370.897555][ T30] ? find_held_lock+0x2b/0x80
[ 370.902326][ T30] ? schedule+0x2bf/0x390
[ 370.906990][ T30] schedule+0xdd/0x390
[ 370.911142][ T30] schedule_timeout+0x127/0x280
[ 370.916328][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 370.922067][ T30] ? __pfx_process_timeout+0x10/0x10
[ 370.927739][ T30] ? mark_held_locks+0x40/0x70
[ 370.932680][ T30] __wait_for_common+0x2e7/0x4c0
[ 370.937850][ T30] ? __pfx_schedule_timeout+0x10/0x10
[ 370.943320][ T30] ? __pfx___wait_for_common+0x10/0x10
[ 370.949460][ T30] usb_start_wait_urb+0x147/0x4c0
[ 370.954754][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10
[ 370.961236][ T30] ? __asan_memset+0x23/0x50
[ 370.966003][ T30] usb_bulk_msg+0x22b/0x580
[ 370.972006][ T30] usbtmc_read+0x5f4/0x10b0
[ 370.977355][ T30] ? futex_hash_put+0x43/0x50
[ 370.983303][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 370.989969][ T30] ? security_file_permission+0x21/0x80
[ 370.995802][ T30] ? __pfx_usbtmc_read+0x10/0x10
[ 371.001305][ T30] vfs_read+0x1e4/0xb30
[ 371.005830][ T30] ? __pfx_vfs_read+0x10/0x10
[ 371.011564][ T30] ? do_futex+0x192/0x350
[ 371.018714][ T30] ? __pfx_do_futex+0x10/0x10
[ 371.024084][ T30] ? __pfx_do_sys_openat2+0x10/0x10
[ 371.029427][ T30] ? __x64_sys_futex+0x34f/0x4d0
[ 371.034430][ T30] ? __x64_sys_futex+0x358/0x4d0
[ 371.039828][ T30] ksys_read+0x12a/0x250
[ 371.044251][ T30] ? __pfx_ksys_read+0x10/0x10
[ 371.049243][ T30] do_syscall_64+0xc9/0x570
[ 371.053809][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 371.059843][ T30] RIP: 0033:0x7fd4021caeb9
[ 371.064481][ T30] RSP: 002b:00007ffc10546ca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 371.073083][ T30] RAX: ffffffffffffffda RBX: 00007fd402445fa0 RCX: 00007fd4021caeb9
[ 371.081670][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 371.090083][ T30] RBP: 00007fd402238c1f R08: 0000000000000000 R09: 0000000000000000
[ 371.098855][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 371.107291][ T30] R13: 00007fd402445fac R14: 00007fd402445fa0 R15: 00007fd402445fa0
[ 371.115530][ T30]
[ 371.119264][ T30]
[ 371.119264][ T30] Showing all locks held in the system:
[ 371.127219][ T30] 1 lock held by khungtaskd/30:
[ 371.132829][ T30] #0: ffffffff894da3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 371.143386][ T30] 6 locks held by kworker/1:1/38:
[ 371.148615][ T30] #0: ffff8881062b0948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 371.159741][ T30] #1: ffffc90000287ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 371.171883][ T30] #2: ffff88810a791198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 371.181117][ T30] #3: ffff888117acd198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 371.190619][ T30] #4: ffff888117ace160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 371.200207][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 371.210067][ T30] 2 locks held by kworker/u8:6/99:
[ 371.215250][ T30] #0: ffff888100089148 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 371.226942][ T30] #1: ffffc9000145fca8 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 371.238737][ T30] 6 locks held by kworker/0:2/1122:
[ 371.244335][ T30] #0: ffff8881062b0948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 371.255773][ T30] #1: ffffc90001c7fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 371.268865][ T30] #2: ffff88810a779198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 371.278186][ T30] #3: ffff88811ce7b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 371.288287][ T30] #4: ffff88811ce7d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0
[ 371.298319][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570
[ 371.308307][ T30] 3 locks held by kworker/1:2/2351:
[ 371.313569][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 371.324553][ T30] #1: ffffc900033bfca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 371.337774][ T30] #2: ffff88810a779198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 371.348297][ T30] 2 locks held by getty/2923:
[ 371.353024][ T30] #0: ffff888115cc10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 371.363051][ T30] #1: ffffc900000452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 371.373403][ T30] 1 lock held by syz.3.17/3962:
[ 371.378704][ T30] #0: ffff888121259cd8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x154/0x10b0
[ 371.388757][ T30] 3 locks held by kworker/0:3/3966:
[ 371.394103][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 371.405959][ T30] #1: ffffc900005a7ca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 371.418435][ T30] #2: ffff88810a791198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530
[ 371.429327][ T30] 2 locks held by syz.4.18/4418:
[ 371.434595][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 371.444095][ T30] #1: ffff888121259cd8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950
[ 371.453595][ T30] 1 lock held by syz.5.19/4874:
[ 371.458648][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 371.467860][ T30] 1 lock held by syz.6.20/5330:
[ 371.474003][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220
[ 371.483888][ T30] 1 lock held by modprobe/5657:
[ 371.489512][ T30]
[ 371.492430][ T30] =============================================
[ 371.492430][ T30]
[ 371.502137][ T30] NMI backtrace for cpu 1
[ 371.502176][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 371.502214][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 371.502232][ T30] Call Trace:
[ 371.502242][ T30]
[ 371.502254][ T30] dump_stack_lvl+0x100/0x190
[ 371.502313][ T30] nmi_cpu_backtrace.cold+0x12d/0x151
[ 371.502351][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 371.502390][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 371.502435][ T30] sys_info+0x141/0x190
[ 371.502470][ T30] watchdog+0xcc3/0xfe0
[ 371.502525][ T30] ? __pfx_watchdog+0x10/0x10
[ 371.502570][ T30] ? __kthread_parkme+0x18c/0x230
[ 371.502605][ T30] ? __pfx_watchdog+0x10/0x10
[ 371.502649][ T30] ? __pfx_watchdog+0x10/0x10
[ 371.502690][ T30] kthread+0x3b3/0x730
[ 371.502731][ T30] ? __pfx_kthread+0x10/0x10
[ 371.502764][ T30] ? ret_from_fork+0x79/0xa20
[ 371.502794][ T30] ? ret_from_fork+0x79/0xa20
[ 371.502823][ T30] ? rcu_is_watching+0x12/0xc0
[ 371.502866][ T30] ? __pfx_kthread+0x10/0x10
[ 371.502908][ T30] ret_from_fork+0x6c3/0xa20
[ 371.502950][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 371.502987][ T30] ? __switch_to+0x7af/0x10b0
[ 371.503030][ T30] ? __pfx_kthread+0x10/0x10
[ 371.503073][ T30] ret_from_fork_asm+0x1a/0x30
[ 371.503133][ T30]
[ 371.503145][ T30] Sending NMI from CPU 1 to CPUs 0:
[ 371.660123][ C0] NMI backtrace for cpu 0
[ 371.660146][ C0] CPU: 0 UID: 0 PID: 5658 Comm: modprobe Not tainted syzkaller #0 PREEMPT(voluntary)
[ 371.660180][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 371.660201][ C0] RIP: 0033:0x7fee71d09e72
[ 371.660222][ C0] Code: 8b b3 68 03 00 00 4c 89 f7 e8 fa cc ff ff e9 99 fe ff ff 0f 1f 44 00 00 41 56 49 89 fa 44 89 c0 41 55 49 89 d5 41 0f b7 51 06 <41> 54 55 89 cd 41 0f b6 49 04 53 4c 89 cb 4c 8b 64 24 40 83 e1 0f
[ 371.660247][ C0] RSP: 002b:00007ffc017656b8 EFLAGS: 00000206
[ 371.660267][ C0] RAX: 0000000000000001 RBX: 00007fee71cf75f0 RCX: 0000000000000009
[ 371.660283][ C0] RDX: 000000000000000d RSI: 00007fee71c39160 RDI: 00007fee71c3bb68
[ 371.660299][ C0] RBP: 000000000f663356 R08: 0000000000000001 R09: 00007fee71a69590
[ 371.660314][ C0] R10: 00007fee71c3bb68 R11: 00007fee71cf70c0 R12: 00007fee71a5b41c
[ 371.660330][ C0] R13: 00007fee719fae00 R14: 00007fee71a5d174 R15: 00007fee71a70dd8
[ 371.660346][ C0] FS: 00007fee7198cc80 GS: 0000000000000000
[ 371.769333][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 371.776493][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary)
[ 371.786616][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 371.797262][ T30] Call Trace:
[ 371.800596][ T30]
[ 371.804191][ T30] dump_stack_lvl+0x100/0x190
[ 371.810364][ T30] vpanic+0x20d/0x630
[ 371.814429][ T30] panic+0xd1/0xd1
[ 371.818314][ T30] ? __pfx_panic+0x10/0x10
[ 371.822799][ T30] ? wq_watchdog_touch+0xec/0x1a0
[ 371.827984][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 371.834211][ T30] ? watchdog.cold+0x198/0x1ca
[ 371.839046][ T30] ? watchdog+0xcd3/0xfe0
[ 371.843546][ T30] watchdog.cold+0x1a9/0x1ca
[ 371.848349][ T30] ? __pfx_watchdog+0x10/0x10
[ 371.853199][ T30] ? __kthread_parkme+0x18c/0x230
[ 371.858391][ T30] ? __pfx_watchdog+0x10/0x10
[ 371.863141][ T30] ? __pfx_watchdog+0x10/0x10
[ 371.868322][ T30] kthread+0x3b3/0x730
[ 371.872462][ T30] ? __pfx_kthread+0x10/0x10
[ 371.877142][ T30] ? ret_from_fork+0x79/0xa20
[ 371.881916][ T30] ? ret_from_fork+0x79/0xa20
[ 371.886919][ T30] ? rcu_is_watching+0x12/0xc0
[ 371.891861][ T30] ? __pfx_kthread+0x10/0x10
[ 371.896892][ T30] ret_from_fork+0x6c3/0xa20
[ 371.901816][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 371.907531][ T30] ? __switch_to+0x7af/0x10b0
[ 371.913189][ T30] ? __pfx_kthread+0x10/0x10
[ 371.918252][ T30] ret_from_fork_asm+0x1a/0x30
[ 371.923309][ T30]
[ 371.926976][ T30] Kernel Offset: disabled
[ 371.932160][ T30] Rebooting in 86400 seconds..