Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. 2026/03/05 15:56:15 parsed 1 programs [ 127.612825][ T6251] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 131.199597][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.212970][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.213713][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.214731][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.215384][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.756267][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.756287][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.796311][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.796332][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.887612][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887699][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.234456][ T6324] chnl_net:caif_netlink_parms(): no params data found [ 135.701484][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.701600][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.701724][ T6324] bridge_slave_0: entered allmulticast mode [ 135.703017][ T6324] bridge_slave_0: entered promiscuous mode [ 135.704936][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.705046][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.705134][ T6324] bridge_slave_1: entered allmulticast mode [ 135.706473][ T6324] bridge_slave_1: entered promiscuous mode [ 135.915604][ T6324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.917910][ T6324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.082864][ T6324] team0: Port device team_slave_0 added [ 136.084824][ T6324] team0: Port device team_slave_1 added [ 136.340996][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.341012][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.341031][ T6324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.501532][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.501548][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.501571][ T6324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.740948][ T6324] hsr_slave_0: entered promiscuous mode [ 136.741757][ T6324] hsr_slave_1: entered promiscuous mode [ 138.193290][ T6324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.240924][ T6324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.276505][ T6324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.323547][ T6324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.465882][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.497959][ T6324] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.532707][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.532928][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.558137][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.558280][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.885893][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.953777][ T6324] veth0_vlan: entered promiscuous mode [ 138.969343][ T6324] veth1_vlan: entered promiscuous mode [ 139.015509][ T6324] veth0_macvtap: entered promiscuous mode [ 139.027279][ T6324] veth1_macvtap: entered promiscuous mode [ 139.048393][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.077623][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.114335][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.115862][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.116447][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.117656][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/03/05 15:56:31 executed programs: 0 [ 139.520933][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.523734][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.528405][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.529497][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.540693][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.977229][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.356643][ T6409] chnl_net:caif_netlink_parms(): no params data found [ 140.683209][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.944994][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.945205][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.945395][ T6409] bridge_slave_0: entered allmulticast mode [ 140.947859][ T6409] bridge_slave_0: entered promiscuous mode [ 140.974412][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.974523][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.974710][ T6409] bridge_slave_1: entered allmulticast mode [ 140.977058][ T6409] bridge_slave_1: entered promiscuous mode [ 141.178680][ T6409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.187552][ T6409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.354026][ T6409] team0: Port device team_slave_0 added [ 141.355887][ T6409] team0: Port device team_slave_1 added [ 141.533097][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.533114][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.533132][ T6409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.535345][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.535358][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.535378][ T6409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.603075][ T60] Bluetooth: hci0: command tx timeout [ 141.815085][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.235548][ T6409] hsr_slave_0: entered promiscuous mode [ 142.236272][ T6409] hsr_slave_1: entered promiscuous mode [ 142.236898][ T6409] debugfs: 'hsr0' already exists in 'hsr' [ 142.236973][ T6409] Cannot create hsr debugfs directory [ 142.478261][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.923167][ T12] bridge_slave_1: left allmulticast mode [ 142.923193][ T12] bridge_slave_1: left promiscuous mode [ 142.923427][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.001526][ T12] bridge_slave_0: left allmulticast mode [ 143.001560][ T12] bridge_slave_0: left promiscuous mode [ 143.001791][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.680254][ T60] Bluetooth: hci0: command tx timeout [ 143.810901][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.870868][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.892070][ T12] bond0 (unregistering): Released all slaves [ 144.240364][ T12] hsr_slave_0: left promiscuous mode [ 144.290182][ T12] hsr_slave_1: left promiscuous mode [ 144.291106][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.291129][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.341087][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.341113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.421184][ T12] veth1_macvtap: left promiscuous mode [ 144.421245][ T12] veth0_macvtap: left promiscuous mode [ 144.421381][ T12] veth1_vlan: left promiscuous mode [ 144.421474][ T12] veth0_vlan: left promiscuous mode [ 145.020873][ T12] team0 (unregistering): Port device team_slave_1 removed [ 145.062328][ T12] team0 (unregistering): Port device team_slave_0 removed [ 145.770103][ T60] Bluetooth: hci0: command tx timeout [ 145.992353][ T6409] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.047477][ T6409] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.095201][ T6409] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.133064][ T6409] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.324054][ T6409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.339379][ T6409] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.357439][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.357675][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.373633][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.374527][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.648537][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.715570][ T6409] veth0_vlan: entered promiscuous mode [ 146.731183][ T6409] veth1_vlan: entered promiscuous mode [ 146.778684][ T6409] veth0_macvtap: entered promiscuous mode [ 146.791756][ T6409] veth1_macvtap: entered promiscuous mode [ 146.814832][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.832998][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.853108][ T3619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.854839][ T3619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.854878][ T3619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.854909][ T3619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.052111][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.052131][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.093560][ T3619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.093580][ T3619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/03/05 15:56:38 executed programs: 2 [ 147.470642][ T1247] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 147.633985][ T1247] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.639979][ T1247] usb 1-1: config 131 interface 0 altsetting 67 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 147.640641][ T1247] usb 1-1: config 131 interface 0 has no altsetting 0 [ 147.643839][ T1247] usb 1-1: New USB device found, idVendor=2040, idProduct=200a, bcdDevice=27.2a [ 147.643864][ T1247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.643880][ T1247] usb 1-1: Product: syz [ 147.643891][ T1247] usb 1-1: Manufacturer: syz [ 147.643902][ T1247] usb 1-1: SerialNumber: syz [ 147.840210][ T60] Bluetooth: hci0: command tx timeout [ 147.884014][ T1247] smsusb:smsusb_probe: board id=9, interface number 0 [ 147.897948][ T1247] smsusb:siano_media_device_register: media controller created [ 147.901658][ T1247] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 147.901678][ T1247] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 147.901745][ T1247] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 147.903557][ T1247] ------------[ cut here ]------------ [ 147.903564][ T1247] !PageLargeKmalloc(page) [ 147.903576][ T1247] WARNING: mm/slub.c:6371 at free_large_kmalloc+0xa3/0x140, CPU#0: kworker/0:3/1247 [ 147.903615][ T1247] Modules linked in: [ 147.903657][ T1247] CPU: 0 UID: 0 PID: 1247 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.903677][ T1247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.903688][ T1247] Workqueue: usb_hub_wq hub_event [ 147.903717][ T1247] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 147.903735][ T1247] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 ae b5 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 51 69 57 8d 5b 41 5e 5d e9 37 c9 08 ff [ 147.903749][ T1247] RSP: 0018:ffffc9000663eb40 EFLAGS: 00010206 [ 147.903763][ T1247] RAX: 00000000ff000000 RBX: ffffea000169b880 RCX: ffff888028ab5b01 [ 147.903776][ T1247] RDX: 0000000000000000 RSI: ffff88805a6e2000 RDI: ffffea000169b880 [ 147.903787][ T1247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.903797][ T1247] R10: dffffc0000000000 R11: ffffed10033bd3a1 R12: 1ffff1100731e682 [ 147.903809][ T1247] R13: 0000000000000000 R14: ffff888019de9d60 R15: dffffc0000000000 [ 147.903819][ T1247] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 147.903829][ T1247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.903840][ T1247] CR2: 0000001b2c45ffff CR3: 00000000385f4000 CR4: 00000000003526f0 [ 147.903854][ T1247] Call Trace: [ 147.903867][ T1247] [ 147.903878][ T1247] usb_free_urb+0xd0/0x120 [ 147.903902][ T1247] smsusb_term_device+0x1d7/0x3e0 [ 147.903930][ T1247] smsusb_probe+0x1aba/0x2280 [ 147.903965][ T1247] ? __pfx_smsusb_probe+0x10/0x10 [ 147.903990][ T1247] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 147.904027][ T1247] ? __pm_runtime_set_status+0x99c/0xc70 [ 147.904141][ T1247] usb_probe_interface+0x668/0xc90 [ 147.904170][ T1247] ? __pfx_usb_probe_interface+0x10/0x10 [ 147.904186][ T1247] really_probe+0x267/0xaf0 [ 147.904212][ T1247] __driver_probe_device+0x18c/0x320 [ 147.904234][ T1247] driver_probe_device+0x4f/0x240 [ 147.904254][ T1247] __device_attach_driver+0x2d4/0x4c0 [ 147.904277][ T1247] bus_for_each_drv+0x25b/0x2f0 [ 147.904299][ T1247] ? __pfx___device_attach_driver+0x10/0x10 [ 147.904317][ T1247] ? __pfx_bus_for_each_drv+0x10/0x10 [ 147.904339][ T1247] ? rt_spin_unlock+0x160/0x200 [ 147.904366][ T1247] __device_attach+0x2c8/0x450 [ 147.904386][ T1247] ? __pfx___device_attach+0x10/0x10 [ 147.904404][ T1247] ? rt_spin_unlock+0x160/0x200 [ 147.904430][ T1247] device_initial_probe+0xa1/0xd0 [ 147.904450][ T1247] bus_probe_device+0x12d/0x220 [ 147.904470][ T1247] ? device_add+0x726/0xb80 [ 147.904496][ T1247] device_add+0x7b6/0xb80 [ 147.904524][ T1247] usb_set_configuration+0x1a87/0x2110 [ 147.904572][ T1247] usb_generic_driver_probe+0x8d/0x150 [ 147.904597][ T1247] usb_probe_device+0x1c4/0x3b0 [ 147.904617][ T1247] ? __pfx_usb_probe_device+0x10/0x10 [ 147.904633][ T1247] really_probe+0x267/0xaf0 [ 147.904658][ T1247] __driver_probe_device+0x18c/0x320 [ 147.904678][ T1247] driver_probe_device+0x4f/0x240 [ 147.904700][ T1247] __device_attach_driver+0x2d4/0x4c0 [ 147.904722][ T1247] bus_for_each_drv+0x25b/0x2f0 [ 147.904745][ T1247] ? __pfx___device_attach_driver+0x10/0x10 [ 147.904762][ T1247] ? __pfx_bus_for_each_drv+0x10/0x10 [ 147.904784][ T1247] ? rt_spin_unlock+0x160/0x200 [ 147.904810][ T1247] __device_attach+0x2c8/0x450 [ 147.904830][ T1247] ? __pfx___device_attach+0x10/0x10 [ 147.904848][ T1247] ? rt_spin_unlock+0x160/0x200 [ 147.904874][ T1247] device_initial_probe+0xa1/0xd0 [ 147.904894][ T1247] bus_probe_device+0x12d/0x220 [ 147.904913][ T1247] ? device_add+0x726/0xb80 [ 147.904939][ T1247] device_add+0x7b6/0xb80 [ 147.904966][ T1247] usb_new_device+0x9f8/0x16e0 [ 147.905001][ T1247] ? __pfx_usb_new_device+0x10/0x10 [ 147.905032][ T1247] hub_event+0x2a49/0x4f60 [ 147.905112][ T1247] ? __pfx_hub_event+0x10/0x10 [ 147.905146][ T1247] ? process_scheduled_works+0xa25/0x1830 [ 147.905168][ T1247] ? process_scheduled_works+0xa25/0x1830 [ 147.905192][ T1247] process_scheduled_works+0xb02/0x1830 [ 147.905243][ T1247] ? __pfx_process_scheduled_works+0x10/0x10 [ 147.905271][ T1247] ? assign_work+0x3d5/0x5e0 [ 147.905299][ T1247] worker_thread+0xa50/0xfc0 [ 147.905350][ T1247] kthread+0x388/0x470 [ 147.905368][ T1247] ? __pfx_worker_thread+0x10/0x10 [ 147.905388][ T1247] ? __pfx_kthread+0x10/0x10 [ 147.905408][ T1247] ret_from_fork+0x51e/0xb90 [ 147.905434][ T1247] ? __pfx_ret_from_fork+0x10/0x10 [ 147.905455][ T1247] ? __switch_to+0xc7d/0x1450 [ 147.905479][ T1247] ? __pfx_kthread+0x10/0x10 [ 147.905498][ T1247] ret_from_fork_asm+0x1a/0x30 [ 147.905532][ T1247] [ 147.905542][ T1247] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.905555][ T1247] CPU: 0 UID: 0 PID: 1247 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.905574][ T1247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.905583][ T1247] Workqueue: usb_hub_wq hub_event [ 147.905606][ T1247] Call Trace: [ 147.905613][ T1247] [ 147.905620][ T1247] vpanic+0x56c/0xa60 [ 147.905644][ T1247] ? __pfx__printk+0x10/0x10 [ 147.905663][ T1247] ? __pfx_vpanic+0x10/0x10 [ 147.905683][ T1247] ? is_bpf_text_address+0x292/0x2b0 [ 147.905705][ T1247] ? is_bpf_text_address+0x26/0x2b0 [ 147.905735][ T1247] panic+0xc5/0xd0 [ 147.905758][ T1247] ? __pfx_panic+0x10/0x10 [ 147.905790][ T1247] ? ret_from_fork_asm+0x1a/0x30 [ 147.905812][ T1247] __warn+0x315/0x4f0 [ 147.905833][ T1247] ? free_large_kmalloc+0xa3/0x140 [ 147.905852][ T1247] ? free_large_kmalloc+0xa3/0x140 [ 147.905869][ T1247] __report_bug+0x29a/0x540 [ 147.905890][ T1247] ? device_initial_probe+0xa1/0xd0 [ 147.905905][ T1247] ? bus_probe_device+0x12d/0x220 [ 147.905924][ T1247] ? device_add+0x7b6/0xb80 [ 147.905951][ T1247] ? free_large_kmalloc+0xa3/0x140 [ 147.905967][ T1247] ? __pfx___report_bug+0x10/0x10 [ 147.905986][ T1247] ? usb_new_device+0x9f8/0x16e0 [ 147.906005][ T1247] ? hub_event+0x2a49/0x4f60 [ 147.906031][ T1247] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.906070][ T1247] ? free_large_kmalloc+0xa3/0x140 [ 147.906086][ T1247] report_bug+0x16a/0x220 [ 147.906108][ T1247] ? free_large_kmalloc+0xa3/0x140 [ 147.906122][ T1247] ? free_large_kmalloc+0xa5/0x140 [ 147.906138][ T1247] handle_bug+0x9c/0x200 [ 147.906156][ T1247] exc_invalid_op+0x1a/0x50 [ 147.906172][ T1247] asm_exc_invalid_op+0x1a/0x20 [ 147.906189][ T1247] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 147.906206][ T1247] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 ae b5 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 51 69 57 8d 5b 41 5e 5d e9 37 c9 08 ff [ 147.906219][ T1247] RSP: 0018:ffffc9000663eb40 EFLAGS: 00010206 [ 147.906233][ T1247] RAX: 00000000ff000000 RBX: ffffea000169b880 RCX: ffff888028ab5b01 [ 147.906245][ T1247] RDX: 0000000000000000 RSI: ffff88805a6e2000 RDI: ffffea000169b880 [ 147.906257][ T1247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.906267][ T1247] R10: dffffc0000000000 R11: ffffed10033bd3a1 R12: 1ffff1100731e682 [ 147.906278][ T1247] R13: 0000000000000000 R14: ffff888019de9d60 R15: dffffc0000000000 [ 147.906309][ T1247] usb_free_urb+0xd0/0x120 [ 147.906331][ T1247] smsusb_term_device+0x1d7/0x3e0 [ 147.906358][ T1247] smsusb_probe+0x1aba/0x2280 [ 147.906392][ T1247] ? __pfx_smsusb_probe+0x10/0x10 [ 147.906416][ T1247] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 147.906453][ T1247] ? __pm_runtime_set_status+0x99c/0xc70 [ 147.906486][ T1247] usb_probe_interface+0x668/0xc90 [ 147.906514][ T1247] ? __pfx_usb_probe_interface+0x10/0x10 [ 147.906530][ T1247] really_probe+0x267/0xaf0 [ 147.906555][ T1247] __driver_probe_device+0x18c/0x320 [ 147.906575][ T1247] driver_probe_device+0x4f/0x240 [ 147.906596][ T1247] __device_attach_driver+0x2d4/0x4c0 [ 147.906618][ T1247] bus_for_each_drv+0x25b/0x2f0 [ 147.906641][ T1247] ? __pfx___device_attach_driver+0x10/0x10 [ 147.906659][ T1247] ? __pfx_bus_for_each_drv+0x10/0x10 [ 147.906681][ T1247] ? rt_spin_unlock+0x160/0x200 [ 147.906707][ T1247] __device_attach+0x2c8/0x450 [ 147.906726][ T1247] ? __pfx___device_attach+0x10/0x10 [ 147.906745][ T1247] ? rt_spin_unlock+0x160/0x200 [ 147.906771][ T1247] device_initial_probe+0xa1/0xd0 [ 147.906790][ T1247] bus_probe_device+0x12d/0x220 [ 147.906809][ T1247] ? device_add+0x726/0xb80 [ 147.906835][ T1247] device_add+0x7b6/0xb80 [ 147.906863][ T1247] usb_set_configuration+0x1a87/0x2110 [ 147.906914][ T1247] usb_generic_driver_probe+0x8d/0x150 [ 147.906940][ T1247] usb_probe_device+0x1c4/0x3b0 [ 147.906961][ T1247] ? __pfx_usb_probe_device+0x10/0x10 [ 147.906976][ T1247] really_probe+0x267/0xaf0 [ 147.907000][ T1247] __driver_probe_device+0x18c/0x320 [ 147.907021][ T1247] driver_probe_device+0x4f/0x240 [ 147.907042][ T1247] __device_attach_driver+0x2d4/0x4c0 [ 147.907072][ T1247] bus_for_each_drv+0x25b/0x2f0 [ 147.907093][ T1247] ? __pfx___device_attach_driver+0x10/0x10 [ 147.907111][ T1247] ? __pfx_bus_for_each_drv+0x10/0x10 [ 147.907133][ T1247] ? rt_spin_unlock+0x160/0x200 [ 147.907160][ T1247] __device_attach+0x2c8/0x450 [ 147.907179][ T1247] ? __pfx___device_attach+0x10/0x10 [ 147.907196][ T1247] ? rt_spin_unlock+0x160/0x200 [ 147.907222][ T1247] device_initial_probe+0xa1/0xd0 [ 147.907242][ T1247] bus_probe_device+0x12d/0x220 [ 147.907262][ T1247] ? device_add+0x726/0xb80 [ 147.907286][ T1247] device_add+0x7b6/0xb80 [ 147.907314][ T1247] usb_new_device+0x9f8/0x16e0 [ 147.907347][ T1247] ? __pfx_usb_new_device+0x10/0x10 [ 147.907379][ T1247] hub_event+0x2a49/0x4f60 [ 147.907452][ T1247] ? __pfx_hub_event+0x10/0x10 [ 147.907485][ T1247] ? process_scheduled_works+0xa25/0x1830 [ 147.907506][ T1247] ? process_scheduled_works+0xa25/0x1830 [ 147.907530][ T1247] process_scheduled_works+0xb02/0x1830 [ 147.907579][ T1247] ? __pfx_process_scheduled_works+0x10/0x10 [ 147.907608][ T1247] ? assign_work+0x3d5/0x5e0 [ 147.907635][ T1247] worker_thread+0xa50/0xfc0 [ 147.907679][ T1247] kthread+0x388/0x470 [ 147.907694][ T1247] ? __pfx_worker_thread+0x10/0x10 [ 147.907710][ T1247] ? __pfx_kthread+0x10/0x10 [ 147.907725][ T1247] ret_from_fork+0x51e/0xb90 [ 147.907749][ T1247] ? __pfx_ret_from_fork+0x10/0x10 [ 147.907766][ T1247] ? __switch_to+0xc7d/0x1450 [ 147.907787][ T1247] ? __pfx_kthread+0x10/0x10 [ 147.907804][ T1247] ret_from_fork_asm+0x1a/0x30 [ 147.907836][ T1247] [ 147.908104][ T1247] Kernel Offset: disabled