Warning: Permanently added '[localhost]:3750' (ED25519) to the list of known hosts. 2025/07/05 20:00:44 ignoring optional flag "sandboxArg"="0" 2025/07/05 20:00:46 parsed 1 programs [ 127.387691][ T5639] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 131.104008][ T4686] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.108240][ T4686] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.111799][ T4686] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.117373][ T4686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.120906][ T4686] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.862519][ T5698] chnl_net:caif_netlink_parms(): no params data found [ 133.926162][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.929437][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.932702][ T5698] bridge_slave_0: entered allmulticast mode [ 133.937707][ T5698] bridge_slave_0: entered promiscuous mode [ 133.942391][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.946448][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.949606][ T5698] bridge_slave_1: entered allmulticast mode [ 133.953366][ T5698] bridge_slave_1: entered promiscuous mode [ 133.978724][ T5698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.994457][ T5698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.028156][ T5698] team0: Port device team_slave_0 added [ 134.032724][ T5698] team0: Port device team_slave_1 added [ 134.057608][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.060688][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.072575][ T5698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.080281][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.083336][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.095712][ T5698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.129516][ T5698] hsr_slave_0: entered promiscuous mode [ 134.132735][ T5698] hsr_slave_1: entered promiscuous mode [ 134.741578][ T5698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.758581][ T5698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.774542][ T5698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.788705][ T5698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.949272][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.980458][ T5698] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.009922][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.012908][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.020801][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.023963][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.098340][ T5698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.389740][ T5698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.463523][ T5698] veth0_vlan: entered promiscuous mode [ 135.481523][ T5698] veth1_vlan: entered promiscuous mode [ 135.538892][ T5698] veth0_macvtap: entered promiscuous mode [ 135.557802][ T5698] veth1_macvtap: entered promiscuous mode [ 135.583277][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.603381][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.637754][ T5698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.641624][ T5698] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.655715][ T5698] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.659492][ T5698] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.914099][ T1039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.987607][ T1039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.096787][ T1039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.208124][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.211455][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.286949][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.291423][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.998801][ T1039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.939598][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.942530][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.578542][ T1039] bridge_slave_1: left allmulticast mode [ 138.581055][ T1039] bridge_slave_1: left promiscuous mode [ 138.583629][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.672021][ T1039] bridge_slave_0: left allmulticast mode [ 138.674630][ T1039] bridge_slave_0: left promiscuous mode [ 138.681546][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.220720][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 2025/07/05 20:01:02 executed programs: 0 [ 139.255769][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.268508][ T1039] bond0 (unregistering): Released all slaves [ 139.384257][ T1039] hsr_slave_0: left promiscuous mode [ 139.416036][ T1039] hsr_slave_1: left promiscuous mode [ 139.423078][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.435651][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.448733][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.451842][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.475693][ T5370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.479548][ T5370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.483079][ T5370] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.490547][ T5370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.494541][ T5370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.518135][ T1039] veth1_macvtap: left promiscuous mode [ 139.520689][ T1039] veth0_macvtap: left promiscuous mode [ 139.523326][ T1039] veth1_vlan: left promiscuous mode [ 139.546090][ T1039] veth0_vlan: left promiscuous mode [ 140.130101][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 140.178575][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 141.150760][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 141.468038][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.479557][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.482820][ T5794] bridge_slave_0: entered allmulticast mode [ 141.499194][ T5794] bridge_slave_0: entered promiscuous mode [ 141.507591][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.510774][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.513953][ T5794] bridge_slave_1: entered allmulticast mode [ 141.525296][ T5370] Bluetooth: hci0: command tx timeout [ 141.535452][ T5794] bridge_slave_1: entered promiscuous mode [ 141.639813][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.661262][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.742818][ T5794] team0: Port device team_slave_0 added [ 141.771025][ T5794] team0: Port device team_slave_1 added [ 141.829408][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.832409][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.867386][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.873396][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.887131][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.914541][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.987080][ T5794] hsr_slave_0: entered promiscuous mode [ 141.990306][ T5794] hsr_slave_1: entered promiscuous mode [ 142.458580][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.479096][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.497535][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.504054][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.659500][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.682197][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.711807][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.715049][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.740504][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.744286][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.087309][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.149001][ T5794] veth0_vlan: entered promiscuous mode [ 143.172476][ T5794] veth1_vlan: entered promiscuous mode [ 143.221758][ T5794] veth0_macvtap: entered promiscuous mode [ 143.243056][ T5794] veth1_macvtap: entered promiscuous mode [ 143.279681][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.297390][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.318053][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.321865][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.333127][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.346508][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.471798][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.482124][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.540286][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.544862][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.596746][ T5370] Bluetooth: hci0: command tx timeout [ 143.886845][ T5349] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.047092][ T5349] usb 5-1: Using ep0 maxpacket: 8 [ 144.064428][ T5349] usb 5-1: config 4 has an invalid interface number: 57 but max is 3 [ 144.070639][ T5349] usb 5-1: config 4 has an invalid interface association descriptor of length 2, skipping [ 144.087714][ T5349] usb 5-1: config 4 has an invalid interface number: 65 but max is 3 [ 144.091639][ T5349] usb 5-1: config 4 has an invalid interface number: 212 but max is 3 [ 144.099993][ T5349] usb 5-1: config 4 has an invalid interface number: 21 but max is 3 [ 144.104727][ T5349] usb 5-1: config 4 has an invalid interface number: 111 but max is 3 [ 144.123395][ T5349] usb 5-1: config 4 has an invalid descriptor of length 10, skipping remainder of the config [ 144.135334][ T5349] usb 5-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 144.139368][ T5349] usb 5-1: config 4 has no interface number 0 [ 144.158410][ T5349] usb 5-1: config 4 has no interface number 1 [ 144.161014][ T5349] usb 5-1: config 4 has no interface number 2 [ 144.163929][ T5349] usb 5-1: config 4 has no interface number 3 [ 144.179698][ T5349] usb 5-1: config 4 has no interface number 4 [ 144.182433][ T5349] usb 5-1: config 4 interface 57 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 144.200089][ T5349] usb 5-1: config 4 interface 57 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 144.204772][ T5349] usb 5-1: config 4 interface 57 altsetting 0 endpoint 0x3 has invalid maxpacket 1064, setting to 64 [ 144.225366][ T5349] usb 5-1: config 4 interface 57 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 14 [ 144.237205][ T5349] usb 5-1: too many endpoints for config 4 interface 65 altsetting 254: 200, using maximum allowed: 30 [ 144.242250][ T5349] usb 5-1: config 4 interface 65 altsetting 254 has an invalid endpoint descriptor of length 2, skipping [ 144.268530][ T5349] usb 5-1: config 4 interface 65 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 144.273048][ T5349] usb 5-1: config 4 interface 65 altsetting 254 has a duplicate endpoint with address 0xA, skipping [ 144.297615][ T5349] usb 5-1: config 4 interface 65 altsetting 254 has a duplicate endpoint with address 0x2, skipping [ 144.302635][ T5349] usb 5-1: config 4 interface 65 altsetting 254 has a duplicate endpoint with address 0x6, skipping [ 144.317276][ T5349] usb 5-1: config 4 interface 65 altsetting 254 has a duplicate endpoint with address 0x8, skipping [ 144.322022][ T5349] usb 5-1: config 4 interface 65 altsetting 254 has 9 endpoint descriptors, different from the interface descriptor's value: 200 [ 144.345702][ T5349] usb 5-1: config 4 interface 212 altsetting 149 has an invalid endpoint descriptor of length 2, skipping [ 144.350795][ T5349] usb 5-1: config 4 interface 212 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 144.378720][ T5349] usb 5-1: config 4 interface 65 has no altsetting 0 [ 144.381667][ T5349] usb 5-1: config 4 interface 212 has no altsetting 0 [ 144.384627][ T5349] usb 5-1: config 4 interface 21 has no altsetting 0 [ 144.399381][ T5349] usb 5-1: config 4 interface 111 has no altsetting 0 [ 144.411411][ T5349] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1c.d5 [ 144.416752][ T5349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.426095][ T5349] usb 5-1: Product: syz [ 144.427994][ T5349] usb 5-1: Manufacturer: syz [ 144.436130][ T5349] usb 5-1: SerialNumber: syz [ 144.657324][ T5349] ------------[ cut here ]------------ [ 144.659670][ T5349] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 144.669010][ T5349] WARNING: CPU: 0 PID: 5349 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc82/0x1890 [ 144.673000][ T5349] Modules linked in: [ 144.674752][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: kworker/0:4 Not tainted 6.16.0-rc4-syzkaller-ga79a588fc176 #0 PREEMPT(full) [ 144.680738][ T5349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.685319][ T5349] Workqueue: usb_hub_wq hub_event [ 144.687522][ T5349] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 144.689946][ T5349] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 60 38 34 8c 4c 89 f6 4c 89 fa e8 3f bf 62 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 f0 2d de 8e e8 05 [ 144.698166][ T5349] RSP: 0018:ffffc9000d236a70 EFLAGS: 00010246 [ 144.700910][ T5349] RAX: 32438ff666903e00 RBX: ffff888011644900 RCX: ffff888011a30000 [ 144.704291][ T5349] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 144.707754][ T5349] RBP: 0000000000000001 R08: ffff88801fc24293 R09: 1ffff11003f84852 [ 144.711129][ T5349] R10: dffffc0000000000 R11: ffffed1003f84853 R12: ffffffff8c343648 [ 144.714517][ T5349] R13: dffffc0000000000 R14: ffffffff8c34a140 R15: ffff8880442ef480 [ 144.718676][ T5349] FS: 0000000000000000(0000) GS:ffff88808d21c000(0000) knlGS:0000000000000000 [ 144.722587][ T5349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.725676][ T5349] CR2: 000055e61ce7c208 CR3: 00000000441c3000 CR4: 0000000000352ef0 [ 144.729104][ T5349] Call Trace: [ 144.730586][ T5349] [ 144.731909][ T5349] usb_start_wait_urb+0x114/0x4c0 [ 144.734069][ T5349] ? rcu_is_watching+0x15/0xb0 [ 144.736353][ T5349] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 144.739130][ T5349] ? __kmalloc_noprof+0x29b/0x4f0 [ 144.741273][ T5349] amradio_send_cmd+0x216/0x660 [ 144.743462][ T5349] ? __pfx_amradio_send_cmd+0x10/0x10 [ 144.746276][ T5349] usb_amradio_probe+0x4b5/0x900 [ 144.748439][ T5349] ? __pfx_usb_amradio_probe+0x10/0x10 [ 144.750851][ T5349] ? __pm_runtime_set_status+0x785/0xa50 [ 144.753237][ T5349] usb_probe_interface+0x641/0xbc0 [ 144.755446][ T5349] ? __pfx_usb_probe_interface+0x10/0x10 [ 144.757761][ T5349] really_probe+0x26a/0x9a0 [ 144.759752][ T5349] __driver_probe_device+0x18c/0x2f0 [ 144.762079][ T5349] driver_probe_device+0x4f/0x430 [ 144.764263][ T5349] __device_attach_driver+0x2ce/0x530 [ 144.766612][ T5349] bus_for_each_drv+0x251/0x2e0 [ 144.768657][ T5349] ? __pfx___device_attach_driver+0x10/0x10 [ 144.771229][ T5349] ? __pfx_bus_for_each_drv+0x10/0x10 [ 144.773443][ T5349] __device_attach+0x2b8/0x400 [ 144.775628][ T5349] ? __pfx___device_attach+0x10/0x10 [ 144.777879][ T5349] ? do_raw_spin_unlock+0x4d/0x240 [ 144.780220][ T5349] bus_probe_device+0x185/0x260 [ 144.782329][ T5349] device_add+0x7b6/0xb50 [ 144.784142][ T5349] usb_set_configuration+0x1a87/0x20e0 [ 144.786629][ T5349] usb_generic_driver_probe+0x8d/0x150 [ 144.788977][ T5349] usb_probe_device+0x1c4/0x390 [ 144.791144][ T5349] ? __pfx_usb_probe_device+0x10/0x10 [ 144.793465][ T5349] really_probe+0x26a/0x9a0 [ 144.795805][ T5349] __driver_probe_device+0x18c/0x2f0 [ 144.798135][ T5349] driver_probe_device+0x4f/0x430 [ 144.800296][ T5349] __device_attach_driver+0x2ce/0x530 [ 144.802672][ T5349] bus_for_each_drv+0x251/0x2e0 [ 144.804912][ T5349] ? __pfx___device_attach_driver+0x10/0x10 [ 144.807668][ T5349] ? __pfx_bus_for_each_drv+0x10/0x10 [ 144.809966][ T5349] __device_attach+0x2b8/0x400 [ 144.811976][ T5349] ? __pfx___device_attach+0x10/0x10 [ 144.814175][ T5349] ? do_raw_spin_unlock+0x4d/0x240 [ 144.816436][ T5349] bus_probe_device+0x185/0x260 [ 144.818548][ T5349] device_add+0x7b6/0xb50 [ 144.820488][ T5349] usb_new_device+0xa39/0x16c0 [ 144.822553][ T5349] ? __pfx_usb_new_device+0x10/0x10 [ 144.824795][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.827259][ T5349] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.829491][ T5349] hub_event+0x2941/0x4a00 [ 144.831462][ T5349] ? __pfx_hub_event+0x10/0x10 [ 144.833498][ T5349] ? process_scheduled_works+0x9ef/0x17b0 [ 144.836078][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.838381][ T5349] ? process_scheduled_works+0x9ef/0x17b0 [ 144.841321][ T5349] ? process_scheduled_works+0x9ef/0x17b0 [ 144.843768][ T5349] process_scheduled_works+0xade/0x17b0 [ 144.846563][ T5349] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.849130][ T5349] worker_thread+0x8a0/0xda0 [ 144.851138][ T5349] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.853967][ T5349] ? __kthread_parkme+0x7b/0x200 [ 144.856177][ T5349] kthread+0x70e/0x8a0 [ 144.857923][ T5349] ? __pfx_worker_thread+0x10/0x10 [ 144.860168][ T5349] ? __pfx_kthread+0x10/0x10 [ 144.862155][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.864398][ T5349] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.866773][ T5349] ? __pfx_kthread+0x10/0x10 [ 144.868759][ T5349] ret_from_fork+0x3fc/0x770 [ 144.870763][ T5349] ? __pfx_ret_from_fork+0x10/0x10 [ 144.872935][ T5349] ? __pfx_kthread+0x10/0x10 [ 144.874916][ T5349] ret_from_fork_asm+0x1a/0x30 [ 144.877185][ T5349] [ 144.878535][ T5349] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.881706][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: kworker/0:4 Not tainted 6.16.0-rc4-syzkaller-ga79a588fc176 #0 PREEMPT(full) [ 144.886452][ T5349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.891019][ T5349] Workqueue: usb_hub_wq hub_event [ 144.893173][ T5349] Call Trace: [ 144.894618][ T5349] [ 144.895960][ T5349] dump_stack_lvl+0x99/0x250 [ 144.897908][ T5349] ? __asan_memcpy+0x40/0x70 [ 144.900025][ T5349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.902200][ T5349] ? __pfx__printk+0x10/0x10 [ 144.904177][ T5349] panic+0x2db/0x790 [ 144.905891][ T5349] ? __pfx_panic+0x10/0x10 [ 144.907879][ T5349] ? ret_from_fork_asm+0x1a/0x30 [ 144.910175][ T5349] __warn+0x31b/0x4b0 [ 144.911919][ T5349] ? usb_submit_urb+0xc82/0x1890 [ 144.914107][ T5349] ? usb_submit_urb+0xc82/0x1890 [ 144.916266][ T5349] report_bug+0x2be/0x4f0 [ 144.918242][ T5349] ? usb_submit_urb+0xc82/0x1890 [ 144.920689][ T5349] ? usb_submit_urb+0xc82/0x1890 [ 144.922916][ T5349] ? usb_submit_urb+0xc84/0x1890 [ 144.925113][ T5349] handle_bug+0x84/0x160 [ 144.927007][ T5349] exc_invalid_op+0x1a/0x50 [ 144.929060][ T5349] asm_exc_invalid_op+0x1a/0x20 [ 144.931189][ T5349] RIP: 0010:usb_submit_urb+0xc82/0x1890 [ 144.933881][ T5349] Code: 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 6d 08 00 00 45 8b 04 24 48 c7 c7 60 38 34 8c 4c 89 f6 4c 89 fa e8 3f bf 62 fa 90 <0f> 0b 90 90 44 0f b6 64 24 48 4c 89 e7 48 c7 c6 f0 2d de 8e e8 05 [ 144.942232][ T5349] RSP: 0018:ffffc9000d236a70 EFLAGS: 00010246 [ 144.944923][ T5349] RAX: 32438ff666903e00 RBX: ffff888011644900 RCX: ffff888011a30000 [ 144.948412][ T5349] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 144.951923][ T5349] RBP: 0000000000000001 R08: ffff88801fc24293 R09: 1ffff11003f84852 [ 144.955250][ T5349] R10: dffffc0000000000 R11: ffffed1003f84853 R12: ffffffff8c343648 [ 144.958639][ T5349] R13: dffffc0000000000 R14: ffffffff8c34a140 R15: ffff8880442ef480 [ 144.962087][ T5349] usb_start_wait_urb+0x114/0x4c0 [ 144.964328][ T5349] ? rcu_is_watching+0x15/0xb0 [ 144.966337][ T5349] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 144.968667][ T5349] ? __kmalloc_noprof+0x29b/0x4f0 [ 144.970907][ T5349] amradio_send_cmd+0x216/0x660 [ 144.973059][ T5349] ? __pfx_amradio_send_cmd+0x10/0x10 [ 144.975434][ T5349] usb_amradio_probe+0x4b5/0x900 [ 144.977587][ T5349] ? __pfx_usb_amradio_probe+0x10/0x10 [ 144.980275][ T5349] ? __pm_runtime_set_status+0x785/0xa50 [ 144.982788][ T5349] usb_probe_interface+0x641/0xbc0 [ 144.984958][ T5349] ? __pfx_usb_probe_interface+0x10/0x10 [ 144.987353][ T5349] really_probe+0x26a/0x9a0 [ 144.989391][ T5349] __driver_probe_device+0x18c/0x2f0 [ 144.991725][ T5349] driver_probe_device+0x4f/0x430 [ 144.993725][ T5349] __device_attach_driver+0x2ce/0x530 [ 144.996016][ T5349] bus_for_each_drv+0x251/0x2e0 [ 144.998182][ T5349] ? __pfx___device_attach_driver+0x10/0x10 [ 145.001199][ T5349] ? __pfx_bus_for_each_drv+0x10/0x10 [ 145.004103][ T5349] __device_attach+0x2b8/0x400 [ 145.006749][ T5349] ? __pfx___device_attach+0x10/0x10 [ 145.009336][ T5349] ? do_raw_spin_unlock+0x4d/0x240 [ 145.011700][ T5349] bus_probe_device+0x185/0x260 [ 145.013833][ T5349] device_add+0x7b6/0xb50 [ 145.015815][ T5349] usb_set_configuration+0x1a87/0x20e0 [ 145.018165][ T5349] usb_generic_driver_probe+0x8d/0x150 [ 145.020583][ T5349] usb_probe_device+0x1c4/0x390 [ 145.022707][ T5349] ? __pfx_usb_probe_device+0x10/0x10 [ 145.025036][ T5349] really_probe+0x26a/0x9a0 [ 145.027049][ T5349] __driver_probe_device+0x18c/0x2f0 [ 145.029464][ T5349] driver_probe_device+0x4f/0x430 [ 145.031584][ T5349] __device_attach_driver+0x2ce/0x530 [ 145.034159][ T5349] bus_for_each_drv+0x251/0x2e0 [ 145.036404][ T5349] ? __pfx___device_attach_driver+0x10/0x10 [ 145.039157][ T5349] ? __pfx_bus_for_each_drv+0x10/0x10 [ 145.041650][ T5349] __device_attach+0x2b8/0x400 [ 145.043901][ T5349] ? __pfx___device_attach+0x10/0x10 [ 145.046345][ T5349] ? do_raw_spin_unlock+0x4d/0x240 [ 145.048678][ T5349] bus_probe_device+0x185/0x260 [ 145.050972][ T5349] device_add+0x7b6/0xb50 [ 145.052825][ T5349] usb_new_device+0xa39/0x16c0 [ 145.054701][ T5349] ? __pfx_usb_new_device+0x10/0x10 [ 145.056956][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.059264][ T5349] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.061341][ T5349] hub_event+0x2941/0x4a00 [ 145.063219][ T5349] ? __pfx_hub_event+0x10/0x10 [ 145.065395][ T5349] ? process_scheduled_works+0x9ef/0x17b0 [ 145.067883][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.070196][ T5349] ? process_scheduled_works+0x9ef/0x17b0 [ 145.072591][ T5349] ? process_scheduled_works+0x9ef/0x17b0 [ 145.074859][ T5349] process_scheduled_works+0xade/0x17b0 [ 145.077243][ T5349] ? __pfx_process_scheduled_works+0x10/0x10 [ 145.079801][ T5349] worker_thread+0x8a0/0xda0 [ 145.081802][ T5349] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 145.084623][ T5349] ? __kthread_parkme+0x7b/0x200 [ 145.086945][ T5349] kthread+0x70e/0x8a0 [ 145.089100][ T5349] ? __pfx_worker_thread+0x10/0x10 [ 145.091669][ T5349] ? __pfx_kthread+0x10/0x10 [ 145.094079][ T5349] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.096738][ T5349] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.099467][ T5349] ? __pfx_kthread+0x10/0x10 [ 145.101604][ T5349] ret_from_fork+0x3fc/0x770 [ 145.103711][ T5349] ? __pfx_ret_from_fork+0x10/0x10 [ 145.105970][ T5349] ? __pfx_kthread+0x10/0x10 [ 145.107925][ T5349] ret_from_fork_asm+0x1a/0x30 [ 145.110125][ T5349] [ 145.111774][ T5349] Kernel Offset: disabled [ 145.113654][ T5349] Rebooting in 86400 seconds..