[ 76.465060][ T7] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts.
2026/09/23 20:08:19 ignoring optional flag "type"="gce"
2026/09/23 20:08:19 parsed 1 programs
[ 80.444289][ T4657] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 83.028222][ T4759] chnl_net:caif_netlink_parms(): no params data found
[ 83.130725][ T4759] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.137942][ T4759] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.147408][ T4759] device bridge_slave_0 entered promiscuous mode
[ 83.156209][ T4759] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.164432][ T4759] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.174072][ T4759] device bridge_slave_1 entered promiscuous mode
[ 83.210174][ T4759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.236265][ T4759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.272670][ T4759] team0: Port device team_slave_0 added
[ 83.282382][ T4759] team0: Port device team_slave_1 added
[ 83.325471][ T4759] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.332543][ T4759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.393955][ T4759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.424558][ T4759] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.431578][ T4759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.493946][ T4759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.549153][ T4759] device hsr_slave_0 entered promiscuous mode
[ 83.557520][ T4759] device hsr_slave_1 entered promiscuous mode
[ 84.236207][ T4759] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.247445][ T4759] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.258036][ T4759] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.268031][ T4759] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.326934][ T4759] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.342466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 84.351721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 84.362450][ T4759] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.374538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 84.384412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 84.393821][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.400893][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.412254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 84.425238][ T1531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 84.434154][ T1531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 84.442673][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.449811][ T1531] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.481464][ T1531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 84.495870][ T1531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 84.511536][ T1531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 84.523844][ T1531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 84.532355][ T1531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 84.542629][ T1531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 84.552572][ T1531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 84.565894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 84.575168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 84.587581][ T4759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 84.599520][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 84.609183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 84.618749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 84.782111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 84.791271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 84.806203][ T4759] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.844941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 84.854324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 84.872499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 84.881091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 84.891887][ T4759] device veth0_vlan entered promiscuous mode
[ 84.900148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 84.908589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 84.921200][ T4759] device veth1_vlan entered promiscuous mode
[ 84.961733][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 84.970979][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 84.980278][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 84.989166][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 85.001183][ T4759] device veth0_macvtap entered promiscuous mode
[ 85.030856][ T4759] device veth1_macvtap entered promiscuous mode
[ 85.049359][ T4759] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.057561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 85.067839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 85.077564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 85.087939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 85.100088][ T4759] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.108036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 85.118786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 85.134215][ T4759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.144723][ T4759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.154413][ T4759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.164209][ T4759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.698743][ T1531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.713871][ T1531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.730359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 85.766270][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.776938][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.786855][ T1531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/09/23 20:08:28 executed programs: 0
[ 86.869430][ T4948] chnl_net:caif_netlink_parms(): no params data found
[ 86.972503][ T4948] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.987885][ T4948] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.000092][ T4948] device bridge_slave_0 entered promiscuous mode
[ 87.015862][ T4948] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.033031][ T4948] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.046497][ T4948] device bridge_slave_1 entered promiscuous mode
[ 87.095451][ T4948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.115405][ T4948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.179029][ T4948] team0: Port device team_slave_0 added
[ 87.195642][ T4948] team0: Port device team_slave_1 added
[ 87.236365][ T4948] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.243881][ T4948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.270467][ T4948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.296012][ T4948] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.305742][ T4948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.335945][ T4948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.359495][ T4252] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.399225][ T4948] device hsr_slave_0 entered promiscuous mode
[ 87.406143][ T4948] device hsr_slave_1 entered promiscuous mode
[ 87.414167][ T4948] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 87.422176][ T4948] Cannot create hsr debugfs directory
[ 88.693118][ T4828] Bluetooth: hci0: command 0x0409 tx timeout
[ 90.785369][ T4828] Bluetooth: hci0: command 0x041b tx timeout
[ 90.793971][ T4252] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.857492][ T4252] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.898799][ T4252] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.802664][ T4948] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.811613][ T4948] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.822311][ T4948] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.831506][ T4948] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.885218][ T4948] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.900980][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 91.909156][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 91.926603][ T4948] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.936510][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 91.945160][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 91.953969][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.961024][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.979345][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 91.987467][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 91.996625][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 92.005305][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.012557][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.022381][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 92.042534][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 92.051565][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 92.061497][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 92.071554][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 92.088022][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 92.098495][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 92.112157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 92.121157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 92.131500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 92.140928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 92.164408][ T4252] device hsr_slave_0 left promiscuous mode
[ 92.171074][ T4252] device hsr_slave_1 left promiscuous mode
[ 92.178365][ T4252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 92.185952][ T4252] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 92.195128][ T4252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 92.202532][ T4252] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 92.212131][ T4252] device bridge_slave_1 left promiscuous mode
[ 92.218639][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.227447][ T4252] device bridge_slave_0 left promiscuous mode
[ 92.233946][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.245102][ T4252] device veth1_macvtap left promiscuous mode
[ 92.251126][ T4252] device veth0_macvtap left promiscuous mode
[ 92.257450][ T4252] device veth1_vlan left promiscuous mode
[ 92.264591][ T4252] device veth0_vlan left promiscuous mode
[ 92.388036][ T4252] team0 (unregistering): Port device team_slave_1 removed
[ 92.399082][ T4252] team0 (unregistering): Port device team_slave_0 removed
[ 92.412635][ T4252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 92.427176][ T4252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 92.477357][ T4252] bond0 (unregistering): Released all slaves
[ 92.538618][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 92.624448][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 92.632016][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 92.644066][ T4948] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.665874][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 92.675325][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 92.691533][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 92.700621][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 92.709812][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 92.718010][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 92.729089][ T4948] device veth0_vlan entered promiscuous mode
[ 92.742103][ T4948] device veth1_vlan entered promiscuous mode
[ 92.767165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 92.776268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 92.785353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 92.794211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 92.807486][ T4948] device veth0_macvtap entered promiscuous mode
[ 92.816212][ T4948] device veth1_macvtap entered promiscuous mode
[ 92.830224][ T4948] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.839002][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 92.848008][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 92.856428][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 92.863456][ T4826] Bluetooth: hci0: command 0x040f tx timeout
[ 92.865632][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 92.882640][ T4948] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.894051][ T4948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.903862][ T4948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.913124][ T4948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.922015][ T4948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.934438][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 92.943439][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 93.000513][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.015052][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.036918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/09/23 20:08:34 executed programs: 2
[ 93.054936][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.064631][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.072850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 93.413534][ T4826] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 93.673089][ T4826] usb 1-1: Using ep0 maxpacket: 16
[ 93.815509][ T4826] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 93.824390][ T4826] usb 1-1: config 0 has no interface number 0
[ 93.830474][ T4826] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 93.963149][ T4826] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 93.972349][ T4826] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 93.980658][ T4826] usb 1-1: Product: syz
[ 93.984877][ T4826] usb 1-1: SerialNumber: syz
[ 93.993104][ T4826] usb 1-1: config 0 descriptor??
[ 94.047646][ T4826] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5
[ 94.475026][ T4826] usb 1-1: USB disconnect, device number 2
[ 94.483229][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[ 94.490430][ C0] ------------[ cut here ]------------
[ 94.496277][ C0] URB ffff888022727200 submitted while active
[ 94.502566][ C0] WARNING: CPU: 0 PID: 4826 at drivers/usb/core/urb.c:378 usb_submit_urb+0xfba/0x18d0
[ 94.512424][ C0] Modules linked in:
[ 94.516322][ C0] CPU: 0 PID: 4826 Comm: kworker/0:13 Not tainted syzkaller #0
[ 94.523861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 94.533926][ C0] Workqueue: usb_hub_wq hub_event
[ 94.539149][ C0] RIP: 0010:usb_submit_urb+0xfba/0x18d0
[ 94.544723][ C0] Code: c5 8a 44 89 ea e8 26 bc d7 03 e9 f3 fb ff ff e8 ac a4 96 fb c6 05 96 f6 94 07 01 48 c7 c7 80 37 c5 8a 48 89 de e8 c6 d9 d3 03 <0f> 0b e9 bc f0 ff ff e8 8a a4 96 fb eb 1f e8 83 a4 96 fb 44 8b 64
[ 94.564321][ C0] RSP: 0018:ffffc90000007778 EFLAGS: 00010046
[ 94.570386][ C0] RAX: 0b9f146cff2f1d00 RBX: ffff888022727200 RCX: ffff888075dd1dc0
[ 94.578466][ C0] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000
[ 94.586517][ C0] RBP: 000000000000000f R08: ffff8880b902795b R09: 1ffff11017204f2b
[ 94.594568][ C0] R10: dffffc0000000000 R11: ffffed1017204f2c R12: 0000000000000a20
[ 94.602540][ C0] R13: ffff888024c1e030 R14: ffff888022727208 R15: dffffc0000000000
[ 94.610530][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[ 94.619457][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.626036][ C0] CR2: 00007fc6500e0840 CR3: 00000000715aa000 CR4: 00000000003506f0
[ 94.634087][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 94.642075][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 94.650048][ C0] Call Trace:
[ 94.653324][ C0]
[ 94.656160][ C0] ? dummy_timer+0xa35/0x34a0
[ 94.660827][ C0] ? do_raw_spin_unlock+0x11d/0x230
[ 94.666019][ C0] cm109_urb_irq_callback+0x73d/0xcc0
[ 94.671484][ C0] __usb_hcd_giveback_urb+0x35d/0x520
[ 94.676900][ C0] dummy_timer+0xa47/0x34a0
[ 94.681554][ C0] ? verify_lock_unused+0x140/0x140
[ 94.687015][ C0] ? __lock_acquire+0x13dc/0x7b50
[ 94.692052][ C0] ? dummy_free_streams+0x520/0x520
[ 94.697271][ C0] ? dummy_free_streams+0x520/0x520
[ 94.702537][ C0] call_timer_fn+0x17b/0x540
[ 94.707128][ C0] ? dummy_free_streams+0x520/0x520
[ 94.712336][ C0] ? __run_timers+0x810/0x810
[ 94.717043][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 94.722231][ C0] ? lockdep_hardirqs_on+0x94/0x140
[ 94.727423][ C0] ? dummy_free_streams+0x520/0x520
[ 94.732618][ C0] __run_timers+0x56c/0x810
[ 94.737128][ C0] ? detach_timer+0x2b0/0x2b0
[ 94.741799][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 94.747784][ C0] ? sched_clock_cpu+0x15/0x3c0
[ 94.752659][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0
[ 94.759035][ C0] run_timer_softirq+0x63/0xf0
[ 94.763885][ C0] handle_softirqs+0x336/0x830
[ 94.768751][ C0] ? __irq_exit_rcu+0x13b/0x230
[ 94.773610][ C0] ? do_softirq+0x210/0x210
[ 94.778117][ C0] ? hrtimer_interrupt+0x6a2/0x8b0
[ 94.783250][ C0] ? irqtime_account_irq+0xb2/0x1b0
[ 94.788456][ C0] __irq_exit_rcu+0x13b/0x230
[ 94.793147][ C0] ? irq_exit_rcu+0x20/0x20
[ 94.797640][ C0] irq_exit_rcu+0x5/0x20
[ 94.801859][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0
[ 94.807474][ C0]
[ 94.810496][ C0]
[ 94.813517][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 94.819507][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[ 94.826018][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f b1 87 f7 65 8b 05 70 c7 37 76 85 c0 74 3c 48 c7 04 24 0e 36
[ 94.845809][ C0] RSP: 0018:ffffc9000356f560 EFLAGS: 00000206
[ 94.851877][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 0b9f146cff2f1d00
[ 94.859857][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001
[ 94.867830][ C0] RBP: ffffc9000356f5f0 R08: ffffffff901f1137 R09: 1ffffffff203e226
[ 94.875894][ C0] R10: dffffc0000000000 R11: fffffbfff203e227 R12: dffffc0000000000
[ 94.883896][ C0] R13: ffff8880b903b098 R14: ffff8880271727d0 R15: 1ffff920006adeac
[ 94.891863][ C0] ? _raw_spin_unlock+0x40/0x40
[ 94.896701][ C0] ? rcu_is_watching+0x11/0xa0
[ 94.901467][ C0] ? do_raw_spin_unlock+0x11d/0x230
[ 94.906645][ C0] try_to_wake_up+0x668/0x1020
[ 94.911386][ C0] ? _raw_spin_unlock+0x40/0x40
[ 94.916214][ C0] wake_up_q+0x78/0xc0
[ 94.920262][ C0] rwsem_wake+0xe7/0x130
[ 94.924564][ C0] ? rcu_lock_release+0x20/0x20
[ 94.929408][ C0] ? kernfs_find_ns+0x49e/0x510
[ 94.934244][ C0] ? up_write+0x1b6/0x410
[ 94.938552][ C0] sysfs_remove_group+0x26a/0x290
[ 94.943553][ C0] device_del+0x2ab/0xa80
[ 94.947885][ C0] ? kobject_put+0x25c/0x450
[ 94.952459][ C0] ? kill_device+0x160/0x160
[ 94.957055][ C0] ? kobject_put+0x41d/0x450
[ 94.961630][ C0] usb_disable_device+0x3e7/0x8a0
[ 94.966660][ C0] usb_disconnect+0x33c/0x8a0
[ 94.971321][ C0] hub_event+0x1d64/0x5260
[ 94.975773][ C0] ? hub_post_resume+0x120/0x120
[ 94.980777][ C0] ? read_lock_is_recursive+0x10/0x10
[ 94.986141][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 94.992104][ C0] ? _raw_spin_unlock+0x40/0x40
[ 94.996965][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 95.002170][ C0] process_one_work+0x867/0xff0
[ 95.007019][ C0] ? worker_detach_from_pool+0x240/0x240
[ 95.012724][ C0] ? lockdep_hardirqs_off+0x70/0x100
[ 95.017991][ C0] ? _raw_spin_lock_irq+0xb7/0xf0
[ 95.022994][ C0] ? _raw_spin_lock_irqsave+0x100/0x100
[ 95.028539][ C0] ? wq_worker_running+0x97/0x170
[ 95.033542][ C0] worker_thread+0xad7/0x12a0
[ 95.038259][ C0] kthread+0x42e/0x520
[ 95.042305][ C0] ? rcu_lock_release+0x20/0x20
[ 95.047268][ C0] ? kthread_blkcg+0xd0/0xd0
[ 95.051951][ C0] ret_from_fork+0x1f/0x30
[ 95.056364][ C0]
[ 95.059380][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.066723][ C0] CPU: 0 PID: 4826 Comm: kworker/0:13 Not tainted syzkaller #0
[ 95.074253][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 95.084295][ C0] Workqueue: usb_hub_wq hub_event
[ 95.089304][ C0] Call Trace:
[ 95.092581][ C0]
[ 95.095402][ C0] dump_stack_lvl+0x188/0x250
[ 95.100057][ C0] ? show_regs_print_info+0x20/0x20
[ 95.105229][ C0] ? load_image+0x410/0x410
[ 95.109710][ C0] panic+0x2f8/0x850
[ 95.113592][ C0] ? bpf_jit_dump+0xd0/0xd0
[ 95.118074][ C0] ? ret_from_fork+0x1f/0x30
[ 95.122639][ C0] ? usb_submit_urb+0xfba/0x18d0
[ 95.127559][ C0] __warn+0x248/0x2b0
[ 95.131528][ C0] ? usb_submit_urb+0xfba/0x18d0
[ 95.136443][ C0] report_bug+0x1b9/0x2e0
[ 95.140779][ C0] handle_bug+0x3a/0x70
[ 95.144927][ C0] exc_invalid_op+0x16/0x40
[ 95.149408][ C0] asm_exc_invalid_op+0x16/0x20
[ 95.154446][ C0] RIP: 0010:usb_submit_urb+0xfba/0x18d0
[ 95.159969][ C0] Code: c5 8a 44 89 ea e8 26 bc d7 03 e9 f3 fb ff ff e8 ac a4 96 fb c6 05 96 f6 94 07 01 48 c7 c7 80 37 c5 8a 48 89 de e8 c6 d9 d3 03 <0f> 0b e9 bc f0 ff ff e8 8a a4 96 fb eb 1f e8 83 a4 96 fb 44 8b 64
[ 95.179749][ C0] RSP: 0018:ffffc90000007778 EFLAGS: 00010046
[ 95.185798][ C0] RAX: 0b9f146cff2f1d00 RBX: ffff888022727200 RCX: ffff888075dd1dc0
[ 95.193934][ C0] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000
[ 95.201880][ C0] RBP: 000000000000000f R08: ffff8880b902795b R09: 1ffff11017204f2b
[ 95.209849][ C0] R10: dffffc0000000000 R11: ffffed1017204f2c R12: 0000000000000a20
[ 95.217887][ C0] R13: ffff888024c1e030 R14: ffff888022727208 R15: dffffc0000000000
[ 95.225846][ C0] ? usb_submit_urb+0xfba/0x18d0
[ 95.230765][ C0] ? dummy_timer+0xa35/0x34a0
[ 95.235419][ C0] ? do_raw_spin_unlock+0x11d/0x230
[ 95.240610][ C0] cm109_urb_irq_callback+0x73d/0xcc0
[ 95.245961][ C0] __usb_hcd_giveback_urb+0x35d/0x520
[ 95.251323][ C0] dummy_timer+0xa47/0x34a0
[ 95.255829][ C0] ? verify_lock_unused+0x140/0x140
[ 95.261035][ C0] ? __lock_acquire+0x13dc/0x7b50
[ 95.266063][ C0] ? dummy_free_streams+0x520/0x520
[ 95.271268][ C0] ? dummy_free_streams+0x520/0x520
[ 95.276461][ C0] call_timer_fn+0x17b/0x540
[ 95.281051][ C0] ? dummy_free_streams+0x520/0x520
[ 95.286237][ C0] ? __run_timers+0x810/0x810
[ 95.290903][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 95.296101][ C0] ? lockdep_hardirqs_on+0x94/0x140
[ 95.301279][ C0] ? dummy_free_streams+0x520/0x520
[ 95.306456][ C0] __run_timers+0x56c/0x810
[ 95.310952][ C0] ? detach_timer+0x2b0/0x2b0
[ 95.315605][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 95.321565][ C0] ? sched_clock_cpu+0x15/0x3c0
[ 95.326394][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0
[ 95.332621][ C0] run_timer_softirq+0x63/0xf0
[ 95.337561][ C0] handle_softirqs+0x336/0x830
[ 95.342309][ C0] ? __irq_exit_rcu+0x13b/0x230
[ 95.347139][ C0] ? do_softirq+0x210/0x210
[ 95.351621][ C0] ? hrtimer_interrupt+0x6a2/0x8b0
[ 95.356743][ C0] ? irqtime_account_irq+0xb2/0x1b0
[ 95.362012][ C0] __irq_exit_rcu+0x13b/0x230
[ 95.366954][ C0] ? irq_exit_rcu+0x20/0x20
[ 95.371478][ C0] irq_exit_rcu+0x5/0x20
[ 95.375734][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0
[ 95.381443][ C0]
[ 95.384354][ C0]
[ 95.387276][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 95.393269][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[ 95.399842][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f b1 87 f7 65 8b 05 70 c7 37 76 85 c0 74 3c 48 c7 04 24 0e 36
[ 95.419445][ C0] RSP: 0018:ffffc9000356f560 EFLAGS: 00000206
[ 95.425493][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 0b9f146cff2f1d00
[ 95.433445][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001
[ 95.441499][ C0] RBP: ffffc9000356f5f0 R08: ffffffff901f1137 R09: 1ffffffff203e226
[ 95.449450][ C0] R10: dffffc0000000000 R11: fffffbfff203e227 R12: dffffc0000000000
[ 95.457576][ C0] R13: ffff8880b903b098 R14: ffff8880271727d0 R15: 1ffff920006adeac
[ 95.465562][ C0] ? _raw_spin_unlock+0x40/0x40
[ 95.470407][ C0] ? rcu_is_watching+0x11/0xa0
[ 95.475183][ C0] ? do_raw_spin_unlock+0x11d/0x230
[ 95.480495][ C0] try_to_wake_up+0x668/0x1020
[ 95.485260][ C0] ? _raw_spin_unlock+0x40/0x40
[ 95.490099][ C0] wake_up_q+0x78/0xc0
[ 95.494148][ C0] rwsem_wake+0xe7/0x130
[ 95.498392][ C0] ? rcu_lock_release+0x20/0x20
[ 95.503244][ C0] ? kernfs_find_ns+0x49e/0x510
[ 95.508082][ C0] ? up_write+0x1b6/0x410
[ 95.512399][ C0] sysfs_remove_group+0x26a/0x290
[ 95.517416][ C0] device_del+0x2ab/0xa80
[ 95.521728][ C0] ? kobject_put+0x25c/0x450
[ 95.526325][ C0] ? kill_device+0x160/0x160
[ 95.530893][ C0] ? kobject_put+0x41d/0x450
[ 95.535477][ C0] usb_disable_device+0x3e7/0x8a0
[ 95.540506][ C0] usb_disconnect+0x33c/0x8a0
[ 95.545186][ C0] hub_event+0x1d64/0x5260
[ 95.549614][ C0] ? hub_post_resume+0x120/0x120
[ 95.554540][ C0] ? read_lock_is_recursive+0x10/0x10
[ 95.559891][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 95.565807][ C0] ? _raw_spin_unlock+0x40/0x40
[ 95.570740][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 95.576023][ C0] process_one_work+0x867/0xff0
[ 95.580971][ C0] ? worker_detach_from_pool+0x240/0x240
[ 95.586602][ C0] ? lockdep_hardirqs_off+0x70/0x100
[ 95.591956][ C0] ? _raw_spin_lock_irq+0xb7/0xf0
[ 95.596979][ C0] ? _raw_spin_lock_irqsave+0x100/0x100
[ 95.602530][ C0] ? wq_worker_running+0x97/0x170
[ 95.607542][ C0] worker_thread+0xad7/0x12a0
[ 95.612235][ C0] kthread+0x42e/0x520
[ 95.616376][ C0] ? rcu_lock_release+0x20/0x20
[ 95.621221][ C0] ? kthread_blkcg+0xd0/0xd0
[ 95.625820][ C0] ret_from_fork+0x1f/0x30
[ 95.630236][ C0]
[ 96.730289][ C0] Shutting down cpus with NMI
[ 96.735530][ C0] Kernel Offset: disabled
[ 96.740015][ C0] Rebooting in 86400 seconds..