Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. 2026/02/09 04:31:18 parsed 1 programs [ 169.085496][ T29] audit: type=1400 audit(1770611478.470:62): avc: denied { node_bind } for pid=2968 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 169.124459][ T29] audit: type=1400 audit(1770611478.470:63): avc: denied { module_request } for pid=2968 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 171.337850][ T29] audit: type=1400 audit(1770611480.720:64): avc: denied { mounton } for pid=2977 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 171.361943][ T29] audit: type=1400 audit(1770611480.740:65): avc: denied { mount } for pid=2977 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 171.365285][ T2977] cgroup: Unknown subsys name 'net' [ 171.391304][ T29] audit: type=1400 audit(1770611480.770:66): avc: denied { unmount } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 171.516771][ T2977] cgroup: Unknown subsys name 'cpuset' [ 171.526152][ T2977] cgroup: Unknown subsys name 'rlimit' [ 171.744388][ T29] audit: type=1400 audit(1770611481.120:67): avc: denied { setattr } for pid=2977 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.770604][ T29] audit: type=1400 audit(1770611481.130:68): avc: denied { create } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.791414][ T29] audit: type=1400 audit(1770611481.130:69): avc: denied { write } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.812215][ T29] audit: type=1400 audit(1770611481.130:70): avc: denied { read } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.833971][ T29] audit: type=1400 audit(1770611481.170:71): avc: denied { sys_module } for pid=2977 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 171.897766][ T2982] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 171.942296][ T2977] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 173.811483][ T2984] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 174.877747][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 174.877770][ T29] audit: type=1400 audit(1770611484.260:97): avc: denied { create } for pid=3009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.565122][ T29] audit: type=1400 audit(1770611484.940:98): avc: denied { create } for pid=3028 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 175.585555][ T29] audit: type=1400 audit(1770611484.940:99): avc: denied { sys_admin } for pid=3028 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 175.608239][ T29] audit: type=1400 audit(1770611485.000:100): avc: denied { sys_chroot } for pid=3029 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 187.642313][ T3038] syz-executor (3038) used greatest stack depth: 23112 bytes left [ 187.656576][ T29] audit: type=1400 audit(1770611497.040:101): avc: denied { create } for pid=3491 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.751976][ T29] audit: type=1401 audit(1770611497.130:102): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/02/09 04:31:37 executed programs: 0 2026/02/09 04:31:49 executed programs: 2 [ 200.163270][ T29] audit: type=1400 audit(1770611509.540:103): avc: denied { read write } for pid=3961 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.186709][ T29] audit: type=1400 audit(1770611509.540:104): avc: denied { open } for pid=3961 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.210021][ T29] audit: type=1400 audit(1770611509.540:105): avc: denied { ioctl } for pid=3961 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.424607][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 200.578745][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 200.587986][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.596157][ T9] usb 4-1: Product: syz [ 200.600441][ T9] usb 4-1: Manufacturer: syz [ 200.605191][ T9] usb 4-1: SerialNumber: syz [ 200.620428][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 200.644887][ T29] audit: type=1400 audit(1770611510.030:106): avc: denied { firmware_load } for pid=1122 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 200.679649][ T1122] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 200.900874][ T9] usb 4-1: USB disconnect, device number 2 [ 201.774426][ T1122] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 201.781634][ T1122] ath9k_htc: Failed to initialize the device [ 201.789113][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 202.084437][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 202.234422][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 202.241185][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 202.252305][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 202.262381][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.272613][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.285703][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.294798][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.506924][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 202.512614][ T9] usbtmc 4-1:16.0: can't read capabilities [ 202.719343][ T29] audit: type=1400 audit(1770611512.110:107): avc: denied { write } for pid=3961 comm="syz.3.17" name="usbtmc0" dev="devtmpfs" ino=537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 2026/02/09 04:32:19 executed programs: 3 [ 230.654493][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 230.808382][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 230.817794][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.825969][ T9] usb 5-1: Product: syz [ 230.830199][ T9] usb 5-1: Manufacturer: syz [ 230.834987][ T9] usb 5-1: SerialNumber: syz [ 230.847077][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 230.863090][ T1122] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 231.064732][ T2694] usb 5-1: USB disconnect, device number 2 [ 231.934445][ T1122] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 231.941858][ T1122] ath9k_htc: Failed to initialize the device [ 231.948719][ T2694] usb 5-1: ath9k_htc: USB layer deinitialized [ 232.254540][ T2694] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 232.404411][ T2694] usb 5-1: Using ep0 maxpacket: 8 [ 232.411473][ T2694] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 232.422741][ T2694] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 232.432814][ T2694] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.442937][ T2694] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.455959][ T2694] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.465073][ T2694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.677188][ T2694] usb 5-1: GET_CAPABILITIES returned 0 [ 232.682799][ T2694] usbtmc 5-1:16.0: can't read capabilities 2026/02/09 04:32:49 executed programs: 4 [ 260.844392][ T2694] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 260.998038][ T2694] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 261.007359][ T2694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.015444][ T2694] usb 6-1: Product: syz [ 261.019718][ T2694] usb 6-1: Manufacturer: syz [ 261.024451][ T2694] usb 6-1: SerialNumber: syz [ 261.041302][ T2694] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 261.061460][ T37] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 261.285270][ T2694] usb 6-1: USB disconnect, device number 2 [ 262.094436][ T37] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 262.101855][ T37] ath9k_htc: Failed to initialize the device [ 262.108657][ T2694] usb 6-1: ath9k_htc: USB layer deinitialized [ 262.404437][ T2694] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 262.554361][ T2694] usb 6-1: Using ep0 maxpacket: 8 [ 262.561176][ T2694] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 262.572689][ T2694] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 262.582941][ T2694] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.593018][ T2694] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.606057][ T2694] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.615146][ T2694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.827821][ T2694] usb 6-1: GET_CAPABILITIES returned 0 [ 262.833362][ T2694] usbtmc 6-1:16.0: can't read capabilities 2026/02/09 04:33:20 executed programs: 5 [ 290.914339][ T1122] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 291.067875][ T1122] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.077250][ T1122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.085474][ T1122] usb 7-1: Product: syz [ 291.089772][ T1122] usb 7-1: Manufacturer: syz [ 291.094475][ T1122] usb 7-1: SerialNumber: syz [ 291.106349][ T1122] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 291.121748][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 291.323312][ T5190] usb 7-1: USB disconnect, device number 2 [ 292.174367][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 292.181437][ T9] ath9k_htc: Failed to initialize the device [ 292.188246][ T5190] usb 7-1: ath9k_htc: USB layer deinitialized [ 292.484376][ T5190] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 292.634367][ T5190] usb 7-1: Using ep0 maxpacket: 8 [ 292.641054][ T5190] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 292.652198][ T5190] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 292.662286][ T5190] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.672561][ T5190] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.685703][ T5190] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.695001][ T5190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.913975][ T5190] usb 7-1: GET_CAPABILITIES returned 0 [ 292.919619][ T5190] usbtmc 7-1:16.0: can't read capabilities 2026/02/09 04:33:49 executed programs: 6 [ 320.754380][ T4876] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 320.908227][ T4876] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 320.917660][ T4876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.925816][ T4876] usb 8-1: Product: syz [ 320.930011][ T4876] usb 8-1: Manufacturer: syz [ 320.934682][ T4876] usb 8-1: SerialNumber: syz [ 320.944811][ T4876] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 320.966498][ T23] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 321.189178][ T4876] usb 8-1: USB disconnect, device number 2 [ 322.014369][ T23] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 322.021539][ T23] ath9k_htc: Failed to initialize the device [ 322.028745][ T4876] usb 8-1: ath9k_htc: USB layer deinitialized [ 322.324697][ T4876] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 322.474285][ T4876] usb 8-1: Using ep0 maxpacket: 8 [ 322.481115][ T4876] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 322.492413][ T4876] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 322.502553][ T4876] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.512881][ T4876] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.525902][ T4876] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.535117][ T4876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.748579][ T4876] usb 8-1: GET_CAPABILITIES returned 0 [ 322.754146][ T4876] usbtmc 8-1:16.0: can't read capabilities 2026/02/09 04:34:19 executed programs: 7 [ 350.804345][ T1122] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 350.957819][ T1122] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 350.966958][ T1122] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.975096][ T1122] usb 9-1: Product: syz [ 350.979300][ T1122] usb 9-1: Manufacturer: syz [ 350.983910][ T1122] usb 9-1: SerialNumber: syz [ 350.995320][ T1122] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 351.010582][ T3965] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 351.213118][ T5789] usb 9-1: USB disconnect, device number 2 [ 352.094371][ T3965] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 352.101400][ T3965] ath9k_htc: Failed to initialize the device [ 352.108186][ T5789] usb 9-1: ath9k_htc: USB layer deinitialized [ 352.404310][ T5789] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 352.554331][ T5789] usb 9-1: Using ep0 maxpacket: 8 [ 352.561206][ T5789] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 352.572708][ T5789] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 352.582802][ T5789] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.592899][ T5789] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.606024][ T5789] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 352.615137][ T5789] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.827686][ T5789] usb 9-1: GET_CAPABILITIES returned 0 [ 352.833535][ T5789] usbtmc 9-1:16.0: can't read capabilities [ 355.614391][ T30] INFO: task syz.3.17:3961 blocked for more than 143 seconds. [ 355.622269][ T30] Not tainted syzkaller #0 [ 355.627299][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.636036][ T30] task:syz.3.17 state:D stack:27384 pid:3961 tgid:3961 ppid:3512 task_flags:0x400040 flags:0x00080002 [ 355.648909][ T30] Call Trace: [ 355.652267][ T30] [ 355.655252][ T30] __schedule+0xeb0/0x3e50 [ 355.659783][ T30] ? __pfx___schedule+0x10/0x10 [ 355.665101][ T30] ? find_held_lock+0x2b/0x80 [ 355.670023][ T30] ? schedule+0x2bf/0x390 [ 355.674467][ T30] schedule+0xdd/0x390 [ 355.678591][ T30] schedule_timeout+0x127/0x280 [ 355.683533][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 355.689198][ T30] ? __pfx_process_timeout+0x10/0x10 [ 355.694617][ T30] ? mark_held_locks+0x40/0x70 [ 355.699449][ T30] __wait_for_common+0x2e7/0x4c0 [ 355.706214][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 355.711641][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 355.717316][ T30] usb_start_wait_urb+0x147/0x4c0 [ 355.722428][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 355.728262][ T30] ? __asan_memset+0x23/0x50 [ 355.732923][ T30] usb_bulk_msg+0x22b/0x580 [ 355.737724][ T30] usbtmc_read+0x5f4/0x10b0 [ 355.742307][ T30] ? futex_hash_put+0x43/0x50 [ 355.747260][ T30] ? __pfx_usbtmc_read+0x10/0x10 [ 355.752264][ T30] ? security_file_permission+0x21/0x80 [ 355.757951][ T30] ? __pfx_usbtmc_read+0x10/0x10 [ 355.763081][ T30] vfs_read+0x1e4/0xb30 [ 355.767364][ T30] ? __pfx_vfs_read+0x10/0x10 [ 355.772084][ T30] ? do_futex+0x192/0x350 [ 355.776518][ T30] ? __pfx_do_futex+0x10/0x10 [ 355.781252][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 355.786580][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 355.791558][ T30] ? __x64_sys_futex+0x358/0x4d0 [ 355.796582][ T30] ksys_read+0x12a/0x250 [ 355.800886][ T30] ? __pfx_ksys_read+0x10/0x10 [ 355.805780][ T30] do_syscall_64+0xc9/0x570 [ 355.810464][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.816452][ T30] RIP: 0033:0x7fde9dbfaeb9 [ 355.820911][ T30] RSP: 002b:00007fffc9c3cb48 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.829394][ T30] RAX: ffffffffffffffda RBX: 00007fde9de75fa0 RCX: 00007fde9dbfaeb9 [ 355.837570][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 355.845809][ T30] RBP: 00007fde9dc68c1f R08: 0000000000000000 R09: 0000000000000000 [ 355.854011][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.862209][ T30] R13: 00007fde9de75fac R14: 00007fde9de75fa0 R15: 00007fde9de75fa0 [ 355.870313][ T30] [ 355.873396][ T30] [ 355.873396][ T30] Showing all locks held in the system: [ 355.881220][ T30] 3 locks held by kworker/0:0/9: [ 355.886335][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 355.896951][ T30] #1: ffffc9000009fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 355.908658][ T30] #2: ffff88810ab48198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 355.919065][ T30] 3 locks held by kworker/1:0/23: [ 355.924129][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 355.934860][ T30] #1: ffffc9000018fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 355.946723][ T30] #2: ffff88810ab60198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 355.957022][ T30] 1 lock held by khungtaskd/30: [ 355.961906][ T30] #0: ffffffff894da3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 355.971984][ T30] 3 locks held by kworker/1:1/37: [ 355.977104][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 355.987779][ T30] #1: ffffc90000277ca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 355.999573][ T30] #2: ffff88810a750198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 356.009903][ T30] 6 locks held by kworker/1:2/2694: [ 356.015271][ T30] #0: ffff888105afc548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 356.026179][ T30] #1: ffffc9000407fca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 356.037554][ T30] #2: ffff88810a750198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 356.046761][ T30] #3: ffff888106eac198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 356.056479][ T30] #4: ffff888106eab160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 356.066364][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 356.075908][ T30] 2 locks held by getty/2921: [ 356.080674][ T30] #0: ffff888115e080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 356.090805][ T30] #1: ffffc900000452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 356.101117][ T30] 1 lock held by syz.3.17/3961: [ 356.106051][ T30] #0: ffff888115ff5cd8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_read+0x154/0x10b0 [ 356.115608][ T30] 3 locks held by kworker/0:3/3965: [ 356.121158][ T30] #0: ffff888100071948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 356.131744][ T30] #1: ffffc90004c3fca8 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 356.143426][ T30] #2: ffff88810abe8198 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x3b2/0x530 [ 356.153807][ T30] 2 locks held by syz.4.18/4417: [ 356.158902][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 356.167697][ T30] #1: ffff888115ff5cd8 (&data->io_mutex){+.+.}-{4:4}, at: usbtmc_open+0x4c8/0x950 [ 356.177805][ T30] 1 lock held by syz.5.19/4872: [ 356.182775][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 356.191483][ T30] 6 locks held by kworker/1:3/4876: [ 356.196762][ T30] #0: ffff888105afc548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 356.207887][ T30] #1: ffffc90007197ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 356.219429][ T30] #2: ffff88810ab60198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 356.228510][ T30] #3: ffff888105b29198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 356.237856][ T30] #4: ffff888117534160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 356.247291][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 356.256917][ T30] 6 locks held by kworker/1:4/5190: [ 356.262149][ T30] #0: ffff888105afc548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 356.273422][ T30] #1: ffffc90007b37ca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 356.284994][ T30] #2: ffff88810ab48198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 356.294957][ T30] #3: ffff88810009c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 356.304457][ T30] #4: ffff888117a3f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 356.313880][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 356.323485][ T30] 1 lock held by syz.6.20/5329: [ 356.328447][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 356.337190][ T30] 1 lock held by syz.7.21/5784: [ 356.342165][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 356.351209][ T30] 6 locks held by kworker/1:6/5789: [ 356.356750][ T30] #0: ffff888105afc548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 356.367666][ T30] #1: ffffc900062afca8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 356.379063][ T30] #2: ffff88810abe8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 356.388060][ T30] #3: ffff888117a33198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 356.397570][ T30] #4: ffff888117a30160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 356.407038][ T30] #5: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 356.416637][ T30] 1 lock held by syz.8.22/6241: [ 356.421605][ T30] #0: ffffffff8a0d7bb0 (minor_rwsem){++++}-{4:4}, at: usb_open+0x23/0x220 [ 356.430529][ T30] [ 356.432886][ T30] ============================================= [ 356.432886][ T30] [ 356.441399][ T30] NMI backtrace for cpu 1 [ 356.441426][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.441457][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 356.441473][ T30] Call Trace: [ 356.441485][ T30] [ 356.441497][ T30] dump_stack_lvl+0x100/0x190 [ 356.441548][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 356.441579][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 356.441609][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 356.441658][ T30] sys_info+0x141/0x190 [ 356.441686][ T30] watchdog+0xcc3/0xfe0 [ 356.441730][ T30] ? __pfx_watchdog+0x10/0x10 [ 356.441764][ T30] ? __kthread_parkme+0x18c/0x230 [ 356.441793][ T30] ? __pfx_watchdog+0x10/0x10 [ 356.441827][ T30] ? __pfx_watchdog+0x10/0x10 [ 356.441858][ T30] kthread+0x3b3/0x730 [ 356.441894][ T30] ? __pfx_kthread+0x10/0x10 [ 356.441925][ T30] ? ret_from_fork+0x79/0xa20 [ 356.441952][ T30] ? ret_from_fork+0x79/0xa20 [ 356.441978][ T30] ? rcu_is_watching+0x12/0xc0 [ 356.442015][ T30] ? __pfx_kthread+0x10/0x10 [ 356.442051][ T30] ret_from_fork+0x6c3/0xa20 [ 356.442080][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 356.442111][ T30] ? __switch_to+0x7af/0x10b0 [ 356.442145][ T30] ? __pfx_kthread+0x10/0x10 [ 356.442181][ T30] ret_from_fork_asm+0x1a/0x30 [ 356.442240][ T30] [ 356.442251][ T30] Sending NMI from CPU 1 to CPUs 0: [ 356.589088][ C0] NMI backtrace for cpu 0 [ 356.589112][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.589138][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 356.589150][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 356.589185][ C0] Code: 3a a3 01 e9 53 e3 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 12 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 356.589205][ C0] RSP: 0018:ffffffff89207e10 EFLAGS: 00000242 [ 356.589224][ C0] RAX: 0000000000cf06d5 RBX: ffffffff8922eac0 RCX: ffffffff8753acd5 [ 356.589238][ C0] RDX: 0000000000000000 RSI: ffffffff88dec92b RDI: ffffffff878e97a0 [ 356.589252][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed103eac66c5 [ 356.589265][ C0] R10: ffff8881f563362b R11: 0000000000000000 R12: fffffbfff1245d58 [ 356.589278][ C0] R13: 0000000000000000 R14: ffffffff8accd5d0 R15: 0000000000000000 [ 356.589291][ C0] FS: 0000000000000000(0000) GS:ffff88826896a000(0000) knlGS:0000000000000000 [ 356.589313][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.589327][ C0] CR2: 000055d349bdaff8 CR3: 000000011b0c4000 CR4: 00000000003506f0 [ 356.589341][ C0] Call Trace: [ 356.589350][ C0] [ 356.589358][ C0] default_idle+0x9/0x10 [ 356.589377][ C0] default_idle_call+0x6c/0xb0 [ 356.589397][ C0] do_idle+0x35b/0x4b0 [ 356.589420][ C0] ? __pfx_do_idle+0x10/0x10 [ 356.589445][ C0] cpu_startup_entry+0x4f/0x60 [ 356.589466][ C0] rest_init+0x251/0x260 [ 356.589486][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 356.589512][ C0] start_kernel+0x475/0x480 [ 356.589538][ C0] x86_64_start_reservations+0x24/0x30 [ 356.589562][ C0] x86_64_start_kernel+0x122/0x130 [ 356.589586][ C0] common_startup_64+0x13e/0x148 [ 356.589618][ C0] [ 356.773862][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 356.780872][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.790442][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 356.800607][ T30] Call Trace: [ 356.803909][ T30] [ 356.806955][ T30] dump_stack_lvl+0x100/0x190 [ 356.811736][ T30] vpanic+0x20d/0x630 [ 356.815766][ T30] panic+0xd1/0xd1 [ 356.819543][ T30] ? __pfx_panic+0x10/0x10 [ 356.824017][ T30] ? wq_watchdog_touch+0xec/0x1a0 [ 356.829087][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 356.835286][ T30] ? watchdog.cold+0x198/0x1ca [ 356.840107][ T30] ? watchdog+0xcd3/0xfe0 [ 356.844476][ T30] watchdog.cold+0x1a9/0x1ca [ 356.849210][ T30] ? __pfx_watchdog+0x10/0x10 [ 356.853924][ T30] ? __kthread_parkme+0x18c/0x230 [ 356.859158][ T30] ? __pfx_watchdog+0x10/0x10 [ 356.863871][ T30] ? __pfx_watchdog+0x10/0x10 [ 356.868595][ T30] kthread+0x3b3/0x730 [ 356.872708][ T30] ? __pfx_kthread+0x10/0x10 [ 356.877327][ T30] ? ret_from_fork+0x79/0xa20 [ 356.882034][ T30] ? ret_from_fork+0x79/0xa20 [ 356.886729][ T30] ? rcu_is_watching+0x12/0xc0 [ 356.891537][ T30] ? __pfx_kthread+0x10/0x10 [ 356.896336][ T30] ret_from_fork+0x6c3/0xa20 [ 356.900971][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 356.906115][ T30] ? __switch_to+0x7af/0x10b0 [ 356.910933][ T30] ? __pfx_kthread+0x10/0x10 [ 356.915571][ T30] ret_from_fork_asm+0x1a/0x30 [ 356.920395][ T30] [ 356.923575][ T30] Kernel Offset: disabled [ 356.927919][ T30] Rebooting in 86400 seconds..