Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. 2026/08/11 11:15:46 parsed 1 programs 2026/08/11 11:15:46 serving rpc on tcp://33993 [ 82.869072][ T5782] cgroup: Unknown subsys name 'net' [ 83.003820][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.823698][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.572571][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.583370][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.643539][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.652327][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.957724][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.978401][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.987020][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.999077][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.007470][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.014870][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.723727][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 90.793990][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.802182][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.811213][ T5872] bridge_slave_0: entered allmulticast mode [ 90.819526][ T5872] bridge_slave_0: entered promiscuous mode [ 90.844605][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.852068][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.859515][ T5872] bridge_slave_1: entered allmulticast mode [ 90.867343][ T5872] bridge_slave_1: entered promiscuous mode [ 90.915650][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.927712][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.955578][ T5872] team0: Port device team_slave_0 added [ 90.964338][ T5872] team0: Port device team_slave_1 added [ 90.985938][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.992976][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.018946][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.032121][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.039267][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.065895][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.103691][ T5872] hsr_slave_0: entered promiscuous mode [ 91.110148][ T5872] hsr_slave_1: entered promiscuous mode [ 91.239690][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.271596][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.290092][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.303038][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.344152][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.352178][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.360519][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.367779][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.410742][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.423109][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.476958][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.509837][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.525260][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.532551][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.549802][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.557036][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.794229][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.863472][ T5872] veth0_vlan: entered promiscuous mode [ 91.877451][ T5872] veth1_vlan: entered promiscuous mode [ 91.916119][ T5872] veth0_macvtap: entered promiscuous mode [ 91.932741][ T5872] veth1_macvtap: entered promiscuous mode [ 91.956235][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.978599][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.994994][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.010731][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.020474][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.030814][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.192470][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.213154][ T9] cfg80211: failed to load regulatory.db 2026/08/11 11:15:58 executed programs: 0 [ 92.792073][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.801336][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.811810][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.820747][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.828619][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.836217][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.975751][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 93.043150][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.050840][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.058582][ T5892] bridge_slave_0: entered allmulticast mode [ 93.065427][ T5892] bridge_slave_0: entered promiscuous mode [ 93.074162][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.081839][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.089199][ T5892] bridge_slave_1: entered allmulticast mode [ 93.096149][ T5892] bridge_slave_1: entered promiscuous mode [ 93.130607][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.142952][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.177183][ T5892] team0: Port device team_slave_0 added [ 93.187412][ T5892] team0: Port device team_slave_1 added [ 93.214985][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.222138][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.248276][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.263124][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.270507][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.297212][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.347270][ T5892] hsr_slave_0: entered promiscuous mode [ 93.354250][ T5892] hsr_slave_1: entered promiscuous mode [ 93.361139][ T5892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.370315][ T5892] Cannot create hsr debugfs directory [ 94.630071][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.917267][ T5856] Bluetooth: hci0: command tx timeout [ 96.998123][ T5856] Bluetooth: hci0: command tx timeout [ 97.147122][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.211876][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.139012][ T12] hsr_slave_0: left promiscuous mode [ 98.145509][ T12] hsr_slave_1: left promiscuous mode [ 98.153160][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.164158][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.173546][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.184857][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.193173][ T12] bridge_slave_1: left allmulticast mode [ 98.202267][ T12] bridge_slave_1: left promiscuous mode [ 98.209645][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.225738][ T12] bridge_slave_0: left allmulticast mode [ 98.233049][ T12] bridge_slave_0: left promiscuous mode [ 98.241907][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.275006][ T12] veth1_macvtap: left promiscuous mode [ 98.281188][ T12] veth0_macvtap: left promiscuous mode [ 98.287365][ T12] veth1_vlan: left promiscuous mode [ 98.292944][ T12] veth0_vlan: left promiscuous mode [ 98.744442][ T12] team0 (unregistering): Port device team_slave_1 removed [ 98.781894][ T12] team0 (unregistering): Port device team_slave_0 removed [ 98.816925][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.851309][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.088695][ T5856] Bluetooth: hci0: command tx timeout [ 99.102210][ T12] bond0 (unregistering): Released all slaves [ 99.203279][ T5892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.218447][ T5892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.230512][ T5892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.240553][ T5892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.341359][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.378701][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.391943][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.399173][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.420030][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.427369][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.479538][ T5892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.655106][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.702718][ T5892] veth0_vlan: entered promiscuous mode [ 99.720842][ T5892] veth1_vlan: entered promiscuous mode [ 99.748664][ T5892] veth0_macvtap: entered promiscuous mode [ 99.758132][ T5892] veth1_macvtap: entered promiscuous mode [ 99.782230][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.800639][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.812139][ T5892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.821858][ T5892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.832681][ T5892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.841842][ T5892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.908061][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.916102][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.951739][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.960987][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.327686][ T5809] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.556796][ T5809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.567361][ T5809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.577550][ T5809] usb 1-1: Dual-Role OTG device on HNP port [ 100.584349][ T5809] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 100.593576][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.620782][ C0] ------------[ cut here ]------------ [ 100.626746][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 100.634711][ C0] WARNING: CPU: 0 PID: 5809 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 100.644965][ C0] Modules linked in: [ 100.648906][ C0] CPU: 0 PID: 5809 Comm: kworker/0:4 Not tainted syzkaller #0 [ 100.656501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.667042][ C0] Workqueue: usb_hub_wq hub_event [ 100.672271][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 100.677688][ C0] Code: 49 8b 0e 48 c7 c0 00 ed 7a 8b 49 c7 c0 20 ed 7a 8b 4c 0f 44 c0 48 c7 c7 c0 ec 7a 8b 48 c7 c6 51 bf a6 8c 89 ea e8 7d fe 95 fa <0f> 0b e9 e1 fe ff ff e8 61 31 cc fa 49 bc 00 00 00 00 00 fc ff df [ 100.698204][ C0] RSP: 0018:ffffc90000007790 EFLAGS: 00010046 [ 100.704402][ C0] RAX: f0055689ce2c9c00 RBX: ffff8881427740e0 RCX: ffff888066915a00 [ 100.712475][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 100.720725][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 100.728778][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 100.737398][ C0] R13: ffff88814277410d R14: ffff8881427740e8 R15: ffff88807447373a [ 100.745583][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 100.754551][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.761538][ C0] CR2: 00007ffc92176cc8 CR3: 000000002cf81000 CR4: 00000000003506f0 [ 100.769743][ C0] Call Trace: [ 100.773137][ C0] [ 100.776172][ C0] hidg_set_alt+0x12a/0xa10 [ 100.780963][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 100.786453][ C0] set_config+0x735/0xff0 [ 100.790814][ C0] composite_setup+0x1df4/0x33a0 [ 100.795788][ C0] configfs_composite_setup+0xc7/0x100 [ 100.801384][ C0] dummy_timer+0x1324/0x34e0 [ 100.806013][ C0] ? mark_lock+0x94/0x320 [ 100.810474][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 100.815723][ C0] ? lock_chain_count+0x20/0x20 [ 100.820872][ C0] ? dummy_free_streams+0x520/0x520 [ 100.826476][ C0] ? dummy_free_streams+0x520/0x520 [ 100.832164][ C0] __hrtimer_run_queues+0x525/0xc10 [ 100.837604][ C0] ? hrtimer_interrupt+0x980/0x980 [ 100.842820][ C0] ? read_tsc+0x9/0x20 [ 100.847668][ C0] hrtimer_run_softirq+0x177/0x290 [ 100.852933][ C0] handle_softirqs+0x27d/0x820 [ 100.857916][ C0] ? read_tsc+0x9/0x20 [ 100.862004][ C0] ? ktime_get+0x24b/0x280 [ 100.866550][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 100.871335][ C0] ? do_softirq+0x1a0/0x1a0 [ 100.875940][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 100.881424][ C0] __irq_exit_rcu+0xd3/0x190 [ 100.886154][ C0] ? irq_exit_rcu+0x20/0x20 [ 100.890887][ C0] irq_exit_rcu+0x9/0x20 [ 100.895156][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 100.901082][ C0] [ 100.904122][ C0] [ 100.907252][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.913427][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 100.920123][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 6b 28 c4 f6 65 8b 05 cc f6 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 100.940112][ C0] RSP: 0018:ffffc9000462efe0 EFLAGS: 00000206 [ 100.946199][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: f0055689ce2c9c00 [ 100.954527][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 100.962882][ C0] RBP: ffffc9000462f070 R08: ffffffff911ed56f R09: 1ffffffff223daad [ 100.970866][ C0] R10: dffffc0000000000 R11: fffffbfff223daae R12: dffffc0000000000 [ 100.978944][ C0] R13: dffffc0000000000 R14: ffff888142774000 R15: 1ffff920008c5dfc [ 100.987056][ C0] ? _raw_spin_unlock+0x40/0x40 [ 100.991935][ C0] ? kobject_get+0xcc/0x120 [ 100.996458][ C0] dummy_urb_enqueue+0x587/0x780 [ 101.001417][ C0] usb_hcd_submit_urb+0x318/0x1aa0 [ 101.006639][ C0] ? __init_swait_queue_head+0xa8/0x140 [ 101.012744][ C0] usb_start_wait_urb+0x140/0x580 [ 101.017793][ C0] ? usb_api_blocking_completion+0xb0/0xb0 [ 101.023636][ C0] usb_control_msg+0x235/0x3e0 [ 101.028696][ C0] usb_set_configuration+0x12a8/0x2150 [ 101.034261][ C0] usb_generic_driver_probe+0x8d/0x150 [ 101.039807][ C0] usb_probe_device+0x12a/0x260 [ 101.044957][ C0] ? usb_register_device_driver+0x230/0x230 [ 101.051313][ C0] really_probe+0x247/0xae0 [ 101.055929][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 101.061410][ C0] __driver_probe_device+0x1f5/0x390 [ 101.066909][ C0] driver_probe_device+0x4f/0x420 [ 101.072238][ C0] __device_attach_driver+0x2ca/0x510 [ 101.077762][ C0] bus_for_each_drv+0x252/0x2e0 [ 101.082925][ C0] ? coredump_store+0x90/0x90 [ 101.087765][ C0] ? bus_find_device+0x300/0x300 [ 101.092763][ C0] __device_attach+0x2c1/0x420 [ 101.097647][ C0] ? device_attach+0x20/0x20 [ 101.102255][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 101.107304][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 101.112681][ C0] bus_probe_device+0x180/0x260 [ 101.117556][ C0] device_add+0x87c/0xc40 [ 101.121951][ C0] usb_new_device+0x995/0x1550 [ 101.127104][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 101.132085][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.137409][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 101.142835][ C0] hub_event+0x29d5/0x4a80 [ 101.147843][ C0] ? hub_post_resume+0x120/0x120 [ 101.152803][ C0] ? read_lock_is_recursive+0x20/0x20 [ 101.158293][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.163510][ C0] ? process_scheduled_works+0x975/0x1600 [ 101.169678][ C0] ? process_scheduled_works+0x975/0x1600 [ 101.175500][ C0] process_scheduled_works+0xa60/0x1600 [ 101.181352][ C0] ? worker_attach_to_pool+0x370/0x370 [ 101.187178][ C0] ? assign_work+0x3cc/0x5d0 [ 101.191810][ C0] worker_thread+0xa5e/0xfe0 [ 101.196452][ C0] ? _raw_spin_unlock+0x40/0x40 [ 101.201414][ C0] ? __kthread_parkme+0x71/0x1c0 [ 101.206579][ C0] kthread+0x2fa/0x390 [ 101.210774][ C0] ? pr_cont_work+0x550/0x550 [ 101.215560][ C0] ? kthread_blkcg+0xd0/0xd0 [ 101.220298][ C0] ret_from_fork+0x48/0x80 [ 101.224850][ C0] ? kthread_blkcg+0xd0/0xd0 [ 101.229766][ C0] ret_from_fork_asm+0x11/0x20 [ 101.234758][ C0] [ 101.237797][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.245099][ C0] CPU: 0 PID: 5809 Comm: kworker/0:4 Not tainted syzkaller #0 [ 101.252759][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.263027][ C0] Workqueue: usb_hub_wq hub_event [ 101.268183][ C0] Call Trace: [ 101.271496][ C0] [ 101.274465][ C0] dump_stack_lvl+0x18c/0x250 [ 101.279184][ C0] ? show_regs_print_info+0x20/0x20 [ 101.284498][ C0] ? load_image+0x420/0x420 [ 101.289121][ C0] panic+0x2ca/0x720 [ 101.293044][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 101.297837][ C0] ? ret_from_fork_asm+0x11/0x20 [ 101.302883][ C0] __warn+0x2e0/0x470 [ 101.307252][ C0] ? usb_ep_enable+0x263/0x440 [ 101.312464][ C0] ? usb_ep_enable+0x263/0x440 [ 101.317244][ C0] report_bug+0x2be/0x4f0 [ 101.321597][ C0] ? usb_ep_enable+0x263/0x440 [ 101.326458][ C0] ? usb_ep_enable+0x263/0x440 [ 101.331239][ C0] ? usb_ep_enable+0x265/0x440 [ 101.336010][ C0] handle_bug+0xcf/0x120 [ 101.340276][ C0] exc_invalid_op+0x1a/0x50 [ 101.344790][ C0] asm_exc_invalid_op+0x1a/0x20 [ 101.349734][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 101.355202][ C0] Code: 49 8b 0e 48 c7 c0 00 ed 7a 8b 49 c7 c0 20 ed 7a 8b 4c 0f 44 c0 48 c7 c7 c0 ec 7a 8b 48 c7 c6 51 bf a6 8c 89 ea e8 7d fe 95 fa <0f> 0b e9 e1 fe ff ff e8 61 31 cc fa 49 bc 00 00 00 00 00 fc ff df [ 101.375258][ C0] RSP: 0018:ffffc90000007790 EFLAGS: 00010046 [ 101.381337][ C0] RAX: f0055689ce2c9c00 RBX: ffff8881427740e0 RCX: ffff888066915a00 [ 101.389517][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 101.397861][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 101.406020][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 101.414028][ C0] R13: ffff88814277410d R14: ffff8881427740e8 R15: ffff88807447373a [ 101.422216][ C0] hidg_set_alt+0x12a/0xa10 [ 101.426756][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 101.432144][ C0] set_config+0x735/0xff0 [ 101.436523][ C0] composite_setup+0x1df4/0x33a0 [ 101.441486][ C0] configfs_composite_setup+0xc7/0x100 [ 101.446996][ C0] dummy_timer+0x1324/0x34e0 [ 101.451901][ C0] ? mark_lock+0x94/0x320 [ 101.456339][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 101.461412][ C0] ? lock_chain_count+0x20/0x20 [ 101.466288][ C0] ? dummy_free_streams+0x520/0x520 [ 101.471514][ C0] ? dummy_free_streams+0x520/0x520 [ 101.476830][ C0] __hrtimer_run_queues+0x525/0xc10 [ 101.482256][ C0] ? hrtimer_interrupt+0x980/0x980 [ 101.487622][ C0] ? read_tsc+0x9/0x20 [ 101.491719][ C0] hrtimer_run_softirq+0x177/0x290 [ 101.497084][ C0] handle_softirqs+0x27d/0x820 [ 101.502273][ C0] ? read_tsc+0x9/0x20 [ 101.506375][ C0] ? ktime_get+0x24b/0x280 [ 101.510821][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 101.515598][ C0] ? do_softirq+0x1a0/0x1a0 [ 101.520296][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 101.525606][ C0] __irq_exit_rcu+0xd3/0x190 [ 101.530267][ C0] ? irq_exit_rcu+0x20/0x20 [ 101.534901][ C0] irq_exit_rcu+0x9/0x20 [ 101.539173][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 101.544898][ C0] [ 101.547936][ C0] [ 101.550874][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.556898][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 101.564041][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 6b 28 c4 f6 65 8b 05 cc f6 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 101.584765][ C0] RSP: 0018:ffffc9000462efe0 EFLAGS: 00000206 [ 101.590957][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: f0055689ce2c9c00 [ 101.599062][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 101.607156][ C0] RBP: ffffc9000462f070 R08: ffffffff911ed56f R09: 1ffffffff223daad [ 101.616296][ C0] R10: dffffc0000000000 R11: fffffbfff223daae R12: dffffc0000000000 [ 101.624463][ C0] R13: dffffc0000000000 R14: ffff888142774000 R15: 1ffff920008c5dfc [ 101.632826][ C0] ? _raw_spin_unlock+0x40/0x40 [ 101.637704][ C0] ? kobject_get+0xcc/0x120 [ 101.642220][ C0] dummy_urb_enqueue+0x587/0x780 [ 101.647355][ C0] usb_hcd_submit_urb+0x318/0x1aa0 [ 101.652485][ C0] ? __init_swait_queue_head+0xa8/0x140 [ 101.658318][ C0] usb_start_wait_urb+0x140/0x580 [ 101.663368][ C0] ? usb_api_blocking_completion+0xb0/0xb0 [ 101.669750][ C0] usb_control_msg+0x235/0x3e0 [ 101.674726][ C0] usb_set_configuration+0x12a8/0x2150 [ 101.680394][ C0] usb_generic_driver_probe+0x8d/0x150 [ 101.687004][ C0] usb_probe_device+0x12a/0x260 [ 101.692145][ C0] ? usb_register_device_driver+0x230/0x230 [ 101.698164][ C0] really_probe+0x247/0xae0 [ 101.702788][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 101.708389][ C0] __driver_probe_device+0x1f5/0x390 [ 101.713868][ C0] driver_probe_device+0x4f/0x420 [ 101.719105][ C0] __device_attach_driver+0x2ca/0x510 [ 101.725045][ C0] bus_for_each_drv+0x252/0x2e0 [ 101.731170][ C0] ? coredump_store+0x90/0x90 [ 101.736023][ C0] ? bus_find_device+0x300/0x300 [ 101.741263][ C0] __device_attach+0x2c1/0x420 [ 101.746293][ C0] ? device_attach+0x20/0x20 [ 101.750917][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 101.756315][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 101.761650][ C0] bus_probe_device+0x180/0x260 [ 101.766548][ C0] device_add+0x87c/0xc40 [ 101.770920][ C0] usb_new_device+0x995/0x1550 [ 101.775871][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 101.780802][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.786668][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 101.792495][ C0] hub_event+0x29d5/0x4a80 [ 101.797086][ C0] ? hub_post_resume+0x120/0x120 [ 101.802309][ C0] ? read_lock_is_recursive+0x20/0x20 [ 101.808167][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.813479][ C0] ? process_scheduled_works+0x975/0x1600 [ 101.819527][ C0] ? process_scheduled_works+0x975/0x1600 [ 101.825336][ C0] process_scheduled_works+0xa60/0x1600 [ 101.830951][ C0] ? worker_attach_to_pool+0x370/0x370 [ 101.836886][ C0] ? assign_work+0x3cc/0x5d0 [ 101.841587][ C0] worker_thread+0xa5e/0xfe0 [ 101.847179][ C0] ? _raw_spin_unlock+0x40/0x40 [ 101.852180][ C0] ? __kthread_parkme+0x71/0x1c0 [ 101.857242][ C0] kthread+0x2fa/0x390 [ 101.861799][ C0] ? pr_cont_work+0x550/0x550 [ 101.866645][ C0] ? kthread_blkcg+0xd0/0xd0 [ 101.871375][ C0] ret_from_fork+0x48/0x80 [ 101.875951][ C0] ? kthread_blkcg+0xd0/0xd0 [ 101.880696][ C0] ret_from_fork_asm+0x11/0x20 [ 101.886402][ C0] [ 101.889822][ C0] Kernel Offset: disabled [ 101.894639][ C0] Rebooting in 86400 seconds..