Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. 1970/01/01 00:00:35 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:36 parsed 1 programs [ 39.196588][ T6531] cgroup: Unknown subsys name 'net' [ 39.308868][ T6531] cgroup: Unknown subsys name 'cpuset' [ 39.313082][ T6531] cgroup: Unknown subsys name 'rlimit' [ 39.528388][ T6531] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 53.885279][ T6545] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.889240][ T6545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.890133][ T6545] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.890798][ T6545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.891217][ T6545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.002570][ T6544] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.133717][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 55.187072][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.187209][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.187314][ T6579] bridge_slave_0: entered allmulticast mode [ 55.188194][ T6579] bridge_slave_0: entered promiscuous mode [ 55.190189][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.190257][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.190344][ T6579] bridge_slave_1: entered allmulticast mode [ 55.191166][ T6579] bridge_slave_1: entered promiscuous mode [ 55.211576][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.213049][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.244496][ T6579] team0: Port device team_slave_0 added [ 55.246441][ T6579] team0: Port device team_slave_1 added [ 55.260273][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.260324][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.260356][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.261716][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.261743][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.261773][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.298488][ T6579] hsr_slave_0: entered promiscuous mode [ 55.300599][ T6579] hsr_slave_1: entered promiscuous mode [ 55.484980][ T6579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.491324][ T6579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.495075][ T6579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.498895][ T6579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.515838][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.515976][ T6579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.516442][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.516549][ T6579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.542876][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.550834][ T694] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.553855][ T694] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.562229][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.567792][ T694] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.567883][ T694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.582235][ T694] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.582324][ T694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.683723][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.703631][ T6579] veth0_vlan: entered promiscuous mode [ 55.707496][ T6579] veth1_vlan: entered promiscuous mode [ 55.719627][ T6579] veth0_macvtap: entered promiscuous mode [ 55.722836][ T6579] veth1_macvtap: entered promiscuous mode [ 55.731272][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.736859][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.743115][ T6579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.746322][ T6579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.746354][ T6579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.746385][ T6579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.178513][ T694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.257985][ T694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.347360][ T694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.448889][ T694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.921247][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.923592][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.940099][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.941935][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:00:57 executed programs: 0 [ 57.424756][ T6545] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.427762][ T6545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.429652][ T6545] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.430314][ T6545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.430748][ T6545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.522478][ T6637] chnl_net:caif_netlink_parms(): no params data found [ 57.565120][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.565238][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.565356][ T6637] bridge_slave_0: entered allmulticast mode [ 57.566360][ T6637] bridge_slave_0: entered promiscuous mode [ 57.567887][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.567975][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.568094][ T6637] bridge_slave_1: entered allmulticast mode [ 57.568921][ T6637] bridge_slave_1: entered promiscuous mode [ 57.591143][ T6637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.593149][ T6637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.609839][ T6637] team0: Port device team_slave_0 added [ 57.611743][ T6637] team0: Port device team_slave_1 added [ 57.625557][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.625606][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.625642][ T6637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.627633][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.627667][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.627698][ T6637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.654068][ T6637] hsr_slave_0: entered promiscuous mode [ 57.654619][ T6637] hsr_slave_1: entered promiscuous mode [ 57.655027][ T6637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.655136][ T6637] Cannot create hsr debugfs directory [ 59.217221][ T694] bridge_slave_1: left allmulticast mode [ 59.217312][ T694] bridge_slave_1: left promiscuous mode [ 59.217745][ T694] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.228385][ T694] bridge_slave_0: left allmulticast mode [ 59.228437][ T694] bridge_slave_0: left promiscuous mode [ 59.228805][ T694] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.516939][ T6545] Bluetooth: hci0: command tx timeout [ 60.668530][ T694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.708857][ T694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.747732][ T694] bond0 (unregistering): Released all slaves [ 60.856333][ T694] hsr_slave_0: left promiscuous mode [ 60.858913][ T694] hsr_slave_1: left promiscuous mode [ 60.860936][ T694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.863325][ T694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.874186][ T694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.874251][ T694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.891505][ T694] veth1_macvtap: left promiscuous mode [ 60.893258][ T694] veth0_macvtap: left promiscuous mode [ 60.893415][ T694] veth1_vlan: left promiscuous mode [ 60.893748][ T694] veth0_vlan: left promiscuous mode [ 61.596114][ T6545] Bluetooth: hci0: command tx timeout [ 62.819477][ T694] team0 (unregistering): Port device team_slave_1 removed [ 62.997684][ T694] team0 (unregistering): Port device team_slave_0 removed [ 63.676347][ T6545] Bluetooth: hci0: command tx timeout [ 64.477782][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.479469][ T2408] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.665860][ T6637] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.673197][ T6637] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.708824][ T6637] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.715782][ T6637] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.756200][ T6545] Bluetooth: hci0: command tx timeout [ 65.772137][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.785488][ T6637] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.054474][ T2198] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.054556][ T2198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.064765][ T563] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.064842][ T563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.271839][ T6637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.291155][ T6637] veth0_vlan: entered promiscuous mode [ 66.295650][ T6637] veth1_vlan: entered promiscuous mode [ 66.355244][ T6637] veth0_macvtap: entered promiscuous mode [ 66.357310][ T6637] veth1_macvtap: entered promiscuous mode [ 66.363172][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.365316][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.367116][ T6637] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.367155][ T6637] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.367186][ T6637] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.367227][ T6637] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.553154][ T2198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.553222][ T2198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.568629][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.568682][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:06 executed programs: 2 [ 66.886317][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.040007][ T9] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 67.040091][ T9] usb 1-1: config 0 has no interface number 0 [ 67.040125][ T9] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 67.040162][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 67.040187][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.047308][ T9] usb 1-1: config 0 descriptor?? [ 67.251514][ T9] usb 1-1: USB disconnect, device number 2 [ 67.257218][ ** replaying previous printk message ** [ 67.257218][ T9] ================================================================== [ 67.257245][ T9] BUG: KASAN: slab-use-after-free in hdm_disconnect+0xf4/0x18c [ 67.257269][ T9] Read of size 8 at addr ffff0000d6c398a8 by task kworker/0:0/9 [ 67.257284][ T9] [ 67.257295][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 67.257307][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.257314][ T9] Workqueue: usb_hub_wq hub_event [ 67.257327][ T9] Call trace: [ 67.257331][ T9] show_stack+0x2c/0x3c (C) [ 67.257344][ T9] __dump_stack+0x30/0x40 [ 67.257357][ T9] dump_stack_lvl+0xd8/0x12c [ 67.257370][ T9] print_address_description+0xa8/0x220 [ 67.257383][ T9] print_report+0x68/0x84 [ 67.257394][ T9] kasan_report+0xb0/0x110 [ 67.257405][ T9] __asan_report_load8_noabort+0x20/0x2c [ 67.257416][ T9] hdm_disconnect+0xf4/0x18c [ 67.257428][ T9] usb_unbind_interface+0x244/0x7c8 [ 67.257441][ T9] device_release_driver_internal+0x3f8/0x658 [ 67.257454][ T9] device_release_driver+0x28/0x38 [ 67.257465][ T9] bus_remove_device+0x310/0x3b0 [ 67.257474][ T9] device_del+0x47c/0x808 [ 67.257486][ T9] usb_disable_device+0x33c/0x780 [ 67.257498][ T9] usb_disconnect+0x284/0x82c [ 67.257508][ T9] hub_event+0x1688/0x3c78 [ 67.257519][ T9] process_one_work+0x7e8/0x155c [ 67.257532][ T9] worker_thread+0x958/0xed8 [ 67.257545][ T9] kthread+0x5fc/0x75c [ 67.257557][ T9] ret_from_fork+0x10/0x20 [ 67.257568][ T9] [ 67.257677][ T9] Allocated by task 9: [ 67.257688][ T9] kasan_save_track+0x40/0x78 [ 67.257713][ T9] kasan_save_alloc_info+0x44/0x54 [ 67.257729][ T9] __kasan_kmalloc+0x9c/0xb4 [ 67.257742][ T9] __kmalloc_cache_noprof+0x2a4/0x3fc [ 67.257756][ T9] hdm_probe+0x9c/0x1044 [ 67.257777][ T9] usb_probe_interface+0x584/0xa44 [ 67.257794][ T9] really_probe+0x394/0x910 [ 67.257808][ T9] __driver_probe_device+0x180/0x2d4 [ 67.257823][ T9] driver_probe_device+0x78/0x330 [ 67.257837][ T9] __device_attach_driver+0x290/0x4e0 [ 67.257851][ T9] bus_for_each_drv+0x220/0x2b4 [ 67.257865][ T9] __device_attach+0x26c/0x388 [ 67.257879][ T9] device_initial_probe+0x24/0x34 [ 67.257893][ T9] bus_probe_device+0x178/0x240 [ 67.257906][ T9] device_add+0x71c/0xa60 [ 67.257922][ T9] usb_set_configuration+0x1640/0x1bac [ 67.257938][ T9] usb_generic_driver_probe+0x8c/0x144 [ 67.257955][ T9] usb_probe_device+0x1a4/0x348 [ 67.257971][ T9] really_probe+0x394/0x910 [ 67.257985][ T9] __driver_probe_device+0x180/0x2d4 [ 67.257999][ T9] driver_probe_device+0x78/0x330 [ 67.258014][ T9] __device_attach_driver+0x290/0x4e0 [ 67.258028][ T9] bus_for_each_drv+0x220/0x2b4 [ 67.258042][ T9] __device_attach+0x26c/0x388 [ 67.258056][ T9] device_initial_probe+0x24/0x34 [ 67.258070][ T9] bus_probe_device+0x178/0x240 [ 67.258083][ T9] device_add+0x71c/0xa60 [ 67.258098][ T9] usb_new_device+0x7f0/0x1220 [ 67.258112][ T9] hub_event+0x211c/0x3c78 [ 67.258126][ T9] process_one_work+0x7e8/0x155c [ 67.258143][ T9] worker_thread+0x958/0xed8 [ 67.258159][ T9] kthread+0x5fc/0x75c [ 67.258174][ T9] ret_from_fork+0x10/0x20 [ 67.258188][ T9] [ 67.258196][ T9] Freed by task 9: [ 67.258206][ T9] kasan_save_track+0x40/0x78 [ 67.258222][ T9] kasan_save_free_info+0x58/0x70 [ 67.258236][ T9] __kasan_slab_free+0x68/0x88 [ 67.258249][ T9] kfree+0x17c/0x474 [ 67.258262][ T9] release_mdev+0x20/0x30 [ 67.258277][ T9] device_release+0x8c/0x1ac [ 67.258293][ T9] kobject_put+0x2b0/0x438 [ 67.258308][ T9] device_unregister+0x3c/0xcc [ 67.258324][ T9] most_deregister_interface+0x3e0/0x42c [ 67.258338][ T9] hdm_disconnect+0xdc/0x18c [ 67.258353][ T9] usb_unbind_interface+0x244/0x7c8 [ 67.258369][ T9] device_release_driver_internal+0x3f8/0x658 [ 67.258384][ T9] device_release_driver+0x28/0x38 [ 67.258399][ T9] bus_remove_device+0x310/0x3b0 [ 67.258413][ T9] device_del+0x47c/0x808 [ 67.258428][ T9] usb_disable_device+0x33c/0x780 [ 67.258444][ T9] usb_disconnect+0x284/0x82c [ 67.258459][ T9] hub_event+0x1688/0x3c78 [ 67.258473][ T9] process_one_work+0x7e8/0x155c [ 67.258489][ T9] worker_thread+0x958/0xed8 [ 67.258505][ T9] kthread+0x5fc/0x75c [ 67.258520][ T9] ret_from_fork+0x10/0x20 [ 67.258534][ T9] [ 67.258542][ T9] The buggy address belongs to the object at ffff0000d6c38000 [ 67.258542][ T9] which belongs to the cache kmalloc-8k of size 8192 [ 67.258557][ T9] The buggy address is located 6312 bytes inside of [ 67.258557][ T9] freed 8192-byte region [ffff0000d6c38000, ffff0000d6c3a000) [ 67.258574][ T9] [ 67.258582][ T9] The buggy address belongs to the physical page: [ 67.258592][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116c38 [ 67.258608][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 67.258623][ T9] anon flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 67.258639][ T9] page_type: f5(slab) [ 67.258654][ T9] raw: 05ffc00000000040 ffff0000c0002280 0000000000000000 dead000000000001 [ 67.258669][ T9] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 67.258685][ T9] head: 05ffc00000000040 ffff0000c0002280 0000000000000000 dead000000000001 [ 67.258699][ T9] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 67.258720][ T9] head: 05ffc00000000003 fffffdffc35b0e01 00000000ffffffff 00000000ffffffff [ 67.258734][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 67.258746][ T9] page dumped because: kasan: bad access detected [ 67.258755][ T9] [ 67.258763][ T9] Memory state around the buggy address: [ 67.258779][ T9] ffff0000d6c39780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.258792][ T9] ffff0000d6c39800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.258804][ T9] >ffff0000d6c39880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.258815][ T9] ^ [ 67.258826][ T9] ffff0000d6c39900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.258838][ T9] ffff0000d6c39980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.258849][ T9] ================================================================== [ 67.258888][ T9] Disabling lock debugging due to kernel taint [ 67.258936][ T9] ------------[ cut here ]------------ [ 67.258950][ T9] refcount_t: underflow; use-after-free. [ 67.259304][ T9] WARNING: CPU: 0 PID: 9 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 67.434757][ T9] Modules linked in: [ 67.435892][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 67.439395][ T9] Tainted: [B]=BAD_PAGE [ 67.440578][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.443420][ T9] Workqueue: usb_hub_wq hub_event [ 67.444916][ T9] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 67.447171][ T9] pc : refcount_warn_saturate+0x154/0x1f8 [ 67.448760][ T9] lr : refcount_warn_saturate+0x154/0x1f8 [ 67.450314][ T9] sp : ffff800097a67330 [ 67.451473][ T9] x29: ffff800097a67330 x28: ffff0000da60a0b0 x27: 1fffe0001ad87000 [ 67.453794][ T9] x26: 1fffe0001ad87007 x25: dfff800000000000 x24: ffff800092495ab0 [ 67.456077][ T9] x23: 1fffe0001ad870a1 x22: ffff0000d6c3803c x21: 0000000000000000 [ 67.458357][ T9] x20: ffff0000d6c38038 x19: ffff800092c65000 x18: 00000000ffffffff [ 67.460660][ T9] x17: 0000000000000000 x16: ffff80008ae69508 x15: ffff700011ee0158 [ 67.462970][ T9] x14: 1ffff00011ee0158 x13: 0000000000000004 x12: ffffffffffffffff [ 67.465336][ T9] x11: ffff700011ee0158 x10: 0000000000ff0100 x9 : 60fc1274729f8600 [ 67.467667][ T9] x8 : 60fc1274729f8600 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.469896][ T9] x5 : ffff800097a66c78 x4 : ffff80008f776bc0 x3 : ffff80008054bdfc [ 67.472177][ T9] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 67.474394][ T9] Call trace: [ 67.475283][ T9] refcount_warn_saturate+0x154/0x1f8 (P) [ 67.476836][ T9] kobject_put+0x194/0x438 [ 67.478054][ T9] put_device+0x28/0x40 [ 67.479141][ T9] hdm_disconnect+0x174/0x18c [ 67.480382][ T9] usb_unbind_interface+0x244/0x7c8 [ 67.481797][ T9] device_release_driver_internal+0x3f8/0x658 [ 67.483435][ T9] device_release_driver+0x28/0x38 [ 67.484864][ T9] bus_remove_device+0x310/0x3b0 [ 67.486221][ T9] device_del+0x47c/0x808 [ 67.487433][ T9] usb_disable_device+0x33c/0x780 [ 67.488822][ T9] usb_disconnect+0x284/0x82c [ 67.490117][ T9] hub_event+0x1688/0x3c78 [ 67.491340][ T9] process_one_work+0x7e8/0x155c [ 67.492646][ T9] worker_thread+0x958/0xed8 [ 67.493895][ T9] kthread+0x5fc/0x75c [ 67.495013][ T9] ret_from_fork+0x10/0x20 [ 67.496268][ T9] irq event stamp: 44563 [ 67.497460][ T9] hardirqs last enabled at (44563): [] exit_to_kernel_mode+0xc0/0xf0 [ 67.500181][ T9] hardirqs last disabled at (44562): [] el1_interrupt+0x24/0x54 [ 67.502716][ T9] softirqs last enabled at (41128): [] handle_softirqs+0xaf8/0xc88 [ 67.505308][ T9] softirqs last disabled at (41105): [] __do_softirq+0x14/0x20 [ 67.507802][ T9] ---[ end trace 0000000000000000 ]--- [ 68.078043][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.227138][ T26] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 68.227199][ T26] usb 1-1: config 0 has no interface number 0 [ 68.227237][ T26] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 68.227268][ T26] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 68.227290][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.228720][ T26] usb 1-1: config 0 descriptor?? [ 68.433302][ T26] usb 1-1: USB disconnect, device number 3 [ 69.196003][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 69.357127][ T9] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 69.357173][ T9] usb 1-1: config 0 has no interface number 0 [ 69.357197][ T9] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 69.357228][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 69.357250][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.358486][ T9] usb 1-1: config 0 descriptor?? [ 69.567202][ T26] usb 1-1: USB disconnect, device number 4 [ 69.596517][ T24] cfg80211: failed to load regulatory.db [ 70.326349][ T1818] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 70.487256][ T1818] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 70.487311][ T1818] usb 1-1: config 0 has no interface number 0 [ 70.487349][ T1818] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 70.487379][ T1818] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 70.487401][ T1818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.488903][ T1818] usb 1-1: config 0 descriptor?? [ 70.690444][ T1818] usb 1-1: USB disconnect, device number 5 [ 71.446214][ T1818] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 71.597720][ T1818] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 71.597781][ T1818] usb 1-1: config 0 has no interface number 0 [ 71.597807][ T1818] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 71.597840][ T1818] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 71.597863][ T1818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.599183][ T1818] usb 1-1: config 0 descriptor?? [ 71.804094][ T1818] usb 1-1: USB disconnect, device number 6 1970/01/01 00:01:12 executed programs: 7 [ 72.546058][ T1818] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 72.707184][ T1818] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 72.707240][ T1818] usb 1-1: config 0 has no interface number 0 [ 72.707526][ T1818] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 72.707558][ T1818] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 72.707580][ T1818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.708863][ T1818] usb 1-1: config 0 descriptor?? [ 72.914554][ T1818] usb 1-1: USB disconnect, device number 7 [ 73.656068][ T1818] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 73.807825][ T1818] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 73.807878][ T1818] usb 1-1: config 0 has no interface number 0 [ 73.807922][ T1818] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 73.807953][ T1818] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 73.807974][ T1818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.809461][ T1818] usb 1-1: config 0 descriptor?? [ 74.011574][ T1818] usb 1-1: USB disconnect, device number 8 [ 74.756062][ T6564] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 74.907195][ T6564] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 74.907252][ T6564] usb 1-1: config 0 has no interface number 0 [ 74.907297][ T6564] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 74.907330][ T6564] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 74.907353][ T6564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.908985][ T6564] usb 1-1: config 0 descriptor?? [ 75.113214][ T6564] usb 1-1: USB disconnect, device number 9 [ 75.856578][ T1818] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 76.017296][ T1818] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 76.017349][ T1818] usb 1-1: config 0 has no interface number 0 [ 76.017394][ T1818] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 76.017425][ T1818] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 76.017447][ T1818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.019531][ T1818] usb 1-1: config 0 descriptor?? [ 76.223970][ T1818] usb 1-1: USB disconnect, device number 10 [ 76.966038][ T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 77.127261][ T26] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 77.127313][ T26] usb 1-1: config 0 has no interface number 0 [ 77.127350][ T26] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 77.127382][ T26] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=7f.ee [ 77.127404][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.128904][ T26] usb 1-1: config 0 descriptor??