[ 74.239314][ T29] audit: type=1400 audit(1778217310.833:96): avc: denied { mount } for pid=3004 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 74.268318][ T29] audit: type=1400 audit(1778217310.833:97): avc: denied { mounton } for pid=3004 comm="syz-executor" path="/root/syzkaller.a7fe5i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 74.448687][ T29] audit: type=1400 audit(1778217311.043:98): avc: denied { create } for pid=3457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 74.676326][ T29] audit: type=1400 audit(1778217311.263:99): avc: denied { create } for pid=3464 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 74.702271][ T29] audit: type=1400 audit(1778217311.293:100): avc: denied { sys_admin } for pid=3464 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 74.755026][ T29] audit: type=1400 audit(1778217311.343:101): avc: denied { sys_chroot } for pid=3465 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 75.063651][ T29] audit: type=1401 audit(1778217311.653:102): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 76.874967][ T29] audit: type=1400 audit(1778217313.463:103): avc: denied { create } for pid=3514 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 76.917764][ T29] audit: type=1400 audit(1778217313.463:104): avc: denied { setattr } for pid=3514 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 76.953649][ T29] audit: type=1400 audit(1778217313.473:105): avc: denied { read write } for pid=3514 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts.
2026/05/08 05:15:53 parsed 1 programs
[ 119.795045][ T29] kauditd_printk_skb: 1 callbacks suppressed
[ 119.795086][ T29] audit: type=1400 audit(1778217356.383:107): avc: denied { unlink } for pid=4011 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 119.903870][ T4011] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 137.997538][ T29] audit: type=1401 audit(1778217374.583:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2026/05/08 05:16:15 executed programs: 0
2026/05/08 05:16:29 executed programs: 2
[ 152.456553][ T29] audit: type=1400 audit(1778217389.043:109): avc: denied { read write } for pid=4996 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 152.487078][ T29] audit: type=1400 audit(1778217389.073:110): avc: denied { open } for pid=4996 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 152.511350][ T29] audit: type=1400 audit(1778217389.073:111): avc: denied { ioctl } for pid=4996 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 152.728126][ T28] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 152.887808][ T28] usb 4-1: Using ep0 maxpacket: 32
[ 152.895575][ T28] usb 4-1: config 7 has an invalid interface number: 124 but max is 2
[ 152.904101][ T28] usb 4-1: config 7 has an invalid interface number: 52 but max is 2
[ 152.912935][ T28] usb 4-1: config 7 has no interface number 1
[ 152.919117][ T28] usb 4-1: config 7 has no interface number 2
[ 152.925280][ T28] usb 4-1: config 7 interface 0 altsetting 163 bulk endpoint 0x85 has invalid maxpacket 8
[ 152.935386][ T28] usb 4-1: config 7 interface 0 altsetting 163 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 152.946331][ T28] usb 4-1: config 7 interface 124 has no altsetting 0
[ 152.953275][ T28] usb 4-1: config 7 interface 0 has no altsetting 0
[ 152.959965][ T28] usb 4-1: config 7 interface 52 has no altsetting 0
[ 152.971026][ T28] usb 4-1: New USB device found, idVendor=2040, idProduct=b900, bcdDevice=c1.59
[ 152.980482][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 152.988558][ T28] usb 4-1: Product: syz
[ 152.992761][ T28] usb 4-1: Manufacturer: syz
[ 152.997412][ T28] usb 4-1: SerialNumber: syz
[ 153.219973][ T28] smsusb:smsusb_probe: board id=8, interface number 124
[ 153.230866][ T28] smsusb:smsusb_probe: board id=8, interface number 0
[ 153.241909][ T28] smsusb:siano_media_device_register: media controller created
[ 153.251994][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.259473][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.266899][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.274313][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.281947][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.289589][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.298699][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.306410][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.314046][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.321463][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.328866][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.336171][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.343714][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.351361][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.358775][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.366122][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.373744][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.381201][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.388479][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.396153][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.403557][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.410808][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.418250][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.425840][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.433162][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.441348][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.448749][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.456099][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.463699][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.471371][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.478685][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.486334][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.493772][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.501180][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.508580][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.515876][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.523187][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.531161][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.538487][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.546212][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.553476][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.560943][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.569213][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.577267][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.584580][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.591895][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.599176][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.606492][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.613860][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.621152][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.628615][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.636400][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.643717][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.651072][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.658420][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.665724][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.673345][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.680638][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.688005][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.695784][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.703265][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.710548][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.717843][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.725409][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.732710][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.739997][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.747598][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.755032][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.762372][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.769770][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.777344][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.785139][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.792479][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.800237][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.807546][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.814986][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.822698][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.830007][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.837547][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.845236][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.852959][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.860264][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.867629][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.874908][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.882616][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.890051][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.897395][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.905764][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.913195][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.920517][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.927885][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.935222][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.942726][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.950043][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.960952][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.968444][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.976299][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.983931][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.991422][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 153.998733][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.006072][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.013389][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.020713][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.028034][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.036576][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.043893][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.051149][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.058410][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.065676][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.072938][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.080339][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.088504][ T28] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[ 154.097008][ T28] smsmdtv:smscore_set_device_mode: mode detect failed -22
[ 154.104269][ T28] smsmdtv:smscore_start_device: set device mode failed , rc -22
[ 154.112105][ T28] smsusb:smsusb_init_device: smscore_start_device(...) failed
[ 154.120132][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.127467][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.134866][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.142187][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.149489][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.156768][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.164037][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.172924][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 154.181073][ T28] ------------[ cut here ]------------
[ 154.186681][ T28] workqueue: work disable count underflowed
[ 154.192703][ T28] WARNING: kernel/workqueue.c:4436 at enable_work+0x2d1/0x320, CPU#1: kworker/1:1/28
[ 154.202437][ T28] Modules linked in:
[ 154.206820][ T28] CPU: 1 UID: 0 PID: 28 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full)
[ 154.216200][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 154.226572][ T28] Workqueue: usb_hub_wq hub_event
[ 154.231761][ T28] RIP: 0010:enable_work+0x2d1/0x320
[ 154.237216][ T28] Code: ff e8 e3 f2 34 00 e8 7e a1 ef 05 e9 61 ff ff ff e8 d4 f2 34 00 90 0f 0b 90 e9 17 fe ff ff e8 c6 f2 34 00 48 8d 3d 1f bc 73 09 <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 7a 9d 9a 00 e9
[ 154.256954][ T28] RSP: 0018:ffffc900001e6cc8 EFLAGS: 00010093
[ 154.263138][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817dcdf0
[ 154.271144][ T28] RDX: ffff8881026e9dc0 RSI: ffffffff817dcfba RDI: ffffffff8af18be0
[ 154.279141][ T28] RBP: ffff88811a46a038 R08: 0000000000000007 R09: 0000000000000000
[ 154.287462][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 154.295568][ T28] R13: 1ffff9200003cd9a R14: ffff88811a46a000 R15: 0000000000000006
[ 154.303840][ T28] FS: 0000000000000000(0000) GS:ffff8882687a8000(0000) knlGS:0000000000000000
[ 154.312820][ T28] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 154.319429][ T28] CR2: 00007fda4f1b9f00 CR3: 000000011a436000 CR4: 00000000003506f0
[ 154.327427][ T28] Call Trace:
[ 154.330731][ T28]
[ 154.333699][ T28] ? __pfx_enable_work+0x10/0x10
[ 154.338800][ T28] ? __pfx___might_resched+0x10/0x10
[ 154.344216][ T28] cancel_work_sync+0x96/0xf0
[ 154.349029][ T28] smsusb_stop_streaming+0xaa/0x210
[ 154.354392][ T28] smsusb_term_device+0x8f/0x200
[ 154.359725][ T28] smsusb_init_device+0xb4e/0xbb0
[ 154.364789][ T28] ? __pfx_smsusb_init_device+0x10/0x10
[ 154.370368][ T28] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 154.375944][ T28] ? usb_clear_halt+0xb5/0x160
[ 154.380771][ T28] smsusb_probe+0xd7f/0xe1f
[ 154.385465][ T28] ? __pfx_smsusb_probe+0x10/0x10
[ 154.390620][ T28] ? mark_held_locks+0x40/0x70
[ 154.395422][ T28] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 154.401441][ T28] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 154.407363][ T28] ? __pm_runtime_set_status+0x13c/0x970
[ 154.413074][ T28] usb_probe_interface+0x303/0x8f0
[ 154.418244][ T28] ? __pfx_usb_probe_interface+0x10/0x10
[ 154.424000][ T28] really_probe+0x241/0xa60
[ 154.428566][ T28] __driver_probe_device+0x22e/0x480
[ 154.433996][ T28] driver_probe_device+0x4c/0x1b0
[ 154.439165][ T28] __device_attach_driver+0x1df/0x340
[ 154.444577][ T28] ? __pfx___device_attach_driver+0x10/0x10
[ 154.450530][ T28] bus_for_each_drv+0x159/0x1e0
[ 154.455422][ T28] ? __pfx_bus_for_each_drv+0x10/0x10
[ 154.460824][ T28] ? lockdep_hardirqs_on+0x78/0x100
[ 154.466051][ T28] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 154.471889][ T28] __device_attach+0x1e4/0x4d0
[ 154.476706][ T28] ? __pfx___device_attach+0x10/0x10
[ 154.482135][ T28] ? do_raw_spin_unlock+0x145/0x1e0
[ 154.487401][ T28] device_initial_probe+0xaf/0xd0
[ 154.492567][ T28] bus_probe_device+0x64/0x160
[ 154.497375][ T28] device_add+0x1210/0x1950
[ 154.502053][ T28] ? __pfx_device_add+0x10/0x10
[ 154.506941][ T28] ? kfree+0x204/0x650
[ 154.511138][ T28] ? create_intf_ep_devs.isra.0+0x19f/0x200
[ 154.517208][ T28] usb_set_configuration+0xd97/0x1c60
[ 154.522833][ T28] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 154.528940][ T28] usb_generic_driver_probe+0xa1/0xe0
[ 154.534375][ T28] usb_probe_device+0xef/0x400
[ 154.539212][ T28] ? __pfx_usb_probe_device+0x10/0x10
[ 154.544634][ T28] really_probe+0x241/0xa60
[ 154.549197][ T28] __driver_probe_device+0x22e/0x480
[ 154.554511][ T28] ? usb_driver_applicable+0x1c7/0x220
[ 154.560026][ T28] driver_probe_device+0x4c/0x1b0
[ 154.565097][ T28] __device_attach_driver+0x1df/0x340
[ 154.570555][ T28] ? __pfx___device_attach_driver+0x10/0x10
[ 154.576523][ T28] bus_for_each_drv+0x159/0x1e0
[ 154.582134][ T28] ? __pfx_bus_for_each_drv+0x10/0x10
[ 154.587655][ T28] ? lockdep_hardirqs_on+0x78/0x100
[ 154.592924][ T28] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 154.598811][ T28] __device_attach+0x1e4/0x4d0
[ 154.603623][ T28] ? __pfx___device_attach+0x10/0x10
[ 154.609125][ T28] ? do_raw_spin_unlock+0x145/0x1e0
[ 154.614355][ T28] device_initial_probe+0xaf/0xd0
[ 154.619452][ T28] bus_probe_device+0x64/0x160
[ 154.624656][ T28] device_add+0x1210/0x1950
[ 154.629195][ T28] ? __pfx_device_add+0x10/0x10
[ 154.634098][ T28] ? add_device_randomness+0xb7/0xf0
[ 154.639434][ T28] usb_new_device.cold+0x685/0x115c
[ 154.644689][ T28] ? do_raw_spin_lock+0x128/0x260
[ 154.649761][ T28] ? __pfx_usb_new_device+0x10/0x10
[ 154.655283][ T28] ? mark_held_locks+0x40/0x70
[ 154.660104][ T28] hub_event+0x314d/0x4af0
[ 154.664598][ T28] ? __pfx_hub_event+0x10/0x10
[ 154.669444][ T28] ? assoc_array_gc+0x470/0x15d0
[ 154.674583][ T28] ? rcu_is_watching+0x12/0xc0
[ 154.679515][ T28] process_one_work+0xa0e/0x1980
[ 154.684523][ T28] ? __pfx_process_one_work+0x10/0x10
[ 154.690077][ T28] ? __pfx_hub_event+0x10/0x10
[ 154.694913][ T28] worker_thread+0x5ef/0xe50
[ 154.699674][ T28] ? kthread+0x13a/0x450
[ 154.704158][ T28] ? __pfx_worker_thread+0x10/0x10
[ 154.709349][ T28] kthread+0x370/0x450
[ 154.713451][ T28] ? __pfx_kthread+0x10/0x10
[ 154.718189][ T28] ret_from_fork+0x69a/0xc80
[ 154.722827][ T28] ? __pfx_ret_from_fork+0x10/0x10
[ 154.728067][ T28] ? __switch_to+0x7f6/0x1100
[ 154.732910][ T28] ? __switch_to_asm+0x39/0x70
[ 154.737861][ T28] ? __pfx_kthread+0x10/0x10
[ 154.742506][ T28] ret_from_fork_asm+0x1a/0x30
[ 154.747416][ T28]
[ 154.750477][ T28] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 154.757956][ T28] CPU: 1 UID: 0 PID: 28 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full)
[ 154.767349][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 154.777531][ T28] Workqueue: usb_hub_wq hub_event
[ 154.782615][ T28] Call Trace:
[ 154.786134][ T28]
[ 154.789122][ T28] dump_stack_lvl+0x100/0x190
[ 154.793837][ T28] vpanic+0x552/0x970
[ 154.797852][ T28] ? __pfx_vpanic+0x10/0x10
[ 154.802672][ T28] panic+0xd1/0xe0
[ 154.806433][ T28] ? __pfx_panic+0x10/0x10
[ 154.810902][ T28] ? check_panic_on_warn+0x1f/0x90
[ 154.816039][ T28] check_panic_on_warn.cold+0x19/0x34
[ 154.821538][ T28] ? enable_work+0x2d1/0x320
[ 154.826171][ T28] __warn.cold+0x191/0x328
[ 154.830897][ T28] __report_bug+0x296/0x3d0
[ 154.835535][ T28] ? enable_work+0x2d1/0x320
[ 154.840198][ T28] ? __pfx___report_bug+0x10/0x10
[ 154.845358][ T28] ? do_raw_spin_lock+0x128/0x260
[ 154.850412][ T28] ? enable_work+0x2ca/0x320
[ 154.855038][ T28] ? enable_work+0x100/0x320
[ 154.859777][ T28] ? do_raw_spin_unlock+0x145/0x1e0
[ 154.865015][ T28] report_bug_entry+0xe1/0x290
[ 154.869818][ T28] ? enable_work+0x2d1/0x320
[ 154.874448][ T28] handle_bug+0x1cd/0x2a0
[ 154.878823][ T28] exc_invalid_op+0x17/0x50
[ 154.883377][ T28] asm_exc_invalid_op+0x1a/0x20
[ 154.888352][ T28] RIP: 0010:enable_work+0x2d1/0x320
[ 154.893687][ T28] Code: ff e8 e3 f2 34 00 e8 7e a1 ef 05 e9 61 ff ff ff e8 d4 f2 34 00 90 0f 0b 90 e9 17 fe ff ff e8 c6 f2 34 00 48 8d 3d 1f bc 73 09 <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 7a 9d 9a 00 e9
[ 154.913324][ T28] RSP: 0018:ffffc900001e6cc8 EFLAGS: 00010093
[ 154.919504][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817dcdf0
[ 154.927506][ T28] RDX: ffff8881026e9dc0 RSI: ffffffff817dcfba RDI: ffffffff8af18be0
[ 154.935544][ T28] RBP: ffff88811a46a038 R08: 0000000000000007 R09: 0000000000000000
[ 154.943551][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 154.951547][ T28] R13: 1ffff9200003cd9a R14: ffff88811a46a000 R15: 0000000000000006
[ 154.959642][ T28] ? enable_work+0x100/0x320
[ 154.964383][ T28] ? enable_work+0x2ca/0x320
[ 154.969267][ T28] ? enable_work+0x2ca/0x320
[ 154.974052][ T28] ? __pfx_enable_work+0x10/0x10
[ 154.979105][ T28] ? __pfx___might_resched+0x10/0x10
[ 154.984873][ T28] cancel_work_sync+0x96/0xf0
[ 154.989645][ T28] smsusb_stop_streaming+0xaa/0x210
[ 154.994884][ T28] smsusb_term_device+0x8f/0x200
[ 154.999861][ T28] smsusb_init_device+0xb4e/0xbb0
[ 155.004930][ T28] ? __pfx_smsusb_init_device+0x10/0x10
[ 155.010514][ T28] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 155.016207][ T28] ? usb_clear_halt+0xb5/0x160
[ 155.021016][ T28] smsusb_probe+0xd7f/0xe1f
[ 155.025565][ T28] ? __pfx_smsusb_probe+0x10/0x10
[ 155.030736][ T28] ? mark_held_locks+0x40/0x70
[ 155.035546][ T28] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 155.041383][ T28] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 155.047222][ T28] ? __pm_runtime_set_status+0x13c/0x970
[ 155.052987][ T28] usb_probe_interface+0x303/0x8f0
[ 155.058174][ T28] ? __pfx_usb_probe_interface+0x10/0x10
[ 155.063929][ T28] really_probe+0x241/0xa60
[ 155.068470][ T28] __driver_probe_device+0x22e/0x480
[ 155.073805][ T28] driver_probe_device+0x4c/0x1b0
[ 155.078867][ T28] __device_attach_driver+0x1df/0x340
[ 155.084291][ T28] ? __pfx___device_attach_driver+0x10/0x10
[ 155.090231][ T28] bus_for_each_drv+0x159/0x1e0
[ 155.095122][ T28] ? __pfx_bus_for_each_drv+0x10/0x10
[ 155.100535][ T28] ? lockdep_hardirqs_on+0x78/0x100
[ 155.105767][ T28] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 155.111606][ T28] __device_attach+0x1e4/0x4d0
[ 155.116427][ T28] ? __pfx___device_attach+0x10/0x10
[ 155.121752][ T28] ? do_raw_spin_unlock+0x145/0x1e0
[ 155.126988][ T28] device_initial_probe+0xaf/0xd0
[ 155.132139][ T28] bus_probe_device+0x64/0x160
[ 155.137026][ T28] device_add+0x1210/0x1950
[ 155.141752][ T28] ? __pfx_device_add+0x10/0x10
[ 155.146757][ T28] ? kfree+0x204/0x650
[ 155.150873][ T28] ? create_intf_ep_devs.isra.0+0x19f/0x200
[ 155.156895][ T28] usb_set_configuration+0xd97/0x1c60
[ 155.162508][ T28] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 155.168664][ T28] usb_generic_driver_probe+0xa1/0xe0
[ 155.174071][ T28] usb_probe_device+0xef/0x400
[ 155.179223][ T28] ? __pfx_usb_probe_device+0x10/0x10
[ 155.184644][ T28] really_probe+0x241/0xa60
[ 155.189198][ T28] __driver_probe_device+0x22e/0x480
[ 155.194699][ T28] ? usb_driver_applicable+0x1c7/0x220
[ 155.200212][ T28] driver_probe_device+0x4c/0x1b0
[ 155.205377][ T28] __device_attach_driver+0x1df/0x340
[ 155.210804][ T28] ? __pfx___device_attach_driver+0x10/0x10
[ 155.216830][ T28] bus_for_each_drv+0x159/0x1e0
[ 155.221716][ T28] ? __pfx_bus_for_each_drv+0x10/0x10
[ 155.227123][ T28] ? lockdep_hardirqs_on+0x78/0x100
[ 155.232355][ T28] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 155.238197][ T28] __device_attach+0x1e4/0x4d0
[ 155.242993][ T28] ? __pfx___device_attach+0x10/0x10
[ 155.248311][ T28] ? do_raw_spin_unlock+0x145/0x1e0
[ 155.253543][ T28] device_initial_probe+0xaf/0xd0
[ 155.258597][ T28] bus_probe_device+0x64/0x160
[ 155.263391][ T28] device_add+0x1210/0x1950
[ 155.267921][ T28] ? __pfx_device_add+0x10/0x10
[ 155.272896][ T28] ? add_device_randomness+0xb7/0xf0
[ 155.278338][ T28] usb_new_device.cold+0x685/0x115c
[ 155.283618][ T28] ? do_raw_spin_lock+0x128/0x260
[ 155.288669][ T28] ? __pfx_usb_new_device+0x10/0x10
[ 155.294003][ T28] ? mark_held_locks+0x40/0x70
[ 155.300032][ T28] hub_event+0x314d/0x4af0
[ 155.304657][ T28] ? __pfx_hub_event+0x10/0x10
[ 155.309475][ T28] ? assoc_array_gc+0x470/0x15d0
[ 155.314515][ T28] ? rcu_is_watching+0x12/0xc0
[ 155.319335][ T28] process_one_work+0xa0e/0x1980
[ 155.324326][ T28] ? __pfx_process_one_work+0x10/0x10
[ 155.329751][ T28] ? __pfx_hub_event+0x10/0x10
[ 155.334856][ T28] worker_thread+0x5ef/0xe50
[ 155.339574][ T28] ? kthread+0x13a/0x450
[ 155.343950][ T28] ? __pfx_worker_thread+0x10/0x10
[ 155.349087][ T28] kthread+0x370/0x450
[ 155.353190][ T28] ? __pfx_kthread+0x10/0x10
[ 155.357867][ T28] ret_from_fork+0x69a/0xc80
[ 155.362601][ T28] ? __pfx_ret_from_fork+0x10/0x10
[ 155.367766][ T28] ? __switch_to+0x7f6/0x1100
[ 155.372499][ T28] ? __switch_to_asm+0x39/0x70
[ 155.377336][ T28] ? __pfx_kthread+0x10/0x10
[ 155.382085][ T28] ret_from_fork_asm+0x1a/0x30
[ 155.387032][ T28]
[ 155.390832][ T28] Kernel Offset: disabled
[ 155.395353][ T28] Rebooting in 86400 seconds..