[ 83.587324][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.630460][ T9] device veth1_macvtap left promiscuous mode [ 83.638084][ T9] device veth0_macvtap left promiscuous mode [ 83.650355][ T9] device veth1_vlan left promiscuous mode [ 83.658458][ T9] device veth0_vlan left promiscuous mode [ 83.883080][ T9] team0 (unregistering): Port device team_slave_1 removed [ 83.900000][ T9] team0 (unregistering): Port device team_slave_0 removed [ 83.923416][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.942090][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.017914][ T9] bond0 (unregistering): Released all slaves [ 87.031163][ T1333] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. 2026/07/14 18:25:59 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 97.253491][ T4500] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 99.523244][ T4221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.534587][ T4221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.556173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.572128][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.582396][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.591475][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.351883][ T4654] chnl_net:caif_netlink_parms(): no params data found [ 100.413276][ T4654] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.424257][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.433347][ T4654] device bridge_slave_0 entered promiscuous mode [ 100.443980][ T4654] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.451437][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.460315][ T4654] device bridge_slave_1 entered promiscuous mode [ 100.483032][ T4654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.496262][ T4654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.523889][ T4654] team0: Port device team_slave_0 added [ 100.534917][ T4654] team0: Port device team_slave_1 added [ 100.556360][ T4654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.564349][ T4654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.592129][ T4654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.605632][ T4654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.613679][ T4654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.644686][ T4654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.702046][ T4654] device hsr_slave_0 entered promiscuous mode [ 100.709984][ T4654] device hsr_slave_1 entered promiscuous mode [ 101.369706][ T4654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.381203][ T4654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.413528][ T4654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.424030][ T4654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.549172][ T4654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.565634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.577154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.588503][ T4654] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.600343][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.611165][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.621726][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.629243][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.671340][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.683324][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.694030][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.704745][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.712236][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.723207][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.733057][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.777642][ T4654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.791372][ T4654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.805236][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.818544][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.828195][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.839079][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.848152][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.859969][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.871184][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.880914][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.890852][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.900823][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.047489][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.058352][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.074219][ T4654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.111387][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.121344][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.141914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.154318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.166088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.175437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.187377][ T4654] device veth0_vlan entered promiscuous mode [ 102.217491][ T4654] device veth1_vlan entered promiscuous mode [ 102.246054][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.258329][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.270602][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.280894][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.294443][ T4654] device veth0_macvtap entered promiscuous mode [ 102.322083][ T4654] device veth1_macvtap entered promiscuous mode [ 102.344772][ T4654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.354105][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.365143][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.375974][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.387378][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.403463][ T4654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.420810][ T4654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.433141][ T4654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.446078][ T4654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.455784][ T4654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.468581][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.486603][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/14 18:26:09 executed programs: 0 [ 104.529434][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.637253][ T4840] chnl_net:caif_netlink_parms(): no params data found [ 104.694293][ T4840] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.707548][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.716445][ T4840] device bridge_slave_0 entered promiscuous mode [ 104.725473][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.733236][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.742954][ T4840] device bridge_slave_1 entered promiscuous mode [ 104.765391][ T4840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.777925][ T4840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.805666][ T4840] team0: Port device team_slave_0 added [ 104.814570][ T4840] team0: Port device team_slave_1 added [ 104.834995][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.843358][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.872557][ T4840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.885513][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.895687][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.924096][ T4840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.959755][ T4840] device hsr_slave_0 entered promiscuous mode [ 104.967042][ T4840] device hsr_slave_1 entered promiscuous mode [ 104.974252][ T4840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.983288][ T4840] Cannot create hsr debugfs directory [ 106.550161][ T4684] Bluetooth: hci0: command 0x0409 tx timeout [ 106.758368][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.857639][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.926493][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.739096][ T4840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.750671][ T4840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.762882][ T4840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.775340][ T4840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.819068][ T4840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.842711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.851031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.862242][ T4840] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.885711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.897926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.907802][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.916174][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.926506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.952486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.962577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.971157][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.978842][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.005093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.020568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.032723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.043242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.052089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.062395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.072318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.084499][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.094352][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.115496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.126054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.137361][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.156695][ T9] device hsr_slave_0 left promiscuous mode [ 108.166079][ T9] device hsr_slave_1 left promiscuous mode [ 108.173093][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.183629][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.191944][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.199829][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.207749][ T9] device bridge_slave_1 left promiscuous mode [ 108.214580][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.223709][ T9] device bridge_slave_0 left promiscuous mode [ 108.230488][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.242023][ T9] device veth1_macvtap left promiscuous mode [ 108.248283][ T9] device veth0_macvtap left promiscuous mode [ 108.255624][ T9] device veth1_vlan left promiscuous mode [ 108.262902][ T9] device veth0_vlan left promiscuous mode [ 108.390286][ T9] team0 (unregistering): Port device team_slave_1 removed [ 108.407889][ T9] team0 (unregistering): Port device team_slave_0 removed [ 108.419359][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.433217][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.483412][ T9] bond0 (unregistering): Released all slaves [ 108.557809][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.565773][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.585288][ T4840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.611644][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.620957][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.630350][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 108.646267][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.657443][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.667361][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.676257][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.689239][ T4840] device veth0_vlan entered promiscuous mode [ 108.701921][ T4840] device veth1_vlan entered promiscuous mode [ 108.723687][ T4840] device veth0_macvtap entered promiscuous mode [ 108.734060][ T4840] device veth1_macvtap entered promiscuous mode [ 108.746826][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.755938][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.764981][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.774952][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.784326][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.793982][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.811417][ T4840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.820582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.829820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.843061][ T4840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.851289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.861281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.874466][ T4840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.885689][ T4840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.895977][ T4840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.906644][ T4840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.958756][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.973092][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.992265][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.005441][ T4221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.016280][ T4221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.032630][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.379680][ T4684] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.639597][ T4684] usb 1-1: Using ep0 maxpacket: 16 [ 109.800274][ T4684] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 109.808666][ T4684] usb 1-1: config 0 has no interface number 0 [ 109.815075][ T4684] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.949813][ T4684] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 109.959405][ T4684] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 109.968687][ T4684] usb 1-1: Product: syz [ 109.973027][ T4684] usb 1-1: SerialNumber: syz [ 109.983084][ T4684] usb 1-1: config 0 descriptor?? [ 110.043026][ T4684] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 110.052824][ T4684] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 110.485269][ T4261] usb 1-1: USB disconnect, device number 2 [ 110.500787][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 110.510330][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 110.525993][ T4261] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 110.709802][ T4257] Bluetooth: hci0: command 0x040f tx timeout 2026/07/14 18:26:16 executed programs: 3 [ 111.299776][ T4684] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.580439][ T4684] usb 1-1: Using ep0 maxpacket: 16 [ 111.729794][ T4684] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 111.738157][ T4684] usb 1-1: config 0 has no interface number 0 [ 111.745257][ T4684] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.869767][ T4684] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 111.879039][ T4684] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 111.887684][ T4684] usb 1-1: Product: syz [ 111.892050][ T4684] usb 1-1: SerialNumber: syz [ 111.899161][ T4684] usb 1-1: config 0 descriptor?? [ 111.941366][ T4684] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 111.950818][ T4684] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 112.372991][ T4684] usb 1-1: USB disconnect, device number 3 [ 112.379842][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 112.387184][ C0] ------------[ cut here ]------------ [ 112.392725][ C0] URB ffff888024c42100 submitted while active [ 112.399059][ C0] WARNING: CPU: 0 PID: 4684 at drivers/usb/core/urb.c:378 usb_submit_urb+0xfba/0x18d0 [ 112.409466][ C0] Modules linked in: [ 112.413736][ C0] CPU: 0 PID: 4684 Comm: kworker/0:19 Not tainted syzkaller #0 [ 112.421991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.432704][ C0] Workqueue: usb_hub_wq hub_event [ 112.437845][ C0] RIP: 0010:usb_submit_urb+0xfba/0x18d0 [ 112.444016][ C0] Code: c5 8a 44 89 ea e8 f6 46 d6 03 e9 f3 fb ff ff e8 7c 2d 97 fb c6 05 42 6e 95 07 01 48 c7 c7 60 1d c5 8a 48 89 de e8 96 64 d2 03 <0f> 0b e9 bc f0 ff ff e8 5a 2d 97 fb eb 1f e8 53 2d 97 fb 44 8b 64 [ 112.465725][ C0] RSP: 0018:ffffc90000007798 EFLAGS: 00010046 [ 112.472431][ C0] RAX: 62c8f2178dd78500 RBX: ffff888024c42100 RCX: ffff88802449bb80 [ 112.480649][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 112.489379][ C0] RBP: 000000000000000f R08: ffff8880b902795b R09: 1ffff11017204f2b [ 112.497552][ C0] R10: dffffc0000000000 R11: ffffed1017204f2c R12: 0000000000000a20 [ 112.509229][ C0] R13: ffff888024836830 R14: ffff888024c42108 R15: dffffc0000000000 [ 112.517659][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 112.527955][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.535443][ C0] CR2: 0000200000002024 CR3: 0000000073b0e000 CR4: 00000000003506f0 [ 112.544204][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.552754][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.561379][ C0] Call Trace: [ 112.564686][ C0] [ 112.567549][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 112.573473][ C0] ? _raw_spin_unlock+0x40/0x40 [ 112.578332][ C0] cm109_urb_irq_callback+0x73d/0xcc0 [ 112.583709][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 112.589378][ C0] dummy_timer+0xa41/0x33c0 [ 112.594344][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 112.599984][ C0] ? dummy_free_streams+0x520/0x520 [ 112.606361][ C0] ? dummy_free_streams+0x520/0x520 [ 112.611986][ C0] call_timer_fn+0x17b/0x540 [ 112.617664][ C0] ? dummy_free_streams+0x520/0x520 [ 112.623807][ C0] ? __run_timers+0x810/0x810 [ 112.629174][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 112.635793][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 112.641423][ C0] ? dummy_free_streams+0x520/0x520 [ 112.646830][ C0] __run_timers+0x56c/0x810 [ 112.651606][ C0] ? detach_timer+0x2b0/0x2b0 [ 112.657041][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.663285][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 112.668594][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 112.675814][ C0] run_timer_softirq+0x63/0xf0 [ 112.681155][ C0] handle_softirqs+0x336/0x830 [ 112.686112][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 112.691101][ C0] ? do_softirq+0x210/0x210 [ 112.696674][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 112.702250][ C0] __irq_exit_rcu+0x13b/0x230 [ 112.707386][ C0] ? irq_exit_rcu+0x20/0x20 [ 112.712153][ C0] irq_exit_rcu+0x5/0x20 [ 112.716783][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 112.723474][ C0] [ 112.726516][ C0] [ 112.729661][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 112.736759][ C0] RIP: 0010:usb_disable_device+0x7f/0x8a0 [ 112.742682][ C0] Code: 00 74 08 4c 89 f7 e8 10 dd db fb 4d 8b 26 49 8d 5c 24 04 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 5f 07 00 00 0f b6 1b <31> ff 89 de e8 c8 c0 96 fb 85 db 4c 89 74 24 08 0f 84 fb 00 00 00 [ 112.764740][ C0] RSP: 0018:ffffc9000315f890 EFLAGS: 00000246 [ 112.771257][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88802449bb80 [ 112.780527][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880270fe000 [ 112.788732][ C0] RBP: 0000000000000000 R08: ffffc9000315f6e7 R09: 1ffff9200062bedc [ 112.797789][ C0] R10: dffffc0000000000 R11: fffff5200062bedd R12: ffff88807960c000 [ 112.807738][ C0] R13: dffffc0000000000 R14: ffff8880270fe608 R15: ffff8880270fe000 [ 112.816097][ C0] usb_disconnect+0x33c/0x8a0 [ 112.821056][ C0] hub_event+0x1d64/0x5260 [ 112.825831][ C0] ? hub_post_resume+0x120/0x120 [ 112.831374][ C0] ? read_lock_is_recursive+0x10/0x10 [ 112.838246][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 112.844446][ C0] ? _raw_spin_unlock+0x40/0x40 [ 112.849600][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 112.855346][ C0] process_one_work+0x867/0xff0 [ 112.861001][ C0] ? worker_detach_from_pool+0x240/0x240 [ 112.866812][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 112.873122][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 112.878514][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 112.884405][ C0] ? wq_worker_running+0x97/0x170 [ 112.889597][ C0] worker_thread+0xad7/0x12a0 [ 112.894755][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 112.901078][ C0] kthread+0x42e/0x520 [ 112.905499][ C0] ? rcu_lock_release+0x20/0x20 [ 112.910537][ C0] ? kthread_blkcg+0xd0/0xd0 [ 112.915692][ C0] ret_from_fork+0x1f/0x30 [ 112.920600][ C0] [ 112.923727][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.931257][ C0] CPU: 0 PID: 4684 Comm: kworker/0:19 Not tainted syzkaller #0 [ 112.939160][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.950494][ C0] Workqueue: usb_hub_wq hub_event [ 112.955764][ C0] Call Trace: [ 112.959155][ C0] [ 112.962114][ C0] dump_stack_lvl+0x188/0x250 [ 112.967196][ C0] ? show_regs_print_info+0x20/0x20 [ 112.973378][ C0] ? load_image+0x410/0x410 [ 112.978302][ C0] panic+0x2f8/0x850 [ 112.982310][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 112.987145][ C0] ? ret_from_fork+0x1f/0x30 [ 112.992212][ C0] ? usb_submit_urb+0xfba/0x18d0 [ 112.997666][ C0] __warn+0x248/0x2b0 [ 113.002516][ C0] ? usb_submit_urb+0xfba/0x18d0 [ 113.007747][ C0] report_bug+0x1b9/0x2e0 [ 113.012549][ C0] handle_bug+0x3a/0x70 [ 113.016847][ C0] exc_invalid_op+0x16/0x40 [ 113.021803][ C0] asm_exc_invalid_op+0x16/0x20 [ 113.027099][ C0] RIP: 0010:usb_submit_urb+0xfba/0x18d0 [ 113.032744][ C0] Code: c5 8a 44 89 ea e8 f6 46 d6 03 e9 f3 fb ff ff e8 7c 2d 97 fb c6 05 42 6e 95 07 01 48 c7 c7 60 1d c5 8a 48 89 de e8 96 64 d2 03 <0f> 0b e9 bc f0 ff ff e8 5a 2d 97 fb eb 1f e8 53 2d 97 fb 44 8b 64 [ 113.053364][ C0] RSP: 0018:ffffc90000007798 EFLAGS: 00010046 [ 113.059523][ C0] RAX: 62c8f2178dd78500 RBX: ffff888024c42100 RCX: ffff88802449bb80 [ 113.067722][ C0] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 113.076221][ C0] RBP: 000000000000000f R08: ffff8880b902795b R09: 1ffff11017204f2b [ 113.084570][ C0] R10: dffffc0000000000 R11: ffffed1017204f2c R12: 0000000000000a20 [ 113.093217][ C0] R13: ffff888024836830 R14: ffff888024c42108 R15: dffffc0000000000 [ 113.103003][ C0] ? usb_submit_urb+0xfba/0x18d0 [ 113.108253][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 113.114956][ C0] ? _raw_spin_unlock+0x40/0x40 [ 113.120601][ C0] cm109_urb_irq_callback+0x73d/0xcc0 [ 113.126588][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 113.132490][ C0] dummy_timer+0xa41/0x33c0 [ 113.137316][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 113.142816][ C0] ? dummy_free_streams+0x520/0x520 [ 113.149031][ C0] ? dummy_free_streams+0x520/0x520 [ 113.154633][ C0] call_timer_fn+0x17b/0x540 [ 113.160080][ C0] ? dummy_free_streams+0x520/0x520 [ 113.165422][ C0] ? __run_timers+0x810/0x810 [ 113.170359][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 113.176175][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 113.181958][ C0] ? dummy_free_streams+0x520/0x520 [ 113.187790][ C0] __run_timers+0x56c/0x810 [ 113.192433][ C0] ? detach_timer+0x2b0/0x2b0 [ 113.197120][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 113.203281][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 113.208307][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 113.214999][ C0] run_timer_softirq+0x63/0xf0 [ 113.219785][ C0] handle_softirqs+0x336/0x830 [ 113.224888][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 113.230684][ C0] ? do_softirq+0x210/0x210 [ 113.236767][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 113.243329][ C0] __irq_exit_rcu+0x13b/0x230 [ 113.248112][ C0] ? irq_exit_rcu+0x20/0x20 [ 113.252803][ C0] irq_exit_rcu+0x5/0x20 [ 113.258136][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 113.264573][ C0] [ 113.267692][ C0] [ 113.270849][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.277548][ C0] RIP: 0010:usb_disable_device+0x7f/0x8a0 [ 113.283802][ C0] Code: 00 74 08 4c 89 f7 e8 10 dd db fb 4d 8b 26 49 8d 5c 24 04 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 5f 07 00 00 0f b6 1b <31> ff 89 de e8 c8 c0 96 fb 85 db 4c 89 74 24 08 0f 84 fb 00 00 00 [ 113.305083][ C0] RSP: 0018:ffffc9000315f890 EFLAGS: 00000246 [ 113.311659][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88802449bb80 [ 113.321392][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880270fe000 [ 113.329682][ C0] RBP: 0000000000000000 R08: ffffc9000315f6e7 R09: 1ffff9200062bedc [ 113.338847][ C0] R10: dffffc0000000000 R11: fffff5200062bedd R12: ffff88807960c000 [ 113.347627][ C0] R13: dffffc0000000000 R14: ffff8880270fe608 R15: ffff8880270fe000 [ 113.356750][ C0] usb_disconnect+0x33c/0x8a0 [ 113.361857][ C0] hub_event+0x1d64/0x5260 [ 113.366460][ C0] ? hub_post_resume+0x120/0x120 [ 113.371738][ C0] ? read_lock_is_recursive+0x10/0x10 [ 113.377529][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 113.384034][ C0] ? _raw_spin_unlock+0x40/0x40 [ 113.388904][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 113.394364][ C0] process_one_work+0x867/0xff0 [ 113.399523][ C0] ? worker_detach_from_pool+0x240/0x240 [ 113.405586][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 113.411386][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 113.416933][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 113.422810][ C0] ? wq_worker_running+0x97/0x170 [ 113.428140][ C0] worker_thread+0xad7/0x12a0 [ 113.433715][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 113.440178][ C0] kthread+0x42e/0x520 [ 113.444620][ C0] ? rcu_lock_release+0x20/0x20 [ 113.450235][ C0] ? kthread_blkcg+0xd0/0xd0 [ 113.455005][ C0] ret_from_fork+0x1f/0x30 [ 113.459760][ C0] [ 114.566935][ C0] Shutting down cpus with NMI [ 114.573213][ C0] Kernel Offset: disabled [ 114.578165][ C0] Rebooting in 86400 seconds..