no interfaces have a carrier
[ 45.742234][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0
[ 45.754008][ T5487] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts.
2026/04/15 11:10:30 parsed 1 programs
syzkaller login: [ 75.101651][ T5821] cgroup: Unknown subsys name 'net'
[ 75.241142][ T5821] cgroup: Unknown subsys name 'cpuset'
[ 75.249656][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 76.592028][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 79.100206][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.108351][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.134805][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.142832][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.180520][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 80.637342][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.645797][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.655745][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.666149][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.675640][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.553557][ T5895] chnl_net:caif_netlink_parms(): no params data found
[ 81.645279][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.657698][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.665752][ T5895] bridge_slave_0: entered allmulticast mode
[ 81.673827][ T5895] bridge_slave_0: entered promiscuous mode
[ 81.687353][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.694595][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.702172][ T5895] bridge_slave_1: entered allmulticast mode
[ 81.710278][ T5895] bridge_slave_1: entered promiscuous mode
[ 81.754551][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.766816][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.859417][ T5895] team0: Port device team_slave_0 added
[ 81.873642][ T5895] team0: Port device team_slave_1 added
[ 81.919330][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.926274][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 81.955814][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.969343][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.976309][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 82.002228][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.043902][ T5895] hsr_slave_0: entered promiscuous mode
[ 82.050372][ T5895] hsr_slave_1: entered promiscuous mode
[ 82.173466][ T5895] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.184919][ T5895] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.194914][ T5895] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.204287][ T5895] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 82.269591][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0
[ 82.286994][ T5895] 8021q: adding VLAN 0 to HW filter on device team0
[ 82.301339][ T143] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.308730][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.321604][ T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.328693][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.470707][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.508566][ T5895] veth0_vlan: entered promiscuous mode
[ 82.519390][ T5895] veth1_vlan: entered promiscuous mode
[ 82.546330][ T5895] veth0_macvtap: entered promiscuous mode
[ 82.555355][ T5895] veth1_macvtap: entered promiscuous mode
[ 82.573736][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 82.588254][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 82.602253][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.612710][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.622050][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.631157][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.767057][ T130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.822437][ T130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.873705][ T130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.970069][ T130] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/04/15 11:10:40 executed programs: 0
[ 83.432200][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 83.442991][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.451184][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.459965][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.469371][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.590597][ T5932] chnl_net:caif_netlink_parms(): no params data found
[ 83.655263][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.662545][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.670663][ T5932] bridge_slave_0: entered allmulticast mode
[ 83.677952][ T5932] bridge_slave_0: entered promiscuous mode
[ 83.686250][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.693665][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.700963][ T5932] bridge_slave_1: entered allmulticast mode
[ 83.710464][ T5932] bridge_slave_1: entered promiscuous mode
[ 83.736954][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.748860][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.778585][ T5932] team0: Port device team_slave_0 added
[ 83.785843][ T5932] team0: Port device team_slave_1 added
[ 83.811319][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.818334][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.844520][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.856470][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.864514][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.890751][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.929288][ T5932] hsr_slave_0: entered promiscuous mode
[ 83.935565][ T5932] hsr_slave_1: entered promiscuous mode
[ 83.941927][ T5932] debugfs: 'hsr0' already exists in 'hsr'
[ 83.948211][ T5932] Cannot create hsr debugfs directory
[ 85.547723][ T50] Bluetooth: hci0: command tx timeout
[ 85.971212][ T130] bridge_slave_1: left allmulticast mode
[ 85.976937][ T130] bridge_slave_1: left promiscuous mode
[ 85.983599][ T130] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.994161][ T130] bridge_slave_0: left allmulticast mode
[ 86.001211][ T130] bridge_slave_0: left promiscuous mode
[ 86.007579][ T130] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.118097][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 86.128931][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 86.138509][ T130] bond0 (unregistering): Released all slaves
[ 86.211454][ T130] hsr_slave_0: left promiscuous mode
[ 86.218305][ T130] hsr_slave_1: left promiscuous mode
[ 86.224379][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 86.233451][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 86.243515][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 86.251538][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 86.267010][ T130] veth1_macvtap: left promiscuous mode
[ 86.273241][ T130] veth0_macvtap: left promiscuous mode
[ 86.279206][ T130] veth1_vlan: left promiscuous mode
[ 86.284802][ T130] veth0_vlan: left promiscuous mode
[ 86.575409][ T130] team0 (unregistering): Port device team_slave_1 removed
[ 86.607263][ T130] team0 (unregistering): Port device team_slave_0 removed
[ 86.752908][ T24] cfg80211: failed to load regulatory.db
[ 87.022503][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.044467][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 87.059540][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.073337][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.180686][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.308941][ T5932] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.321174][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.328347][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.371677][ T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.378854][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.629643][ T50] Bluetooth: hci0: command tx timeout
[ 87.682511][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.730437][ T5932] veth0_vlan: entered promiscuous mode
[ 87.746165][ T5932] veth1_vlan: entered promiscuous mode
[ 87.784864][ T5932] veth0_macvtap: entered promiscuous mode
[ 87.796964][ T5932] veth1_macvtap: entered promiscuous mode
[ 87.821259][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.839467][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.852620][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.861532][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.873603][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.883355][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.937297][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.945440][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.972341][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.980515][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.288006][ T5991] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 88.462031][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 88.471967][ T5991] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 88.481915][ T5991] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 202
[ 88.493340][ T5991] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 88.502526][ T5991] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 88.510850][ T5991] usb 1-1: Manufacturer: syz
[ 88.519681][ T5991] usb 1-1: config 0 descriptor??
[ 88.526503][ T5992] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 88.537531][ T5991] smsusb:smsusb_probe: board id=9, interface number 0
[ 88.548545][ T5991] smsusb:siano_media_device_register: media controller created
[ 88.557733][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.565022][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.572259][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.579506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.586736][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.593972][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.601203][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.608520][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.618291][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.626188][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.633413][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.641293][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.648506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.655691][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.662887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.670079][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.677281][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.684491][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.691679][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.698869][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.706051][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.713651][ T5991] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[ 88.722760][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.722845][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.722923][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.723004][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.723082][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.723159][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.723234][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.723311][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.723387][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.723469][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.796995][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.804230][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.811435][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.818637][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.825853][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.833062][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.840276][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.847495][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.854710][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.861922][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.870169][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.877431][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.884651][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.891868][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.899080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.906291][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.913500][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.920711][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.928518][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.935751][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.942960][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.950161][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.957365][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.964563][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.971761][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.978957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.986152][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 88.993351][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.007412][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.014653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.021869][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.029076][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.036279][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.043482][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.050684][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.057890][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.065090][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.072293][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.081726][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.088969][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.096184][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.103396][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.110606][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.117897][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.125100][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.132303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.140172][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.147408][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.155179][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.162405][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.169606][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.176802][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.183996][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.191190][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.198385][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.205581][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.212772][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.219969][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.228843][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.236073][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.243271][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.250469][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.257674][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.264882][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.272088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.279293][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.286503][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.293707][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.301777][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.309003][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.316208][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.323411][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.330619][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.337822][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.345022][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.352224][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.359767][ T5991] smsmdtv:smscore_set_device_mode: mode detect failed -22
[ 89.368317][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.368407][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.368482][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.368558][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.368633][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.368706][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.368783][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.368860][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.368936][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.369008][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.442638][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.449871][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.457081][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.464303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.471503][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.478704][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.485903][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.493100][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.500303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.507505][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 89.515380][ T5991] smsmdtv:smscore_start_device: set device mode failed , rc -22
[ 89.523687][ T5991] smsusb:smsusb_init_device: smscore_start_device(...) failed
[ 89.533660][ T5991] ------------[ cut here ]------------
[ 89.539199][ T5991] !PageLargeKmalloc(page)
[ 89.539219][ T5991] WARNING: mm/slub.c:6393 at free_large_kmalloc+0xa3/0x140, CPU#0: kworker/0:4/5991
[ 89.553052][ T5991] Modules linked in:
[ 89.557078][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 89.566531][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 89.576661][ T5991] Workqueue: usb_hub_wq hub_event
[ 89.581763][ T5991] RIP: 0010:free_large_kmalloc+0xa3/0x140
[ 89.587545][ T5991] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 6e c6 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 e7 87 f1 8d 5b 41 5e 5d e9 67 2d 04 ff
[ 89.607209][ T5991] RSP: 0018:ffffc90003726b20 EFLAGS: 00010206
[ 89.613803][ T5991] RAX: 00000000ff000000 RBX: ffffea0001721880 RCX: 0000000000000001
[ 89.622181][ T5991] RDX: 0000000000000000 RSI: ffff88805c862000 RDI: ffffea0001721880
[ 89.630316][ T5991] RBP: 0000000000000000 R08: ffff888078d3ea03 R09: 1ffff1100f1a7d40
[ 89.638345][ T5991] R10: dffffc0000000000 R11: ffffed100f1a7d41 R12: 1ffff110065b8082
[ 89.646323][ T5991] R13: ffff8880264b1180 R14: ffff888078d3ea60 R15: dffffc0000000000
[ 89.654337][ T5991] FS: 0000000000000000(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000
[ 89.663325][ T5991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 89.669945][ T5991] CR2: 00007fffc68dcec4 CR3: 0000000037646000 CR4: 00000000003526f0
[ 89.677960][ T5991] Call Trace:
[ 89.681238][ T5991]
[ 89.684606][ T5991] usb_free_urb+0xd0/0x120
[ 89.689109][ T5991] smsusb_term_device+0x1d7/0x3e0
[ 89.694152][ T5991] smsusb_probe+0x1aba/0x2280
[ 89.698903][ T5991] ? __pfx_smsusb_probe+0x10/0x10
[ 89.703940][ T5991] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 89.710960][ T5991] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 89.717347][ T5991] ? __pm_runtime_set_status+0x9d4/0xcd0
[ 89.723011][ T5991] usb_probe_interface+0x659/0xc70
[ 89.728563][ T5991] ? __pfx_usb_probe_interface+0x10/0x10
[ 89.734213][ T5991] really_probe+0x267/0xaf0
[ 89.737235][ T50] Bluetooth: hci0: command tx timeout
[ 89.738773][ T5991] __driver_probe_device+0x18c/0x320
[ 89.739022][ T5991] driver_probe_device+0x4f/0x240
[ 89.739048][ T5991] __device_attach_driver+0x279/0x430
[ 89.739073][ T5991] bus_for_each_drv+0x258/0x2f0
[ 89.739099][ T5991] ? __pfx___device_attach_driver+0x10/0x10
[ 89.739128][ T5991] ? __pfx_bus_for_each_drv+0x10/0x10
[ 89.776359][ T5991] ? lockdep_hardirqs_on+0x7a/0x110
[ 89.781609][ T5991] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 89.787529][ T5991] __device_attach+0x2c5/0x450
[ 89.792327][ T5991] ? __pfx___device_attach+0x10/0x10
[ 89.797688][ T5991] ? _raw_spin_unlock+0x28/0x50
[ 89.802558][ T5991] device_initial_probe+0xa1/0xd0
[ 89.807655][ T5991] bus_probe_device+0x12a/0x220
[ 89.812518][ T5991] ? device_add+0x726/0xb70
[ 89.817035][ T5991] device_add+0x7b6/0xb70
[ 89.821946][ T5991] usb_set_configuration+0x1a87/0x2110
[ 89.827865][ T5991] usb_generic_driver_probe+0x8d/0x150
[ 89.833357][ T5991] usb_probe_device+0x1c4/0x3b0
[ 89.838280][ T5991] ? __pfx_usb_probe_device+0x10/0x10
[ 89.843656][ T5991] really_probe+0x267/0xaf0
[ 89.848245][ T5991] __driver_probe_device+0x18c/0x320
[ 89.853543][ T5991] driver_probe_device+0x4f/0x240
[ 89.858623][ T5991] __device_attach_driver+0x279/0x430
[ 89.864010][ T5991] bus_for_each_drv+0x258/0x2f0
[ 89.869008][ T5991] ? __pfx___device_attach_driver+0x10/0x10
[ 89.874916][ T5991] ? __pfx_bus_for_each_drv+0x10/0x10
[ 89.880344][ T5991] ? lockdep_hardirqs_on+0x7a/0x110
[ 89.885550][ T5991] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 89.891921][ T5991] __device_attach+0x2c5/0x450
[ 89.896708][ T5991] ? __pfx___device_attach+0x10/0x10
[ 89.902025][ T5991] ? _raw_spin_unlock+0x28/0x50
[ 89.906898][ T5991] device_initial_probe+0xa1/0xd0
[ 89.911993][ T5991] bus_probe_device+0x12a/0x220
[ 89.916848][ T5991] ? device_add+0x726/0xb70
[ 89.921911][ T5991] device_add+0x7b6/0xb70
[ 89.926355][ T5991] usb_new_device+0xa08/0x16f0
[ 89.931546][ T5991] ? __pfx_usb_new_device+0x10/0x10
[ 89.936773][ T5991] ? _raw_spin_unlock_irq+0x23/0x50
[ 89.942020][ T5991] hub_event+0x2a1c/0x4f30
[ 89.946448][ T5991] ? do_raw_spin_unlock+0xf5/0x210
[ 89.951934][ T5991] ? __pfx_hub_event+0x10/0x10
[ 89.956721][ T5991] ? process_scheduled_works+0xa70/0x1860
[ 89.962657][ T5991] ? process_scheduled_works+0xa70/0x1860
[ 89.968444][ T5991] ? process_scheduled_works+0xa70/0x1860
[ 89.974186][ T5991] process_scheduled_works+0xb5d/0x1860
[ 89.979823][ T5991] ? __pfx_process_scheduled_works+0x10/0x10
[ 89.985832][ T5991] ? assign_work+0x3d5/0x5e0
[ 89.990512][ T5991] worker_thread+0xa53/0xfc0
[ 89.995146][ T5991] kthread+0x388/0x470
[ 89.999281][ T5991] ? __pfx_worker_thread+0x10/0x10
[ 90.004399][ T5991] ? __pfx_kthread+0x10/0x10
[ 90.009058][ T5991] ret_from_fork+0x514/0xb70
[ 90.013668][ T5991] ? __pfx_ret_from_fork+0x10/0x10
[ 90.018830][ T5991] ? __switch_to+0xc79/0x1410
[ 90.024053][ T5991] ? __pfx_kthread+0x10/0x10
[ 90.029156][ T5991] ret_from_fork_asm+0x1a/0x30
[ 90.033969][ T5991]
[ 90.037006][ T5991] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 90.044284][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 90.053653][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 90.063713][ T5991] Workqueue: usb_hub_wq hub_event
[ 90.068755][ T5991] Call Trace:
[ 90.072036][ T5991]
[ 90.074966][ T5991] vpanic+0x56c/0xa60
[ 90.078965][ T5991] ? __pfx__printk+0x10/0x10
[ 90.083565][ T5991] ? __pfx_vpanic+0x10/0x10
[ 90.088079][ T5991] ? is_bpf_text_address+0x292/0x2b0
[ 90.093387][ T5991] ? is_bpf_text_address+0x26/0x2b0
[ 90.098620][ T5991] panic+0xc5/0xd0
[ 90.102363][ T5991] ? __pfx_panic+0x10/0x10
[ 90.106804][ T5991] ? ret_from_fork_asm+0x1a/0x30
[ 90.111766][ T5991] __warn+0x315/0x4c0
[ 90.115773][ T5991] ? free_large_kmalloc+0xa3/0x140
[ 90.120901][ T5991] ? free_large_kmalloc+0xa3/0x140
[ 90.126031][ T5991] __report_bug+0x29a/0x540
[ 90.130543][ T5991] ? device_initial_probe+0xa1/0xd0
[ 90.135843][ T5991] ? bus_probe_device+0x12a/0x220
[ 90.140886][ T5991] ? device_add+0x7b6/0xb70
[ 90.145409][ T5991] ? free_large_kmalloc+0xa3/0x140
[ 90.150536][ T5991] ? __pfx___report_bug+0x10/0x10
[ 90.155562][ T5991] ? usb_new_device+0xa08/0x16f0
[ 90.160514][ T5991] ? hub_event+0x2a1c/0x4f30
[ 90.165111][ T5991] ? process_scheduled_works+0xb5d/0x1860
[ 90.170843][ T5991] ? smscore_unregister_device+0x651/0x780
[ 90.176649][ T5991] ? free_large_kmalloc+0xa3/0x140
[ 90.181754][ T5991] report_bug+0x16a/0x220
[ 90.186075][ T5991] ? free_large_kmalloc+0xa3/0x140
[ 90.191176][ T5991] ? free_large_kmalloc+0xa5/0x140
[ 90.196279][ T5991] handle_bug+0x9c/0x200
[ 90.200519][ T5991] exc_invalid_op+0x1a/0x50
[ 90.205013][ T5991] asm_exc_invalid_op+0x1a/0x20
[ 90.209858][ T5991] RIP: 0010:free_large_kmalloc+0xa3/0x140
[ 90.215583][ T5991] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 6e c6 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 e7 87 f1 8d 5b 41 5e 5d e9 67 2d 04 ff
[ 90.235182][ T5991] RSP: 0018:ffffc90003726b20 EFLAGS: 00010206
[ 90.241246][ T5991] RAX: 00000000ff000000 RBX: ffffea0001721880 RCX: 0000000000000001
[ 90.249207][ T5991] RDX: 0000000000000000 RSI: ffff88805c862000 RDI: ffffea0001721880
[ 90.257169][ T5991] RBP: 0000000000000000 R08: ffff888078d3ea03 R09: 1ffff1100f1a7d40
[ 90.265128][ T5991] R10: dffffc0000000000 R11: ffffed100f1a7d41 R12: 1ffff110065b8082
[ 90.273090][ T5991] R13: ffff8880264b1180 R14: ffff888078d3ea60 R15: dffffc0000000000
[ 90.281072][ T5991] usb_free_urb+0xd0/0x120
[ 90.285487][ T5991] smsusb_term_device+0x1d7/0x3e0
[ 90.290510][ T5991] smsusb_probe+0x1aba/0x2280
[ 90.295185][ T5991] ? __pfx_smsusb_probe+0x10/0x10
[ 90.300209][ T5991] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 90.305752][ T5991] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 90.311555][ T5991] ? __pm_runtime_set_status+0x9d4/0xcd0
[ 90.317184][ T5991] usb_probe_interface+0x659/0xc70
[ 90.322297][ T5991] ? __pfx_usb_probe_interface+0x10/0x10
[ 90.327917][ T5991] really_probe+0x267/0xaf0
[ 90.332415][ T5991] __driver_probe_device+0x18c/0x320
[ 90.337691][ T5991] driver_probe_device+0x4f/0x240
[ 90.342708][ T5991] __device_attach_driver+0x279/0x430
[ 90.348069][ T5991] bus_for_each_drv+0x258/0x2f0
[ 90.352912][ T5991] ? __pfx___device_attach_driver+0x10/0x10
[ 90.358792][ T5991] ? __pfx_bus_for_each_drv+0x10/0x10
[ 90.364161][ T5991] ? lockdep_hardirqs_on+0x7a/0x110
[ 90.369346][ T5991] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 90.375151][ T5991] __device_attach+0x2c5/0x450
[ 90.379901][ T5991] ? __pfx___device_attach+0x10/0x10
[ 90.385176][ T5991] ? _raw_spin_unlock+0x28/0x50
[ 90.390021][ T5991] device_initial_probe+0xa1/0xd0
[ 90.395038][ T5991] bus_probe_device+0x12a/0x220
[ 90.399885][ T5991] ? device_add+0x726/0xb70
[ 90.404392][ T5991] device_add+0x7b6/0xb70
[ 90.408720][ T5991] usb_set_configuration+0x1a87/0x2110
[ 90.414184][ T5991] usb_generic_driver_probe+0x8d/0x150
[ 90.419631][ T5991] usb_probe_device+0x1c4/0x3b0
[ 90.424473][ T5991] ? __pfx_usb_probe_device+0x10/0x10
[ 90.429829][ T5991] really_probe+0x267/0xaf0
[ 90.434326][ T5991] __driver_probe_device+0x18c/0x320
[ 90.439601][ T5991] driver_probe_device+0x4f/0x240
[ 90.444615][ T5991] __device_attach_driver+0x279/0x430
[ 90.449976][ T5991] bus_for_each_drv+0x258/0x2f0
[ 90.454889][ T5991] ? __pfx___device_attach_driver+0x10/0x10
[ 90.460768][ T5991] ? __pfx_bus_for_each_drv+0x10/0x10
[ 90.466132][ T5991] ? lockdep_hardirqs_on+0x7a/0x110
[ 90.471334][ T5991] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 90.477139][ T5991] __device_attach+0x2c5/0x450
[ 90.481893][ T5991] ? __pfx___device_attach+0x10/0x10
[ 90.487166][ T5991] ? _raw_spin_unlock+0x28/0x50
[ 90.492012][ T5991] device_initial_probe+0xa1/0xd0
[ 90.497040][ T5991] bus_probe_device+0x12a/0x220
[ 90.501878][ T5991] ? device_add+0x726/0xb70
[ 90.506378][ T5991] device_add+0x7b6/0xb70
[ 90.510701][ T5991] usb_new_device+0xa08/0x16f0
[ 90.515466][ T5991] ? __pfx_usb_new_device+0x10/0x10
[ 90.520661][ T5991] ? _raw_spin_unlock_irq+0x23/0x50
[ 90.525845][ T5991] hub_event+0x2a1c/0x4f30
[ 90.530246][ T5991] ? do_raw_spin_unlock+0xf5/0x210
[ 90.535379][ T5991] ? __pfx_hub_event+0x10/0x10
[ 90.540132][ T5991] ? process_scheduled_works+0xa70/0x1860
[ 90.545901][ T5991] ? process_scheduled_works+0xa70/0x1860
[ 90.551610][ T5991] ? process_scheduled_works+0xa70/0x1860
[ 90.557317][ T5991] process_scheduled_works+0xb5d/0x1860
[ 90.562880][ T5991] ? __pfx_process_scheduled_works+0x10/0x10
[ 90.568850][ T5991] ? assign_work+0x3d5/0x5e0
[ 90.573431][ T5991] worker_thread+0xa53/0xfc0
[ 90.578036][ T5991] kthread+0x388/0x470
[ 90.582090][ T5991] ? __pfx_worker_thread+0x10/0x10
[ 90.587190][ T5991] ? __pfx_kthread+0x10/0x10
[ 90.591770][ T5991] ret_from_fork+0x514/0xb70
[ 90.596351][ T5991] ? __pfx_ret_from_fork+0x10/0x10
[ 90.601452][ T5991] ? __switch_to+0xc79/0x1410
[ 90.606117][ T5991] ? __pfx_kthread+0x10/0x10
[ 90.610691][ T5991] ret_from_fork_asm+0x1a/0x30
[ 90.615459][ T5991]
[ 90.618791][ T5991] Kernel Offset: disabled
[ 90.623129][ T5991] Rebooting in 86400 seconds..