Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. 2026/03/22 00:52:59 parsed 1 programs [ 86.933354][ T5843] cgroup: Unknown subsys name 'net' [ 87.106223][ T5843] cgroup: Unknown subsys name 'cpuset' [ 87.120335][ T5843] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.867576][ T5843] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.894376][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.116791][ T10] cfg80211: failed to load regulatory.db [ 92.989182][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.997301][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.033824][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.042641][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.119705][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 95.232411][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.241502][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.249658][ T5912] bridge_slave_0: entered allmulticast mode [ 95.257277][ T5912] bridge_slave_0: entered promiscuous mode [ 95.267803][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.275178][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.282497][ T5912] bridge_slave_1: entered allmulticast mode [ 95.291005][ T5912] bridge_slave_1: entered promiscuous mode [ 95.336293][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.350240][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.392033][ T5912] team0: Port device team_slave_0 added [ 95.401609][ T5912] team0: Port device team_slave_1 added [ 95.433570][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.440595][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.466730][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.480838][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.487901][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.514812][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.561658][ T5912] hsr_slave_0: entered promiscuous mode [ 95.569425][ T5912] hsr_slave_1: entered promiscuous mode [ 95.746584][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.760238][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.771598][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.783482][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.822710][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.830231][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.837915][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.845242][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.918107][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.942561][ T4133] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.951124][ T4133] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.968028][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.984296][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.991454][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.009139][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.016304][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.219809][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.292901][ T5912] veth0_vlan: entered promiscuous mode [ 96.307442][ T5912] veth1_vlan: entered promiscuous mode [ 96.345586][ T5912] veth0_macvtap: entered promiscuous mode [ 96.357797][ T5912] veth1_macvtap: entered promiscuous mode [ 96.387868][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.406737][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.426010][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.436014][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.447004][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.456167][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.616839][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.682316][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.750358][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.865634][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.015324][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.025742][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.034772][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.043265][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.051245][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/03/22 00:53:12 executed programs: 0 [ 97.607351][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.616727][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.624769][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.634295][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.642970][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.807045][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 97.891536][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.899092][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.906326][ T5953] bridge_slave_0: entered allmulticast mode [ 97.914576][ T5953] bridge_slave_0: entered promiscuous mode [ 97.923912][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.931559][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.939159][ T5953] bridge_slave_1: entered allmulticast mode [ 97.946629][ T5953] bridge_slave_1: entered promiscuous mode [ 97.984148][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.997967][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.038424][ T5953] team0: Port device team_slave_0 added [ 98.049693][ T5953] team0: Port device team_slave_1 added [ 98.082661][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.090343][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.117626][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.132617][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.139634][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.166899][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.225896][ T5953] hsr_slave_0: entered promiscuous mode [ 98.232908][ T5953] hsr_slave_1: entered promiscuous mode [ 98.241594][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 98.247477][ T5953] Cannot create hsr debugfs directory [ 99.464207][ T35] bridge_slave_1: left allmulticast mode [ 99.475662][ T35] bridge_slave_1: left promiscuous mode [ 99.483064][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.510649][ T35] bridge_slave_0: left allmulticast mode [ 99.516352][ T35] bridge_slave_0: left promiscuous mode [ 99.523608][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.709948][ T51] Bluetooth: hci0: command tx timeout [ 99.757400][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.768885][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.780182][ T35] bond0 (unregistering): Released all slaves [ 99.952437][ T35] hsr_slave_0: left promiscuous mode [ 99.963881][ T35] hsr_slave_1: left promiscuous mode [ 99.971680][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.979347][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.987913][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.997535][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.016341][ T35] veth1_macvtap: left promiscuous mode [ 100.022758][ T35] veth0_macvtap: left promiscuous mode [ 100.028448][ T35] veth1_vlan: left promiscuous mode [ 100.034286][ T35] veth0_vlan: left promiscuous mode [ 100.395724][ T35] team0 (unregistering): Port device team_slave_1 removed [ 100.417916][ T35] team0 (unregistering): Port device team_slave_0 removed [ 100.907076][ T5953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.935621][ T5953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.952654][ T5953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.977234][ T5953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.569892][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.606543][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.628465][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.635761][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.659610][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.666866][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.791543][ T51] Bluetooth: hci0: command tx timeout [ 101.924690][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.982366][ T5953] veth0_vlan: entered promiscuous mode [ 101.996446][ T5953] veth1_vlan: entered promiscuous mode [ 102.034402][ T5953] veth0_macvtap: entered promiscuous mode [ 102.046731][ T5953] veth1_macvtap: entered promiscuous mode [ 102.072500][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.091462][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.111485][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.121094][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.136057][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.145419][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.215586][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.224229][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.260118][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.270964][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.559217][ T5845] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.721484][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 102.732626][ T5845] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 102.742391][ T5845] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 202 [ 102.754889][ T5845] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 102.764258][ T5845] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 102.772856][ T5845] usb 1-1: Manufacturer: syz [ 102.784156][ T5845] usb 1-1: config 0 descriptor?? [ 102.791958][ T6012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.803856][ T5845] smsusb:smsusb_probe: board id=9, interface number 0 [ 102.814601][ T5845] smsusb:siano_media_device_register: media controller created [ 102.824761][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.832143][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.839423][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.846825][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.854214][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.861494][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.868758][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.879440][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.887676][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.894932][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.903688][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.910941][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.918167][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.925395][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.932779][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.940023][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.948288][ T5845] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 102.957121][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 102.964638][ T5845] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 102.972373][ T5845] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 102.980068][ T5845] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 102.991020][ T5845] ------------[ cut here ]------------ [ 102.996529][ T5845] !PageLargeKmalloc(page) [ 102.996540][ T5845] WARNING: mm/slub.c:6467 at free_large_kmalloc+0x9b/0x110, CPU#1: kworker/1:3/5845 [ 103.010993][ T5845] Modules linked in: [ 103.015323][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 103.024788][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.034901][ T5845] Workqueue: usb_hub_wq hub_event [ 103.040077][ T5845] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 103.045854][ T5845] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 dd fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 18 d3 f5 8d 5b 41 5e 5d e9 cf a9 03 ff [ 103.065610][ T5845] RSP: 0018:ffffc90003966b80 EFLAGS: 00010206 [ 103.071853][ T5845] RAX: 00000000ff000000 RBX: ffffea0001643880 RCX: ffff88807bf6db01 [ 103.080076][ T5845] RDX: 0000000000000000 RSI: ffff8880590e2000 RDI: ffffea0001643880 [ 103.088262][ T5845] RBP: 0000000000000000 R08: ffff888075479003 R09: 1ffff1100ea8f200 [ 103.096377][ T5845] R10: dffffc0000000000 R11: ffffed100ea8f201 R12: 1ffff1100ecc7882 [ 103.104851][ T5845] R13: ffff88801bb38d80 R14: ffff888075479060 R15: dffffc0000000000 [ 103.113245][ T5845] FS: 0000000000000000(0000) GS:ffff888125548000(0000) knlGS:0000000000000000 [ 103.122286][ T5845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.129196][ T5845] CR2: 000055ecb7a2bf20 CR3: 00000000790ec000 CR4: 00000000003526f0 [ 103.137324][ T5845] Call Trace: [ 103.140659][ T5845] [ 103.143627][ T5845] usb_free_urb+0xd0/0x120 [ 103.148090][ T5845] smsusb_term_device+0x1d7/0x3e0 [ 103.153304][ T5845] smsusb_probe+0x1aba/0x2280 [ 103.158018][ T5845] ? __pfx_smsusb_probe+0x10/0x10 [ 103.163154][ T5845] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 103.168786][ T5845] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 103.174634][ T5845] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 103.180332][ T5845] usb_probe_interface+0x659/0xc70 [ 103.185470][ T5845] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.191152][ T5845] really_probe+0x267/0xaf0 [ 103.195678][ T5845] __driver_probe_device+0x18c/0x320 [ 103.201016][ T5845] driver_probe_device+0x4f/0x240 [ 103.206058][ T5845] __device_attach_driver+0x279/0x430 [ 103.211764][ T5845] bus_for_each_drv+0x258/0x2f0 [ 103.216629][ T5845] ? __pfx___device_attach_driver+0x10/0x10 [ 103.222815][ T5845] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.228221][ T5845] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.233887][ T5845] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 103.240887][ T5845] __device_attach+0x2c5/0x450 [ 103.245731][ T5845] ? __pfx___device_attach+0x10/0x10 [ 103.251130][ T5845] ? _raw_spin_unlock+0x28/0x50 [ 103.256011][ T5845] device_initial_probe+0xa1/0xd0 [ 103.261100][ T5845] bus_probe_device+0x12a/0x220 [ 103.265970][ T5845] ? device_add+0x726/0xb70 [ 103.270534][ T5845] device_add+0x7b6/0xb70 [ 103.274901][ T5845] usb_set_configuration+0x1a87/0x2110 [ 103.280554][ T5845] usb_generic_driver_probe+0x8d/0x150 [ 103.286224][ T5845] usb_probe_device+0x1c4/0x3b0 [ 103.291159][ T5845] ? __pfx_usb_probe_device+0x10/0x10 [ 103.296562][ T5845] really_probe+0x267/0xaf0 [ 103.301151][ T5845] __driver_probe_device+0x18c/0x320 [ 103.306582][ T5845] driver_probe_device+0x4f/0x240 [ 103.312241][ T5845] __device_attach_driver+0x279/0x430 [ 103.317671][ T5845] bus_for_each_drv+0x258/0x2f0 [ 103.323175][ T5845] ? __pfx___device_attach_driver+0x10/0x10 [ 103.329169][ T5845] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.334568][ T5845] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.339916][ T5845] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 103.345750][ T5845] __device_attach+0x2c5/0x450 [ 103.350754][ T5845] ? __pfx___device_attach+0x10/0x10 [ 103.356130][ T5845] ? _raw_spin_unlock+0x28/0x50 [ 103.361153][ T5845] device_initial_probe+0xa1/0xd0 [ 103.366305][ T5845] bus_probe_device+0x12a/0x220 [ 103.371268][ T5845] ? device_add+0x726/0xb70 [ 103.375822][ T5845] device_add+0x7b6/0xb70 [ 103.380253][ T5845] usb_new_device+0xa08/0x16f0 [ 103.385134][ T5845] ? __pfx_usb_new_device+0x10/0x10 [ 103.390656][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.395898][ T5845] hub_event+0x2a1c/0x4f30 [ 103.400452][ T5845] ? __pfx_hub_event+0x10/0x10 [ 103.405347][ T5845] ? process_one_work+0x8b7/0x1710 [ 103.410538][ T5845] ? process_one_work+0x8b7/0x1710 [ 103.416011][ T5845] process_one_work+0x9a3/0x1710 [ 103.421306][ T5845] ? __pfx_process_one_work+0x10/0x10 [ 103.426714][ T5845] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.431836][ T5845] worker_thread+0xba8/0x11e0 [ 103.436545][ T5845] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 103.442403][ T5845] ? __kthread_parkme+0x7a/0x1f0 [ 103.447366][ T5845] ? __kthread_parkme+0x19c/0x1f0 [ 103.452614][ T5845] kthread+0x388/0x470 [ 103.456743][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 103.461973][ T5845] ? __pfx_kthread+0x10/0x10 [ 103.466891][ T5845] ret_from_fork+0x51e/0xb90 [ 103.471886][ T5845] ? __pfx_ret_from_fork+0x10/0x10 [ 103.477035][ T5845] ? __switch_to+0xc7d/0x1420 [ 103.481889][ T5845] ? __pfx_kthread+0x10/0x10 [ 103.486604][ T5845] ret_from_fork_asm+0x1a/0x30 [ 103.491662][ T5845] [ 103.494705][ T5845] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.502161][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 103.511537][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.521920][ T5845] Workqueue: usb_hub_wq hub_event [ 103.526984][ T5845] Call Trace: [ 103.530360][ T5845] [ 103.533387][ T5845] vpanic+0x56c/0xa60 [ 103.537562][ T5845] ? __pfx__printk+0x10/0x10 [ 103.542175][ T5845] ? __pfx_vpanic+0x10/0x10 [ 103.546690][ T5845] ? is_bpf_text_address+0x292/0x2b0 [ 103.552076][ T5845] ? is_bpf_text_address+0x26/0x2b0 [ 103.557292][ T5845] panic+0xc5/0xd0 [ 103.561025][ T5845] ? __pfx_panic+0x10/0x10 [ 103.565462][ T5845] ? ret_from_fork_asm+0x1a/0x30 [ 103.570503][ T5845] __warn+0x315/0x4c0 [ 103.574497][ T5845] ? free_large_kmalloc+0x9b/0x110 [ 103.579616][ T5845] ? free_large_kmalloc+0x9b/0x110 [ 103.584735][ T5845] __report_bug+0x29a/0x540 [ 103.589245][ T5845] ? device_initial_probe+0xa1/0xd0 [ 103.594467][ T5845] ? bus_probe_device+0x12a/0x220 [ 103.599587][ T5845] ? device_add+0x7b6/0xb70 [ 103.604206][ T5845] ? free_large_kmalloc+0x9b/0x110 [ 103.609322][ T5845] ? __pfx___report_bug+0x10/0x10 [ 103.614360][ T5845] ? usb_new_device+0xa08/0x16f0 [ 103.619308][ T5845] ? hub_event+0x2a1c/0x4f30 [ 103.623994][ T5845] ? process_one_work+0x9a3/0x1710 [ 103.629216][ T5845] ? smscore_unregister_device+0x651/0x780 [ 103.635308][ T5845] ? free_large_kmalloc+0x9b/0x110 [ 103.640597][ T5845] report_bug+0x16a/0x220 [ 103.645027][ T5845] ? free_large_kmalloc+0x9b/0x110 [ 103.650229][ T5845] ? free_large_kmalloc+0x9d/0x110 [ 103.655437][ T5845] handle_bug+0x9c/0x200 [ 103.659702][ T5845] exc_invalid_op+0x1a/0x50 [ 103.664307][ T5845] asm_exc_invalid_op+0x1a/0x20 [ 103.669162][ T5845] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 103.674886][ T5845] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 dd fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 18 d3 f5 8d 5b 41 5e 5d e9 cf a9 03 ff [ 103.694845][ T5845] RSP: 0018:ffffc90003966b80 EFLAGS: 00010206 [ 103.700922][ T5845] RAX: 00000000ff000000 RBX: ffffea0001643880 RCX: ffff88807bf6db01 [ 103.708917][ T5845] RDX: 0000000000000000 RSI: ffff8880590e2000 RDI: ffffea0001643880 [ 103.716995][ T5845] RBP: 0000000000000000 R08: ffff888075479003 R09: 1ffff1100ea8f200 [ 103.724968][ T5845] R10: dffffc0000000000 R11: ffffed100ea8f201 R12: 1ffff1100ecc7882 [ 103.732945][ T5845] R13: ffff88801bb38d80 R14: ffff888075479060 R15: dffffc0000000000 [ 103.740940][ T5845] usb_free_urb+0xd0/0x120 [ 103.745456][ T5845] smsusb_term_device+0x1d7/0x3e0 [ 103.750493][ T5845] smsusb_probe+0x1aba/0x2280 [ 103.755198][ T5845] ? __pfx_smsusb_probe+0x10/0x10 [ 103.760323][ T5845] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 103.765885][ T5845] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 103.771794][ T5845] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 103.777454][ T5845] usb_probe_interface+0x659/0xc70 [ 103.782578][ T5845] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.788305][ T5845] really_probe+0x267/0xaf0 [ 103.793080][ T5845] __driver_probe_device+0x18c/0x320 [ 103.798381][ T5845] driver_probe_device+0x4f/0x240 [ 103.803504][ T5845] __device_attach_driver+0x279/0x430 [ 103.808895][ T5845] bus_for_each_drv+0x258/0x2f0 [ 103.813846][ T5845] ? __pfx___device_attach_driver+0x10/0x10 [ 103.819940][ T5845] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.825321][ T5845] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.830553][ T5845] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 103.836377][ T5845] __device_attach+0x2c5/0x450 [ 103.841157][ T5845] ? __pfx___device_attach+0x10/0x10 [ 103.846457][ T5845] ? _raw_spin_unlock+0x28/0x50 [ 103.851404][ T5845] device_initial_probe+0xa1/0xd0 [ 103.856449][ T5845] bus_probe_device+0x12a/0x220 [ 103.861315][ T5845] ? device_add+0x726/0xb70 [ 103.865834][ T5845] device_add+0x7b6/0xb70 [ 103.870280][ T5845] usb_set_configuration+0x1a87/0x2110 [ 103.875787][ T5845] usb_generic_driver_probe+0x8d/0x150 [ 103.881264][ T5845] usb_probe_device+0x1c4/0x3b0 [ 103.886132][ T5845] ? __pfx_usb_probe_device+0x10/0x10 [ 103.891513][ T5845] really_probe+0x267/0xaf0 [ 103.896041][ T5845] __driver_probe_device+0x18c/0x320 [ 103.901351][ T5845] driver_probe_device+0x4f/0x240 [ 103.906572][ T5845] __device_attach_driver+0x279/0x430 [ 103.911979][ T5845] bus_for_each_drv+0x258/0x2f0 [ 103.916874][ T5845] ? __pfx___device_attach_driver+0x10/0x10 [ 103.923338][ T5845] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.928760][ T5845] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.934002][ T5845] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 103.939830][ T5845] __device_attach+0x2c5/0x450 [ 103.944617][ T5845] ? __pfx___device_attach+0x10/0x10 [ 103.949915][ T5845] ? _raw_spin_unlock+0x28/0x50 [ 103.954776][ T5845] device_initial_probe+0xa1/0xd0 [ 103.959827][ T5845] bus_probe_device+0x12a/0x220 [ 103.964687][ T5845] ? device_add+0x726/0xb70 [ 103.969199][ T5845] device_add+0x7b6/0xb70 [ 103.973544][ T5845] usb_new_device+0xa08/0x16f0 [ 103.978342][ T5845] ? __pfx_usb_new_device+0x10/0x10 [ 103.983550][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.988946][ T5845] hub_event+0x2a1c/0x4f30 [ 103.993418][ T5845] ? __pfx_hub_event+0x10/0x10 [ 103.998190][ T5845] ? process_one_work+0x8b7/0x1710 [ 104.003323][ T5845] ? process_one_work+0x8b7/0x1710 [ 104.008444][ T5845] process_one_work+0x9a3/0x1710 [ 104.013411][ T5845] ? __pfx_process_one_work+0x10/0x10 [ 104.018798][ T5845] ? do_raw_spin_lock+0x12b/0x2f0 [ 104.023845][ T5845] worker_thread+0xba8/0x11e0 [ 104.028547][ T5845] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 104.034533][ T5845] ? __kthread_parkme+0x7a/0x1f0 [ 104.039476][ T5845] ? __kthread_parkme+0x19c/0x1f0 [ 104.044513][ T5845] kthread+0x388/0x470 [ 104.048585][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 104.053702][ T5845] ? __pfx_kthread+0x10/0x10 [ 104.058309][ T5845] ret_from_fork+0x51e/0xb90 [ 104.062912][ T5845] ? __pfx_ret_from_fork+0x10/0x10 [ 104.068032][ T5845] ? __switch_to+0xc7d/0x1420 [ 104.072724][ T5845] ? __pfx_kthread+0x10/0x10 [ 104.077415][ T5845] ret_from_fork_asm+0x1a/0x30 [ 104.082198][ T5845] [ 104.085859][ T5845] Kernel Offset: disabled [ 104.090266][ T5845] Rebooting in 86400 seconds..