Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. 2025/12/25 11:36:23 parsed 1 programs [ 132.868658][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.868785][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.206662][ T6272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 140.632816][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.640471][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.650026][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.666423][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.667089][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.945793][ T6340] chnl_net:caif_netlink_parms(): no params data found [ 143.413625][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.413758][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.413895][ T6340] bridge_slave_0: entered allmulticast mode [ 143.415252][ T6340] bridge_slave_0: entered promiscuous mode [ 143.418221][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.418331][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.418420][ T6340] bridge_slave_1: entered allmulticast mode [ 143.419781][ T6340] bridge_slave_1: entered promiscuous mode [ 143.623032][ T6340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.627314][ T6340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.835253][ T6340] team0: Port device team_slave_0 added [ 143.837283][ T6340] team0: Port device team_slave_1 added [ 144.206584][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.206596][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.206610][ T6340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.208651][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.208664][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.208681][ T6340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.471100][ T6340] hsr_slave_0: entered promiscuous mode [ 144.471848][ T6340] hsr_slave_1: entered promiscuous mode [ 145.997800][ T6340] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.026812][ T6340] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.067948][ T6340] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.106325][ T6340] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.285468][ T6340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.320667][ T6340] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.335514][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.337684][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.365096][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.365232][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.681306][ T6340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.736983][ T6340] veth0_vlan: entered promiscuous mode [ 146.752632][ T6340] veth1_vlan: entered promiscuous mode [ 146.797747][ T6340] veth0_macvtap: entered promiscuous mode [ 146.802861][ T6340] veth1_macvtap: entered promiscuous mode [ 146.837029][ T6340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.855582][ T6340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.874204][ T3871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.880673][ T3871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.881092][ T3871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.881127][ T3871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.647790][ T3523] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.885034][ T3523] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.125100][ T3523] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.193818][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.193836][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.300585][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.300605][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/25 11:36:40 executed programs: 0 [ 148.589475][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.603474][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.604798][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.610038][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.610696][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.689790][ T3523] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.103775][ T6475] chnl_net:caif_netlink_parms(): no params data found [ 149.515660][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.515850][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.516039][ T6475] bridge_slave_0: entered allmulticast mode [ 149.518585][ T6475] bridge_slave_0: entered promiscuous mode [ 149.552443][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.552642][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.552838][ T6475] bridge_slave_1: entered allmulticast mode [ 149.579724][ T6475] bridge_slave_1: entered promiscuous mode [ 149.778326][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.782264][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.950613][ T6475] team0: Port device team_slave_0 added [ 149.954572][ T6475] team0: Port device team_slave_1 added [ 150.129258][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.129276][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.129299][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.132548][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.132562][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.132587][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.591652][ T6475] hsr_slave_0: entered promiscuous mode [ 150.592884][ T6475] hsr_slave_1: entered promiscuous mode [ 150.597678][ T6475] debugfs: 'hsr0' already exists in 'hsr' [ 150.597788][ T6475] Cannot create hsr debugfs directory [ 150.623352][ T61] Bluetooth: hci0: command tx timeout [ 150.878204][ T3523] bridge_slave_1: left allmulticast mode [ 150.878224][ T3523] bridge_slave_1: left promiscuous mode [ 150.878362][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.944292][ T3523] bridge_slave_0: left allmulticast mode [ 150.944312][ T3523] bridge_slave_0: left promiscuous mode [ 150.944811][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.614006][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.663762][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.703556][ T61] Bluetooth: hci0: command tx timeout [ 152.705435][ T3523] bond0 (unregistering): Released all slaves [ 153.041185][ T3523] hsr_slave_0: left promiscuous mode [ 153.073274][ T3523] hsr_slave_1: left promiscuous mode [ 153.074216][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.074239][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.114155][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.114182][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.196291][ T3523] veth1_macvtap: left promiscuous mode [ 153.196395][ T3523] veth0_macvtap: left promiscuous mode [ 153.196649][ T3523] veth1_vlan: left promiscuous mode [ 153.196817][ T3523] veth0_vlan: left promiscuous mode [ 154.783351][ T61] Bluetooth: hci0: command tx timeout [ 155.213731][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 155.424122][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 156.863454][ T61] Bluetooth: hci0: command tx timeout [ 158.395217][ T6475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 158.428560][ T6475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 158.476407][ T6475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 158.508670][ T6475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.857766][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.878517][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.900660][ T3871] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.900860][ T3871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.925256][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.925340][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.796394][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.835216][ T6475] veth0_vlan: entered promiscuous mode [ 159.840593][ T6475] veth1_vlan: entered promiscuous mode [ 159.876636][ T6475] veth0_macvtap: entered promiscuous mode [ 159.881344][ T6475] veth1_macvtap: entered promiscuous mode [ 159.896098][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.908305][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.927604][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.927825][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.927857][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.927882][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.105403][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.105423][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.141541][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.141561][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/25 11:36:51 executed programs: 2 [ 160.525683][ T6609] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 160.687778][ T6609] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.692177][ T6609] usb 1-1: config 131 interface 0 altsetting 67 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 160.692198][ T6609] usb 1-1: config 131 interface 0 has no altsetting 0 [ 160.724590][ T6609] usb 1-1: New USB device found, idVendor=2040, idProduct=200a, bcdDevice=27.2a [ 160.724616][ T6609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.724630][ T6609] usb 1-1: Product: syz [ 160.724640][ T6609] usb 1-1: Manufacturer: syz [ 160.724648][ T6609] usb 1-1: SerialNumber: syz [ 160.959027][ T6609] smsusb:smsusb_probe: board id=9, interface number 0 [ 160.976981][ T6609] smsusb:siano_media_device_register: media controller created [ 160.980013][ T6609] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 160.980027][ T6609] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 160.980074][ T6609] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 160.982361][ T6609] ------------[ cut here ]------------ [ 160.982374][ T6609] WARNING: mm/slub.c:6789 at free_large_kmalloc+0xa3/0x150, CPU#0: kworker/0:5/6609 [ 160.982406][ T6609] Modules linked in: [ 160.982432][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.982443][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.982451][ T6609] Workqueue: usb_hub_wq hub_event [ 160.982468][ T6609] RIP: 0010:free_large_kmalloc+0xa3/0x150 [ 160.982484][ T6609] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a4 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 6e ba fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 b9 08 e2 8c 5b 41 5e 5d e9 27 b5 10 ff [ 160.982492][ T6609] RSP: 0018:ffffc90003f0eac0 EFLAGS: 00010206 [ 160.982500][ T6609] RAX: 00000000ff000000 RBX: ffffea0001683880 RCX: ffff8880337c3c01 [ 160.982509][ T6609] RDX: 0000000000000000 RSI: ffff88805a0e2000 RDI: ffffea0001683880 [ 160.982516][ T6609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.982521][ T6609] R10: dffffc0000000000 R11: ffffed1005460741 R12: 1ffff110081d0e82 [ 160.982529][ T6609] R13: 0000000000000000 R14: ffff88802a303a60 R15: dffffc0000000000 [ 160.982536][ T6609] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 160.982543][ T6609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.982550][ T6609] CR2: 00007ffecdfa8cc8 CR3: 000000003b4d2000 CR4: 00000000003526f0 [ 160.982559][ T6609] Call Trace: [ 160.982566][ T6609] [ 160.982572][ T6609] usb_free_urb+0xd0/0x120 [ 160.982584][ T6609] smsusb_term_device+0x1d7/0x3e0 [ 160.982600][ T6609] smsusb_probe+0x1a20/0x21f0 [ 160.982618][ T6609] ? __pfx_smsusb_probe+0x10/0x10 [ 160.982631][ T6609] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 160.982645][ T6609] ? rt_spin_unlock+0x150/0x200 [ 160.982664][ T6609] ? __pm_runtime_set_status+0x743/0xa20 [ 160.982679][ T6609] usb_probe_interface+0x668/0xc90 [ 160.982699][ T6609] ? __pfx_usb_probe_interface+0x10/0x10 [ 160.982712][ T6609] really_probe+0x26d/0xad0 [ 160.982728][ T6609] __driver_probe_device+0x18c/0x320 [ 160.982741][ T6609] driver_probe_device+0x4f/0x240 [ 160.982754][ T6609] __device_attach_driver+0x279/0x430 [ 160.982768][ T6609] bus_for_each_drv+0x254/0x2e0 [ 160.982783][ T6609] ? __pfx___device_attach_driver+0x10/0x10 [ 160.982794][ T6609] ? __pfx_bus_for_each_drv+0x10/0x10 [ 160.982809][ T6609] ? rt_spin_unlock+0x161/0x200 [ 160.982825][ T6609] __device_attach+0x2bb/0x430 [ 160.982837][ T6609] ? __pfx___device_attach+0x10/0x10 [ 160.982849][ T6609] ? rt_spin_unlock+0x161/0x200 [ 160.982865][ T6609] device_initial_probe+0xa1/0xd0 [ 160.982877][ T6609] bus_probe_device+0x12d/0x220 [ 160.982890][ T6609] ? device_add+0x726/0xb80 [ 160.982901][ T6609] device_add+0x7b6/0xb80 [ 160.982913][ T6609] usb_set_configuration+0x1a87/0x2110 [ 160.982939][ T6609] usb_generic_driver_probe+0x8d/0x150 [ 160.982954][ T6609] usb_probe_device+0x1c4/0x3c0 [ 160.982969][ T6609] ? __pfx_usb_probe_device+0x10/0x10 [ 160.982981][ T6609] really_probe+0x26d/0xad0 [ 160.982996][ T6609] __driver_probe_device+0x18c/0x320 [ 160.983009][ T6609] driver_probe_device+0x4f/0x240 [ 160.983025][ T6609] __device_attach_driver+0x279/0x430 [ 160.983039][ T6609] bus_for_each_drv+0x254/0x2e0 [ 160.983053][ T6609] ? __pfx___device_attach_driver+0x10/0x10 [ 160.983065][ T6609] ? __pfx_bus_for_each_drv+0x10/0x10 [ 160.983079][ T6609] ? rt_spin_unlock+0x161/0x200 [ 160.983095][ T6609] __device_attach+0x2bb/0x430 [ 160.983175][ T6609] ? __pfx___device_attach+0x10/0x10 [ 160.983195][ T6609] ? rt_spin_unlock+0x161/0x200 [ 160.983223][ T6609] device_initial_probe+0xa1/0xd0 [ 160.983244][ T6609] bus_probe_device+0x12d/0x220 [ 160.983274][ T6609] ? device_add+0x726/0xb80 [ 160.983294][ T6609] device_add+0x7b6/0xb80 [ 160.983315][ T6609] usb_new_device+0xa29/0x1710 [ 160.983345][ T6609] ? __pfx_usb_new_device+0x10/0x10 [ 160.983372][ T6609] hub_event+0x29de/0x4f30 [ 160.983441][ T6609] ? __pfx_hub_event+0x10/0x10 [ 160.983464][ T6609] ? process_scheduled_works+0x9ef/0x1770 [ 160.983492][ T6609] ? process_scheduled_works+0x9ef/0x1770 [ 160.983510][ T6609] ? process_scheduled_works+0x9ef/0x1770 [ 160.983532][ T6609] process_scheduled_works+0xad1/0x1770 [ 160.983578][ T6609] ? __pfx_process_scheduled_works+0x10/0x10 [ 160.983597][ T6609] ? do_raw_spin_lock+0x121/0x290 [ 160.983632][ T6609] worker_thread+0x8a0/0xda0 [ 160.983664][ T6609] ? __kthread_parkme+0x7b/0x200 [ 160.983696][ T6609] kthread+0x711/0x8a0 [ 160.983724][ T6609] ? __pfx_worker_thread+0x10/0x10 [ 160.983745][ T6609] ? __pfx_kthread+0x10/0x10 [ 160.983768][ T6609] ? rt_spin_unlock+0x150/0x200 [ 160.983796][ T6609] ? rt_spin_unlock+0x161/0x200 [ 160.983817][ T6609] ? __pfx_kthread+0x10/0x10 [ 160.983842][ T6609] ret_from_fork+0x510/0xa50 [ 160.983864][ T6609] ? __pfx_ret_from_fork+0x10/0x10 [ 160.983882][ T6609] ? __switch_to+0xc9e/0x1480 [ 160.983913][ T6609] ? __pfx_kthread+0x10/0x10 [ 160.983937][ T6609] ret_from_fork_asm+0x1a/0x30 [ 160.983977][ T6609] [ 160.983993][ T6609] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 160.984006][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.984026][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.984038][ T6609] Workqueue: usb_hub_wq hub_event [ 160.984059][ T6609] Call Trace: [ 160.984066][ T6609] [ 160.984073][ T6609] vpanic+0x1e0/0x670 [ 160.984102][ T6609] panic+0xb9/0xc0 [ 160.984126][ T6609] ? __pfx_panic+0x10/0x10 [ 160.984161][ T6609] ? ret_from_fork_asm+0x1a/0x30 [ 160.984193][ T6609] __warn+0x317/0x4b0 [ 160.984216][ T6609] ? free_large_kmalloc+0xa3/0x150 [ 160.984246][ T6609] ? free_large_kmalloc+0xa3/0x150 [ 160.984275][ T6609] __report_bug+0x288/0x500 [ 160.984302][ T6609] ? bus_for_each_drv+0x254/0x2e0 [ 160.984326][ T6609] ? __device_attach+0x2bb/0x430 [ 160.984343][ T6609] ? device_initial_probe+0xa1/0xd0 [ 160.984361][ T6609] ? free_large_kmalloc+0xa3/0x150 [ 160.984393][ T6609] ? __pfx___report_bug+0x10/0x10 [ 160.984417][ T6609] ? bus_probe_device+0x12d/0x220 [ 160.984447][ T6609] ? do_raw_spin_lock+0x121/0x290 [ 160.984478][ T6609] ? free_large_kmalloc+0xa3/0x150 [ 160.984503][ T6609] report_bug+0x16a/0x220 [ 160.984530][ T6609] ? free_large_kmalloc+0xa3/0x150 [ 160.984552][ T6609] ? free_large_kmalloc+0xa5/0x150 [ 160.984576][ T6609] handle_bug+0x98/0x200 [ 160.984598][ T6609] exc_invalid_op+0x1a/0x50 [ 160.984618][ T6609] asm_exc_invalid_op+0x1a/0x20 [ 160.984633][ T6609] RIP: 0010:free_large_kmalloc+0xa3/0x150 [ 160.984657][ T6609] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a4 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 6e ba fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 b9 08 e2 8c 5b 41 5e 5d e9 27 b5 10 ff [ 160.984670][ T6609] RSP: 0018:ffffc90003f0eac0 EFLAGS: 00010206 [ 160.984685][ T6609] RAX: 00000000ff000000 RBX: ffffea0001683880 RCX: ffff8880337c3c01 [ 160.984699][ T6609] RDX: 0000000000000000 RSI: ffff88805a0e2000 RDI: ffffea0001683880 [ 160.984710][ T6609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.984720][ T6609] R10: dffffc0000000000 R11: ffffed1005460741 R12: 1ffff110081d0e82 [ 160.984732][ T6609] R13: 0000000000000000 R14: ffff88802a303a60 R15: dffffc0000000000 [ 160.984759][ T6609] usb_free_urb+0xd0/0x120 [ 160.984778][ T6609] smsusb_term_device+0x1d7/0x3e0 [ 160.984808][ T6609] smsusb_probe+0x1a20/0x21f0 [ 160.984840][ T6609] ? __pfx_smsusb_probe+0x10/0x10 [ 160.984861][ T6609] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 160.984886][ T6609] ? rt_spin_unlock+0x150/0x200 [ 160.984919][ T6609] ? __pm_runtime_set_status+0x743/0xa20 [ 160.984947][ T6609] usb_probe_interface+0x668/0xc90 [ 160.984984][ T6609] ? __pfx_usb_probe_interface+0x10/0x10 [ 160.985008][ T6609] really_probe+0x26d/0xad0 [ 160.985037][ T6609] __driver_probe_device+0x18c/0x320 [ 160.985062][ T6609] driver_probe_device+0x4f/0x240 [ 160.985088][ T6609] __device_attach_driver+0x279/0x430 [ 160.985114][ T6609] bus_for_each_drv+0x254/0x2e0 [ 160.985142][ T6609] ? __pfx___device_attach_driver+0x10/0x10 [ 160.985165][ T6609] ? __pfx_bus_for_each_drv+0x10/0x10 [ 160.985191][ T6609] ? rt_spin_unlock+0x161/0x200 [ 160.985222][ T6609] __device_attach+0x2bb/0x430 [ 160.985246][ T6609] ? __pfx___device_attach+0x10/0x10 [ 160.985274][ T6609] ? rt_spin_unlock+0x161/0x200 [ 160.985306][ T6609] device_initial_probe+0xa1/0xd0 [ 160.985330][ T6609] bus_probe_device+0x12d/0x220 [ 160.985355][ T6609] ? device_add+0x726/0xb80 [ 160.985376][ T6609] device_add+0x7b6/0xb80 [ 160.985400][ T6609] usb_set_configuration+0x1a87/0x2110 [ 160.985453][ T6609] usb_generic_driver_probe+0x8d/0x150 [ 160.985481][ T6609] usb_probe_device+0x1c4/0x3c0 [ 160.985510][ T6609] ? __pfx_usb_probe_device+0x10/0x10 [ 160.985534][ T6609] really_probe+0x26d/0xad0 [ 160.985563][ T6609] __driver_probe_device+0x18c/0x320 [ 160.985588][ T6609] driver_probe_device+0x4f/0x240 [ 160.985613][ T6609] __device_attach_driver+0x279/0x430 [ 160.985640][ T6609] bus_for_each_drv+0x254/0x2e0 [ 160.985669][ T6609] ? __pfx___device_attach_driver+0x10/0x10 [ 160.985691][ T6609] ? __pfx_bus_for_each_drv+0x10/0x10 [ 160.985718][ T6609] ? rt_spin_unlock+0x161/0x200 [ 160.985750][ T6609] __device_attach+0x2bb/0x430 [ 160.985774][ T6609] ? __pfx___device_attach+0x10/0x10 [ 160.985796][ T6609] ? rt_spin_unlock+0x161/0x200 [ 160.985827][ T6609] device_initial_probe+0xa1/0xd0 [ 160.985851][ T6609] bus_probe_device+0x12d/0x220 [ 160.985876][ T6609] ? device_add+0x726/0xb80 [ 160.985896][ T6609] device_add+0x7b6/0xb80 [ 160.985920][ T6609] usb_new_device+0xa29/0x1710 [ 160.985953][ T6609] ? __pfx_usb_new_device+0x10/0x10 [ 160.985984][ T6609] hub_event+0x29de/0x4f30 [ 160.986057][ T6609] ? __pfx_hub_event+0x10/0x10 [ 160.986081][ T6609] ? process_scheduled_works+0x9ef/0x1770 [ 160.986109][ T6609] ? process_scheduled_works+0x9ef/0x1770 [ 160.986126][ T6609] ? process_scheduled_works+0x9ef/0x1770 [ 160.986148][ T6609] process_scheduled_works+0xad1/0x1770 [ 160.986193][ T6609] ? __pfx_process_scheduled_works+0x10/0x10 [ 160.986210][ T6609] ? do_raw_spin_lock+0x121/0x290 [ 160.986243][ T6609] worker_thread+0x8a0/0xda0 [ 160.986271][ T6609] ? __kthread_parkme+0x7b/0x200 [ 160.986288][ T6609] kthread+0x711/0x8a0 [ 160.986303][ T6609] ? __pfx_worker_thread+0x10/0x10 [ 160.986314][ T6609] ? __pfx_kthread+0x10/0x10 [ 160.986326][ T6609] ? rt_spin_unlock+0x150/0x200 [ 160.986341][ T6609] ? rt_spin_unlock+0x161/0x200 [ 160.986353][ T6609] ? __pfx_kthread+0x10/0x10 [ 160.986367][ T6609] ret_from_fork+0x510/0xa50 [ 160.986379][ T6609] ? __pfx_ret_from_fork+0x10/0x10 [ 160.986389][ T6609] ? __switch_to+0xc9e/0x1480 [ 160.986406][ T6609] ? __pfx_kthread+0x10/0x10 [ 160.986420][ T6609] ret_from_fork_asm+0x1a/0x30 [ 160.986442][ T6609] [ 160.986992][ T6609] Kernel Offset: disabled