Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. 2026/08/09 19:13:02 parsed 1 programs 2026/08/09 19:13:02 serving rpc on tcp://46031 [ 80.376553][ T4286] cgroup: Unknown subsys name 'net' [ 80.476969][ T4286] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.021478][ T4286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 83.654799][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 83.702747][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.710909][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.719022][ T4304] device bridge_slave_0 entered promiscuous mode [ 83.728868][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.736010][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.743905][ T4304] device bridge_slave_1 entered promiscuous mode [ 83.767610][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.779690][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.801516][ T4304] team0: Port device team_slave_0 added [ 83.808880][ T4304] team0: Port device team_slave_1 added [ 83.828063][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.835076][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.861214][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.874424][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.881473][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.907607][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.940617][ T4304] device hsr_slave_0 entered promiscuous mode [ 83.947882][ T4304] device hsr_slave_1 entered promiscuous mode [ 84.045756][ T4304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.056051][ T4304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.067535][ T4304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.076806][ T4304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.100712][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.107982][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.116028][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.123585][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.173427][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.185966][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.196960][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.205960][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.215461][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 84.231578][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.246157][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.255374][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.262518][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.274658][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.284195][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.291520][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.320972][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.339541][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.352489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.368050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.380899][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.393275][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.550842][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.558358][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.573312][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.590443][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.610961][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.619666][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.627375][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.637484][ T4304] device veth0_vlan entered promiscuous mode [ 84.649537][ T4304] device veth1_vlan entered promiscuous mode [ 84.670585][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.680032][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.697184][ T4304] device veth0_macvtap entered promiscuous mode [ 84.707185][ T4304] device veth1_macvtap entered promiscuous mode [ 84.722919][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.730597][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.740289][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.748206][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.757006][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.770878][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.778650][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.788361][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.799632][ T4304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.809030][ T4304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.817804][ T4304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.826565][ T4304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.951999][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.022352][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.031945][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.044810][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.066593][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.074635][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.083122][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.771261][ T4355] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.779884][ T4355] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.787644][ T4355] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.796555][ T4355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.804181][ T4355] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.811695][ T4355] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.850531][ T129] cfg80211: failed to load regulatory.db [ 87.430428][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/09 19:13:11 executed programs: 0 [ 88.185432][ T4357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.193617][ T4357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.201791][ T4357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.211248][ T4357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.220154][ T4357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.227463][ T4357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.337321][ T4376] chnl_net:caif_netlink_parms(): no params data found [ 88.382592][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.390271][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.398215][ T4376] device bridge_slave_0 entered promiscuous mode [ 88.407100][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.414497][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.422608][ T4376] device bridge_slave_1 entered promiscuous mode [ 88.443189][ T4376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.454261][ T4376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.480285][ T4376] team0: Port device team_slave_0 added [ 88.488709][ T4376] team0: Port device team_slave_1 added [ 88.508136][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.515358][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.541767][ T4376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.554257][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.561291][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.587375][ T4376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.616410][ T4376] device hsr_slave_0 entered promiscuous mode [ 88.623312][ T4376] device hsr_slave_1 entered promiscuous mode [ 88.630656][ T4376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.638951][ T4376] Cannot create hsr debugfs directory [ 89.837941][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.920722][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.289733][ T4355] Bluetooth: hci0: command 0x0409 tx timeout [ 90.755831][ T57] device hsr_slave_0 left promiscuous mode [ 90.763975][ T57] device hsr_slave_1 left promiscuous mode [ 90.772109][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.782570][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.793619][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.802596][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.812045][ T57] device bridge_slave_1 left promiscuous mode [ 90.819205][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.836660][ T57] device bridge_slave_0 left promiscuous mode [ 90.843430][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.876236][ T57] device veth1_macvtap left promiscuous mode [ 90.882944][ T57] device veth0_macvtap left promiscuous mode [ 90.892153][ T57] device veth1_vlan left promiscuous mode [ 90.898405][ T57] device veth0_vlan left promiscuous mode [ 91.321947][ T57] team0 (unregistering): Port device team_slave_1 removed [ 91.353099][ T57] team0 (unregistering): Port device team_slave_0 removed [ 91.385789][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.417217][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.613513][ T57] bond0 (unregistering): Released all slaves [ 91.716183][ T4376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.726272][ T4376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.736082][ T4376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.746598][ T4376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.811394][ T4376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.836539][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.845831][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.856402][ T4376] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.867036][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.876025][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.885638][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.892846][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.902916][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.929859][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.939679][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.948555][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.955644][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.965809][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.984871][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.996067][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.006797][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.015400][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.027617][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.036927][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.059817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.069596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.081126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.089774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.100901][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.368731][ T4355] Bluetooth: hci0: command 0x041b tx timeout [ 92.423893][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.432167][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.463843][ T4376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.490930][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.500456][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.547635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.556424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.565592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.573525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.584074][ T4376] device veth0_vlan entered promiscuous mode [ 92.595122][ T4376] device veth1_vlan entered promiscuous mode [ 92.612906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.621024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.630560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.639718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.652323][ T4376] device veth0_macvtap entered promiscuous mode [ 92.661456][ T4376] device veth1_macvtap entered promiscuous mode [ 92.676102][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.683659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.692766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.700911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.710063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.723346][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.730790][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.741122][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.752658][ T4376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.761595][ T4376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.771101][ T4376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.779964][ T4376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.831679][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.843914][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.852995][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.872947][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.881030][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.889061][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.208767][ T4428] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.404321][ T4428] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 93.414220][ T4428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.422987][ T4428] usb 1-1: Product: syz [ 93.427200][ T4428] usb 1-1: Manufacturer: syz [ 93.432291][ T4428] usb 1-1: SerialNumber: syz [ 93.856321][ T4428] ------------[ cut here ]------------ [ 93.862265][ T4428] URB ffff888145b67700 submitted while active [ 93.873447][ T4428] WARNING: CPU: 1 PID: 4428 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfb8/0x18d0 [ 93.883363][ T4428] Modules linked in: [ 93.887341][ T4428] CPU: 1 PID: 4428 Comm: kworker/1:10 Not tainted syzkaller #0 [ 93.895107][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.905240][ T4428] Workqueue: usb_hub_wq hub_event [ 93.910387][ T4428] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 93.916030][ T4428] Code: 2e 8b 44 89 ea e8 49 d3 fd 03 e9 bb fb ff ff e8 de 18 57 fb c6 05 32 8d e1 07 01 48 c7 c7 40 e8 2e 8b 48 89 de e8 18 a3 22 fb <0f> 0b e9 be f0 ff ff e8 bc 18 57 fb eb 1f e8 b5 18 57 fb 44 8b 64 [ 93.935776][ T4428] RSP: 0018:ffffc90003386d80 EFLAGS: 00010246 [ 93.941936][ T4428] RAX: e4c05e3398feca00 RBX: ffff888145b67700 RCX: ffff888079311e00 [ 93.950100][ T4428] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 93.958130][ T4428] RBP: 1ffff1100406a00a R08: ffffc90003386a07 R09: 1ffff92000670d40 [ 93.966339][ T4428] R10: dffffc0000000000 R11: fffff52000670d41 R12: 0000000000000cc0 [ 93.974492][ T4428] R13: 1ffff1100406a009 R14: ffff888145b67708 R15: dffffc0000000000 [ 93.982887][ T4428] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 93.991933][ T4428] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.998576][ T4428] CR2: 00007fd3af070000 CR3: 000000005cc63000 CR4: 00000000003506e0 [ 94.006842][ T4428] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.014872][ T4428] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.023332][ T4428] Call Trace: [ 94.026616][ T4428] [ 94.029592][ T4428] ? port100_send_cmd_async+0xc60/0xc60 [ 94.035170][ T4428] ? skb_put+0x10e/0x200 [ 94.039497][ T4428] port100_send_cmd_async+0x81c/0xc60 [ 94.044908][ T4428] port100_set_command_type+0x1c4/0x380 [ 94.050529][ T4428] ? port100_get_command_type_mask+0x390/0x390 [ 94.056911][ T4428] ? lockdep_init_map_type+0x98/0x8d0 [ 94.062405][ T4428] port100_probe+0x9ea/0xdb0 [ 94.067064][ T4428] usb_probe_interface+0x5be/0xae0 [ 94.072325][ T4428] ? usb_register_driver+0x3c0/0x3c0 [ 94.077641][ T4428] really_probe+0x24a/0xb40 [ 94.082300][ T4428] ? pm_runtime_barrier+0x147/0x1c0 [ 94.087596][ T4428] __driver_probe_device+0x1f5/0x390 [ 94.092935][ T4428] driver_probe_device+0x4f/0x420 [ 94.097985][ T4428] __device_attach_driver+0x2c6/0x510 [ 94.103401][ T4428] ? coredump_store+0x90/0x90 [ 94.108114][ T4428] bus_for_each_drv+0x184/0x210 [ 94.113022][ T4428] ? coredump_store+0x90/0x90 [ 94.117828][ T4428] ? subsys_find_device_by_id+0x360/0x360 [ 94.123711][ T4428] ? __mutex_lock+0x1ab/0xae0 [ 94.128479][ T4428] __device_attach+0x2a7/0x480 [ 94.133291][ T4428] ? device_attach+0x20/0x20 [ 94.137912][ T4428] ? kobject_uevent_env+0x364/0x890 [ 94.143186][ T4428] bus_probe_device+0xba/0x1d0 [ 94.147990][ T4428] device_add+0xbcf/0x1050 [ 94.152462][ T4428] usb_set_configuration+0x19d5/0x2030 [ 94.157956][ T4428] usb_generic_driver_probe+0x89/0x150 [ 94.163474][ T4428] usb_probe_device+0x126/0x250 [ 94.168352][ T4428] ? usb_register_device_driver+0x230/0x230 [ 94.174664][ T4428] really_probe+0x24a/0xb40 [ 94.179374][ T4428] ? pm_runtime_barrier+0x147/0x1c0 [ 94.184712][ T4428] __driver_probe_device+0x1f5/0x390 [ 94.190078][ T4428] driver_probe_device+0x4f/0x420 [ 94.195145][ T4428] __device_attach_driver+0x2c6/0x510 [ 94.200572][ T4428] ? coredump_store+0x90/0x90 [ 94.205290][ T4428] bus_for_each_drv+0x184/0x210 [ 94.210316][ T4428] ? coredump_store+0x90/0x90 [ 94.215035][ T4428] ? subsys_find_device_by_id+0x360/0x360 [ 94.220996][ T4428] __device_attach+0x2a7/0x480 [ 94.225829][ T4428] ? device_attach+0x20/0x20 [ 94.230511][ T4428] ? kobject_uevent_env+0x364/0x890 [ 94.235740][ T4428] bus_probe_device+0xba/0x1d0 [ 94.240576][ T4428] device_add+0xbcf/0x1050 [ 94.245047][ T4428] usb_new_device+0xa01/0x15e0 [ 94.249900][ T4428] ? usb_disconnect+0x8a0/0x8a0 [ 94.254779][ T4428] ? _raw_spin_unlock_irq+0x1f/0x40 [ 94.260024][ T4428] ? lockdep_hardirqs_on+0x94/0x140 [ 94.265335][ T4428] hub_event+0x2b2f/0x5200 [ 94.269946][ T4428] ? hub_post_resume+0x120/0x120 [ 94.274948][ T4428] ? read_lock_is_recursive+0x10/0x10 [ 94.280427][ T4428] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 94.286377][ T4428] ? _raw_spin_unlock+0x40/0x40 [ 94.291508][ T4428] ? _raw_spin_unlock_irq+0x1f/0x40 [ 94.296821][ T4428] ? process_one_work+0x7b4/0x1160 [ 94.301990][ T4428] process_one_work+0x8ab/0x1160 [ 94.307138][ T4428] ? worker_detach_from_pool+0x240/0x240 [ 94.312841][ T4428] ? _raw_spin_lock_irq+0xb7/0xf0 [ 94.317889][ T4428] ? _raw_spin_lock_irqsave+0x100/0x100 [ 94.323500][ T4428] ? wq_worker_running+0x97/0x190 [ 94.328575][ T4428] worker_thread+0xaf5/0x12a0 [ 94.333274][ T4428] kthread+0x29d/0x330 [ 94.337355][ T4428] ? worker_clr_flags+0x1a0/0x1a0 [ 94.342433][ T4428] ? kthread_blkcg+0xd0/0xd0 [ 94.347072][ T4428] ret_from_fork+0x1f/0x30 [ 94.351584][ T4428] [ 94.354804][ T4428] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.362622][ T4428] CPU: 1 PID: 4428 Comm: kworker/1:10 Not tainted syzkaller #0 [ 94.370173][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.380330][ T4428] Workqueue: usb_hub_wq hub_event [ 94.385380][ T4428] Call Trace: [ 94.388751][ T4428] [ 94.391692][ T4428] dump_stack_lvl+0x188/0x24e [ 94.396474][ T4428] ? memcpy+0x3c/0x60 [ 94.400468][ T4428] ? show_regs_print_info+0x12/0x12 [ 94.405679][ T4428] ? load_image+0x410/0x410 [ 94.410485][ T4428] panic+0x2d3/0x710 [ 94.414610][ T4428] ? bpf_jit_dump+0xd0/0xd0 [ 94.419161][ T4428] ? ret_from_fork+0x1f/0x30 [ 94.423778][ T4428] __warn+0x2f8/0x4f0 [ 94.427764][ T4428] ? usb_submit_urb+0xfb8/0x18d0 [ 94.432710][ T4428] ? usb_submit_urb+0xfb8/0x18d0 [ 94.437673][ T4428] report_bug+0x2ba/0x4f0 [ 94.442037][ T4428] ? usb_submit_urb+0xfb8/0x18d0 [ 94.447196][ T4428] handle_bug+0x3a/0x70 [ 94.451462][ T4428] exc_invalid_op+0x16/0x40 [ 94.455990][ T4428] asm_exc_invalid_op+0x16/0x20 [ 94.460851][ T4428] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 94.466410][ T4428] Code: 2e 8b 44 89 ea e8 49 d3 fd 03 e9 bb fb ff ff e8 de 18 57 fb c6 05 32 8d e1 07 01 48 c7 c7 40 e8 2e 8b 48 89 de e8 18 a3 22 fb <0f> 0b e9 be f0 ff ff e8 bc 18 57 fb eb 1f e8 b5 18 57 fb 44 8b 64 [ 94.486291][ T4428] RSP: 0018:ffffc90003386d80 EFLAGS: 00010246 [ 94.492464][ T4428] RAX: e4c05e3398feca00 RBX: ffff888145b67700 RCX: ffff888079311e00 [ 94.500531][ T4428] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 94.508510][ T4428] RBP: 1ffff1100406a00a R08: ffffc90003386a07 R09: 1ffff92000670d40 [ 94.516576][ T4428] R10: dffffc0000000000 R11: fffff52000670d41 R12: 0000000000000cc0 [ 94.524642][ T4428] R13: 1ffff1100406a009 R14: ffff888145b67708 R15: dffffc0000000000 [ 94.532638][ T4428] ? port100_send_cmd_async+0xc60/0xc60 [ 94.538219][ T4428] ? skb_put+0x10e/0x200 [ 94.542477][ T4428] port100_send_cmd_async+0x81c/0xc60 [ 94.547884][ T4428] port100_set_command_type+0x1c4/0x380 [ 94.553528][ T4428] ? port100_get_command_type_mask+0x390/0x390 [ 94.559779][ T4428] ? lockdep_init_map_type+0x98/0x8d0 [ 94.565180][ T4428] port100_probe+0x9ea/0xdb0 [ 94.569785][ T4428] usb_probe_interface+0x5be/0xae0 [ 94.574916][ T4428] ? usb_register_driver+0x3c0/0x3c0 [ 94.580214][ T4428] really_probe+0x24a/0xb40 [ 94.584733][ T4428] ? pm_runtime_barrier+0x147/0x1c0 [ 94.590147][ T4428] __driver_probe_device+0x1f5/0x390 [ 94.595532][ T4428] driver_probe_device+0x4f/0x420 [ 94.600656][ T4428] __device_attach_driver+0x2c6/0x510 [ 94.606059][ T4428] ? coredump_store+0x90/0x90 [ 94.610755][ T4428] bus_for_each_drv+0x184/0x210 [ 94.615620][ T4428] ? coredump_store+0x90/0x90 [ 94.620390][ T4428] ? subsys_find_device_by_id+0x360/0x360 [ 94.626115][ T4428] ? __mutex_lock+0x1ab/0xae0 [ 94.630820][ T4428] __device_attach+0x2a7/0x480 [ 94.635601][ T4428] ? device_attach+0x20/0x20 [ 94.640307][ T4428] ? kobject_uevent_env+0x364/0x890 [ 94.645545][ T4428] bus_probe_device+0xba/0x1d0 [ 94.650581][ T4428] device_add+0xbcf/0x1050 [ 94.655015][ T4428] usb_set_configuration+0x19d5/0x2030 [ 94.660596][ T4428] usb_generic_driver_probe+0x89/0x150 [ 94.666174][ T4428] usb_probe_device+0x126/0x250 [ 94.671150][ T4428] ? usb_register_device_driver+0x230/0x230 [ 94.677221][ T4428] really_probe+0x24a/0xb40 [ 94.681819][ T4428] ? pm_runtime_barrier+0x147/0x1c0 [ 94.687024][ T4428] __driver_probe_device+0x1f5/0x390 [ 94.692319][ T4428] driver_probe_device+0x4f/0x420 [ 94.697446][ T4428] __device_attach_driver+0x2c6/0x510 [ 94.702918][ T4428] ? coredump_store+0x90/0x90 [ 94.707620][ T4428] bus_for_each_drv+0x184/0x210 [ 94.712478][ T4428] ? coredump_store+0x90/0x90 [ 94.717163][ T4428] ? subsys_find_device_by_id+0x360/0x360 [ 94.722899][ T4428] __device_attach+0x2a7/0x480 [ 94.727674][ T4428] ? device_attach+0x20/0x20 [ 94.732303][ T4428] ? kobject_uevent_env+0x364/0x890 [ 94.737600][ T4428] bus_probe_device+0xba/0x1d0 [ 94.742391][ T4428] device_add+0xbcf/0x1050 [ 94.746824][ T4428] usb_new_device+0xa01/0x15e0 [ 94.751691][ T4428] ? usb_disconnect+0x8a0/0x8a0 [ 94.756624][ T4428] ? _raw_spin_unlock_irq+0x1f/0x40 [ 94.761917][ T4428] ? lockdep_hardirqs_on+0x94/0x140 [ 94.767131][ T4428] hub_event+0x2b2f/0x5200 [ 94.771599][ T4428] ? hub_post_resume+0x120/0x120 [ 94.776646][ T4428] ? read_lock_is_recursive+0x10/0x10 [ 94.782118][ T4428] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 94.788192][ T4428] ? _raw_spin_unlock+0x40/0x40 [ 94.793178][ T4428] ? _raw_spin_unlock_irq+0x1f/0x40 [ 94.798383][ T4428] ? process_one_work+0x7b4/0x1160 [ 94.803596][ T4428] process_one_work+0x8ab/0x1160 [ 94.808815][ T4428] ? worker_detach_from_pool+0x240/0x240 [ 94.814464][ T4428] ? _raw_spin_lock_irq+0xb7/0xf0 [ 94.819517][ T4428] ? _raw_spin_lock_irqsave+0x100/0x100 [ 94.825082][ T4428] ? wq_worker_running+0x97/0x190 [ 94.830139][ T4428] worker_thread+0xaf5/0x12a0 [ 94.834852][ T4428] kthread+0x29d/0x330 [ 94.838925][ T4428] ? worker_clr_flags+0x1a0/0x1a0 [ 94.843957][ T4428] ? kthread_blkcg+0xd0/0xd0 [ 94.848559][ T4428] ret_from_fork+0x1f/0x30 [ 94.853014][ T4428] [ 94.856248][ T4428] Kernel Offset: disabled [ 94.860617][ T4428] Rebooting in 86400 seconds..