Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. 2026/03/16 01:06:43 parsed 1 programs [ 114.585478][ T6179] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 117.605515][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.619573][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.630542][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.639252][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.647145][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.224913][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.232939][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.282198][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.290156][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.289333][ T6245] chnl_net:caif_netlink_parms(): no params data found [ 120.359151][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.366576][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.373808][ T6245] bridge_slave_0: entered allmulticast mode [ 120.381489][ T6245] bridge_slave_0: entered promiscuous mode [ 120.389834][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.397380][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.404592][ T6245] bridge_slave_1: entered allmulticast mode [ 120.412093][ T6245] bridge_slave_1: entered promiscuous mode [ 120.443901][ T6245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.457188][ T6245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.491902][ T6245] team0: Port device team_slave_0 added [ 120.500366][ T6245] team0: Port device team_slave_1 added [ 120.528320][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.535269][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.561918][ T6245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.575224][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.582225][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.608310][ T6245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.651850][ T6245] hsr_slave_0: entered promiscuous mode [ 120.658567][ T6245] hsr_slave_1: entered promiscuous mode [ 121.222689][ T6245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.236729][ T6245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.248815][ T6245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.262561][ T6245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.316896][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.324813][ T6245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.333011][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.340262][ T6245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.352620][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.363845][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.480654][ T6245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.515269][ T6245] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.533531][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.540712][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.563353][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.570585][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.864380][ T6245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.949155][ T6245] veth0_vlan: entered promiscuous mode [ 121.968977][ T6245] veth1_vlan: entered promiscuous mode [ 122.025439][ T6245] veth0_macvtap: entered promiscuous mode [ 122.040908][ T6245] veth1_macvtap: entered promiscuous mode [ 122.076817][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.099101][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.123384][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.150008][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.170699][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.193287][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.378137][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/16 01:06:56 executed programs: 0 [ 123.155337][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.170836][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.179272][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.189044][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.198374][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.463178][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.497243][ T6343] chnl_net:caif_netlink_parms(): no params data found [ 123.656178][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.663672][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.676521][ T6343] bridge_slave_0: entered allmulticast mode [ 123.684967][ T6343] bridge_slave_0: entered promiscuous mode [ 123.695288][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.703111][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.710775][ T6343] bridge_slave_1: entered allmulticast mode [ 123.720151][ T6343] bridge_slave_1: entered promiscuous mode [ 123.777442][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.792843][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.852344][ T6343] team0: Port device team_slave_0 added [ 123.862639][ T6343] team0: Port device team_slave_1 added [ 123.910690][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.917879][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.945080][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.959028][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.966410][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.992602][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.059640][ T6343] hsr_slave_0: entered promiscuous mode [ 124.072390][ T6343] hsr_slave_1: entered promiscuous mode [ 124.079776][ T6343] debugfs: 'hsr0' already exists in 'hsr' [ 124.085518][ T6343] Cannot create hsr debugfs directory [ 124.282929][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.051744][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.236175][ T51] Bluetooth: hci0: command tx timeout [ 125.276370][ T49] bridge_slave_1: left allmulticast mode [ 125.286329][ T49] bridge_slave_1: left promiscuous mode [ 125.293148][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.303660][ T49] bridge_slave_0: left allmulticast mode [ 125.316893][ T49] bridge_slave_0: left promiscuous mode [ 125.322742][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.549822][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.566665][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.578224][ T49] bond0 (unregistering): Released all slaves [ 125.723867][ T49] hsr_slave_0: left promiscuous mode [ 125.730412][ T49] hsr_slave_1: left promiscuous mode [ 125.737170][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.744594][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.753613][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.761057][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.775090][ T49] veth1_macvtap: left promiscuous mode [ 125.781611][ T49] veth0_macvtap: left promiscuous mode [ 125.787351][ T49] veth1_vlan: left promiscuous mode [ 125.792680][ T49] veth0_vlan: left promiscuous mode [ 126.054875][ T49] team0 (unregistering): Port device team_slave_1 removed [ 126.084408][ T49] team0 (unregistering): Port device team_slave_0 removed [ 126.466806][ T6343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.488864][ T6343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.518407][ T6343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.546261][ T6343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.805159][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.869008][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.892852][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.900074][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.919350][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.926662][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.205038][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.270322][ T6343] veth0_vlan: entered promiscuous mode [ 127.283507][ T6343] veth1_vlan: entered promiscuous mode [ 127.317134][ T51] Bluetooth: hci0: command tx timeout [ 127.325056][ T6343] veth0_macvtap: entered promiscuous mode [ 127.335609][ T6343] veth1_macvtap: entered promiscuous mode [ 127.360933][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.376199][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.392130][ T3525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.401908][ T3525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.412171][ T3525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.421077][ T3525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.484512][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.496991][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.521933][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.529996][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.590939][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.600276][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.826164][ T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.975815][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 127.984150][ T47] usb 1-1: config 0 has an invalid interface number: 54 but max is 0 [ 127.992466][ T47] usb 1-1: config 0 has no interface number 0 [ 127.999469][ T47] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 128.009626][ T47] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 128.020566][ T47] usb 1-1: config 0 interface 54 has no altsetting 0 [ 128.030067][ T47] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 128.039536][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.047630][ T47] usb 1-1: Product: syz [ 128.051822][ T47] usb 1-1: Manufacturer: syz [ 128.056476][ T47] usb 1-1: SerialNumber: syz [ 128.065289][ T47] usb 1-1: config 0 descriptor?? [ 128.072763][ T6490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 128.080894][ T6490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 128.297487][ T47] ums_eneub6250 1-1:0.54: USB Mass Storage device detected [ 128.316790][ T47] scsi host1: usb-storage 1-1:0.54 [ 128.423634][ T47] ums_eneub6250 1-1:0.54: probe with driver ums_eneub6250 failed with error 3 [ 128.440963][ T47] usb 1-1: USB disconnect, device number 2 2026/03/16 01:07:01 executed programs: 3 [ 128.826056][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.835554][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.065831][ T5858] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.225979][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 129.233460][ T5858] usb 1-1: config 0 has an invalid interface number: 54 but max is 0 [ 129.241786][ T5858] usb 1-1: config 0 has no interface number 0 [ 129.248089][ T5858] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 129.258824][ T5858] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 129.268821][ T5858] usb 1-1: config 0 interface 54 has no altsetting 0 [ 129.277764][ T5858] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 129.287214][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.295224][ T5858] usb 1-1: Product: syz [ 129.299586][ T5858] usb 1-1: Manufacturer: syz [ 129.304202][ T5858] usb 1-1: SerialNumber: syz [ 129.311226][ T5858] usb 1-1: config 0 descriptor?? [ 129.317177][ T6497] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.324491][ T6497] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.396441][ T51] Bluetooth: hci0: command tx timeout [ 129.539295][ T5858] ums_eneub6250 1-1:0.54: USB Mass Storage device detected [ 129.552589][ T5858] scsi host1: usb-storage 1-1:0.54 [ 129.644933][ T5858] ums_eneub6250 1-1:0.54: probe with driver ums_eneub6250 failed with error 3 [ 129.659596][ T5858] usb 1-1: USB disconnect, device number 3 [ 130.060502][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.069424][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.295805][ T5930] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.455799][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 130.462528][ T5930] usb 1-1: config 0 has an invalid interface number: 54 but max is 0 [ 130.470692][ T5930] usb 1-1: config 0 has no interface number 0 [ 130.477032][ T5930] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 130.487166][ T5930] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 130.497170][ T5930] usb 1-1: config 0 interface 54 has no altsetting 0 [ 130.505784][ T5930] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 130.514911][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.522964][ T5930] usb 1-1: Product: syz [ 130.527160][ T5930] usb 1-1: Manufacturer: syz [ 130.531744][ T5930] usb 1-1: SerialNumber: syz [ 130.538304][ T5930] usb 1-1: config 0 descriptor?? [ 130.544489][ T6503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.552136][ T6503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.562884][ T5930] ums_eneub6250 1-1:0.54: USB Mass Storage device detected [ 130.573821][ T5930] scsi host1: usb-storage 1-1:0.54 [ 131.475786][ T51] Bluetooth: hci0: command tx timeout [ 131.638933][ T6508] ------------[ cut here ]------------ [ 131.644571][ T6508] URB ffff888034580d00 submitted while active [ 131.650707][ T6508] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#1: usb-storage/6508 [ 131.661014][ T6508] Modules linked in: [ 131.665148][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 131.674576][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.684726][ T6508] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 131.690294][ T6508] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 d7 58 ea fa 49 83 3e 00 74 40 e8 bc f4 80 fa 48 8d 3d e5 aa 1b 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 f4 80 fa eb 05 e8 9a f4 [ 131.709974][ T6508] RSP: 0018:ffffc900035873a8 EFLAGS: 00010293 [ 131.716214][ T6508] RAX: ffffffff8745fe44 RBX: ffff888034580d00 RCX: ffff8880301ebd00 [ 131.724227][ T6508] RDX: 0000000000000000 RSI: ffff888034580d00 RDI: ffffffff9061a930 [ 131.732318][ T6508] RBP: ffffc90003587568 R08: 0000000000000002 R09: 0000000000000000 [ 131.740328][ T6508] R10: ffffc900035874a0 R11: fffff520006b0e9f R12: 0000000000000c00 [ 131.748360][ T6508] R13: ffff888032540fb8 R14: ffff888034580d08 R15: dffffc0000000000 [ 131.756373][ T6508] FS: 0000000000000000(0000) GS:ffff888124ee0000(0000) knlGS:0000000000000000 [ 131.765309][ T6508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.771956][ T6508] CR2: 00007ffdf1755fc8 CR3: 000000007cb56000 CR4: 00000000003526f0 [ 131.779983][ T6508] Call Trace: [ 131.783278][ T6508] [ 131.786303][ T6508] ? __raw_spin_lock_init+0x45/0x100 [ 131.791626][ T6508] ? __init_swait_queue_head+0xa9/0x150 [ 131.797277][ T6508] usb_stor_msg_common+0x2a2/0x500 [ 131.802457][ T6508] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 131.808180][ T6508] usb_stor_bulk_transfer_buf+0x155/0x7b0 [ 131.813948][ T6508] ene_send_scsi_cmd+0x119/0x610 [ 131.818963][ T6508] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 131.824455][ T6508] ene_init+0x14f/0x380 [ 131.828682][ T6508] ene_transport+0x3ac3/0x46e0 [ 131.833471][ T6508] ? finish_task_switch+0x41f/0xbe0 [ 131.838768][ T6508] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.844016][ T6508] ? finish_task_switch+0x41f/0xbe0 [ 131.849310][ T6508] ? rcu_is_watching+0x15/0xb0 [ 131.854111][ T6508] ? __schedule+0x167b/0x5590 [ 131.858855][ T6508] ? __pfx_ene_transport+0x10/0x10 [ 131.864074][ T6508] ? look_up_lock_class+0x57/0x110 [ 131.869258][ T6508] ? register_lock_class+0x31/0x2e0 [ 131.874488][ T6508] ? __lock_acquire+0x6b5/0x2cf0 [ 131.879853][ T6508] ? schedule+0x16e/0x360 [ 131.884202][ T6508] ? __mutex_trylock_common+0x158/0x260 [ 131.889814][ T6508] ? __pfx___mutex_trylock_common+0x10/0x10 [ 131.895771][ T6508] usb_stor_invoke_transport+0x11d/0x1a50 [ 131.901541][ T6508] ? __lock_acquire+0x6b5/0x2cf0 [ 131.906563][ T6508] ? _raw_spin_unlock_irq+0x2e/0x50 [ 131.911791][ T6508] ? __wait_for_common+0x5ae/0x690 [ 131.916948][ T6508] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 131.923150][ T6508] ? do_raw_spin_lock+0x12b/0x2f0 [ 131.928250][ T6508] ? usb_stor_pad12_command+0x76/0xe0 [ 131.933669][ T6508] usb_stor_control_thread+0x44c/0x900 [ 131.939202][ T6508] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 131.945215][ T6508] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.951104][ T6508] ? __kthread_parkme+0x7a/0x1f0 [ 131.956374][ T6508] kthread+0x388/0x470 [ 131.960755][ T6508] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 131.966836][ T6508] ? __pfx_kthread+0x10/0x10 [ 131.971470][ T6508] ret_from_fork+0x51e/0xb90 [ 131.976133][ T6508] ? __pfx_ret_from_fork+0x10/0x10 [ 131.981280][ T6508] ? __switch_to+0xc7d/0x1450 [ 131.986053][ T6508] ? __pfx_kthread+0x10/0x10 [ 131.990674][ T6508] ret_from_fork_asm+0x1a/0x30 [ 131.995454][ T6508] [ 131.998544][ T6508] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 132.005825][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: usb-storage Not tainted syzkaller #0 PREEMPT(full) [ 132.015177][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.025228][ T6508] Call Trace: [ 132.028499][ T6508] [ 132.031421][ T6508] vpanic+0x56c/0xa60 [ 132.035413][ T6508] ? __pfx__printk+0x10/0x10 [ 132.039993][ T6508] ? __pfx_vpanic+0x10/0x10 [ 132.044589][ T6508] ? is_bpf_text_address+0x292/0x2b0 [ 132.049866][ T6508] ? is_bpf_text_address+0x26/0x2b0 [ 132.055075][ T6508] panic+0xc5/0xd0 [ 132.058791][ T6508] ? __pfx_panic+0x10/0x10 [ 132.063226][ T6508] ? ret_from_fork_asm+0x1a/0x30 [ 132.068155][ T6508] __warn+0x315/0x4f0 [ 132.072124][ T6508] ? usb_submit_urb+0x7b/0x18b0 [ 132.076963][ T6508] ? usb_submit_urb+0x7b/0x18b0 [ 132.081812][ T6508] __report_bug+0x29a/0x540 [ 132.086332][ T6508] ? usb_submit_urb+0x7b/0x18b0 [ 132.091199][ T6508] ? __pfx___report_bug+0x10/0x10 [ 132.096221][ T6508] report_bug_entry+0x19a/0x290 [ 132.101067][ T6508] ? usb_submit_urb+0x7e/0x18b0 [ 132.105919][ T6508] ? usb_submit_urb+0x83/0x18b0 [ 132.110776][ T6508] handle_bug+0xce/0x200 [ 132.115102][ T6508] exc_invalid_op+0x1a/0x50 [ 132.119596][ T6508] asm_exc_invalid_op+0x1a/0x20 [ 132.124438][ T6508] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 132.129896][ T6508] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 d7 58 ea fa 49 83 3e 00 74 40 e8 bc f4 80 fa 48 8d 3d e5 aa 1b 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 f4 80 fa eb 05 e8 9a f4 [ 132.149489][ T6508] RSP: 0018:ffffc900035873a8 EFLAGS: 00010293 [ 132.155652][ T6508] RAX: ffffffff8745fe44 RBX: ffff888034580d00 RCX: ffff8880301ebd00 [ 132.163641][ T6508] RDX: 0000000000000000 RSI: ffff888034580d00 RDI: ffffffff9061a930 [ 132.171615][ T6508] RBP: ffffc90003587568 R08: 0000000000000002 R09: 0000000000000000 [ 132.179580][ T6508] R10: ffffc900035874a0 R11: fffff520006b0e9f R12: 0000000000000c00 [ 132.187546][ T6508] R13: ffff888032540fb8 R14: ffff888034580d08 R15: dffffc0000000000 [ 132.195516][ T6508] ? usb_submit_urb+0x74/0x18b0 [ 132.200390][ T6508] ? usb_submit_urb+0x74/0x18b0 [ 132.205244][ T6508] ? __raw_spin_lock_init+0x45/0x100 [ 132.210534][ T6508] ? __init_swait_queue_head+0xa9/0x150 [ 132.216088][ T6508] usb_stor_msg_common+0x2a2/0x500 [ 132.221230][ T6508] ? __pfx_usb_stor_msg_common+0x10/0x10 [ 132.226897][ T6508] usb_stor_bulk_transfer_buf+0x155/0x7b0 [ 132.232628][ T6508] ene_send_scsi_cmd+0x119/0x610 [ 132.237565][ T6508] ? __pfx_ene_send_scsi_cmd+0x10/0x10 [ 132.243028][ T6508] ene_init+0x14f/0x380 [ 132.247211][ T6508] ene_transport+0x3ac3/0x46e0 [ 132.251968][ T6508] ? finish_task_switch+0x41f/0xbe0 [ 132.257163][ T6508] ? lockdep_hardirqs_on+0x7a/0x110 [ 132.262456][ T6508] ? finish_task_switch+0x41f/0xbe0 [ 132.267648][ T6508] ? rcu_is_watching+0x15/0xb0 [ 132.272403][ T6508] ? __schedule+0x167b/0x5590 [ 132.277093][ T6508] ? __pfx_ene_transport+0x10/0x10 [ 132.282223][ T6508] ? look_up_lock_class+0x57/0x110 [ 132.287357][ T6508] ? register_lock_class+0x31/0x2e0 [ 132.292570][ T6508] ? __lock_acquire+0x6b5/0x2cf0 [ 132.297521][ T6508] ? schedule+0x16e/0x360 [ 132.301848][ T6508] ? __mutex_trylock_common+0x158/0x260 [ 132.307420][ T6508] ? __pfx___mutex_trylock_common+0x10/0x10 [ 132.313314][ T6508] usb_stor_invoke_transport+0x11d/0x1a50 [ 132.319037][ T6508] ? __lock_acquire+0x6b5/0x2cf0 [ 132.323974][ T6508] ? _raw_spin_unlock_irq+0x2e/0x50 [ 132.329167][ T6508] ? __wait_for_common+0x5ae/0x690 [ 132.334274][ T6508] ? __pfx_usb_stor_invoke_transport+0x10/0x10 [ 132.340436][ T6508] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.345486][ T6508] ? usb_stor_pad12_command+0x76/0xe0 [ 132.350879][ T6508] usb_stor_control_thread+0x44c/0x900 [ 132.356370][ T6508] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 132.362371][ T6508] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 132.368190][ T6508] ? __kthread_parkme+0x7a/0x1f0 [ 132.373138][ T6508] kthread+0x388/0x470 [ 132.377201][ T6508] ? __pfx_usb_stor_control_thread+0x10/0x10 [ 132.383181][ T6508] ? __pfx_kthread+0x10/0x10 [ 132.387765][ T6508] ret_from_fork+0x51e/0xb90 [ 132.392354][ T6508] ? __pfx_ret_from_fork+0x10/0x10 [ 132.397463][ T6508] ? __switch_to+0xc7d/0x1450 [ 132.402137][ T6508] ? __pfx_kthread+0x10/0x10 [ 132.406731][ T6508] ret_from_fork_asm+0x1a/0x30 [ 132.411498][ T6508] [ 132.414997][ T6508] Kernel Offset: disabled [ 132.419309][ T6508] Rebooting in 86400 seconds..