[ 92.013038][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts.
2026/04/17 22:54:26 parsed 1 programs
[ 100.312977][ T5838] cgroup: Unknown subsys name 'net'
[ 100.533821][ T5838] cgroup: Unknown subsys name 'cpuset'
[ 100.588912][ T5838] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 102.572226][ T5838] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 107.151943][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 107.153752][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 107.154878][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 107.156141][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 107.156770][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 111.563813][ T5915] chnl_net:caif_netlink_parms(): no params data found
[ 111.870241][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.871985][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.872210][ T5915] bridge_slave_0: entered allmulticast mode
[ 111.874878][ T5915] bridge_slave_0: entered promiscuous mode
[ 111.910794][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.911129][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.912586][ T5915] bridge_slave_1: entered allmulticast mode
[ 111.915900][ T5915] bridge_slave_1: entered promiscuous mode
[ 111.994655][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.002241][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.062969][ T5915] team0: Port device team_slave_0 added
[ 112.066465][ T5915] team0: Port device team_slave_1 added
[ 112.126487][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.126501][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 112.126521][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.135674][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 112.135718][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 112.135795][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 112.346684][ T5915] hsr_slave_0: entered promiscuous mode
[ 112.354676][ T5915] hsr_slave_1: entered promiscuous mode
[ 112.924409][ T5915] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 112.978319][ T5915] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 112.981651][ T5915] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.044235][ T5915] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 113.049018][ T5915] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.089503][ T5915] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 113.091389][ T5915] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.137482][ T5915] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 113.372375][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.412962][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.456085][ T38] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.456275][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.497578][ T70] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.498090][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.810617][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 113.914610][ T5915] veth0_vlan: entered promiscuous mode
[ 113.933041][ T5915] veth1_vlan: entered promiscuous mode
[ 113.989456][ T5915] veth0_macvtap: entered promiscuous mode
[ 113.996338][ T5915] veth1_macvtap: entered promiscuous mode
[ 114.042880][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.075801][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.106291][ T1362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.134323][ T1362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.136618][ T1362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.136832][ T1362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.905018][ T1362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.146362][ T1463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.146392][ T1463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.292513][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.292535][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.003714][ T1362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/04/17 22:54:48 executed programs: 0
[ 116.903515][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 116.912434][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 116.934125][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 116.944165][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 116.946053][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 117.301836][ T1362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.530981][ T1362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.566750][ T5951] chnl_net:caif_netlink_parms(): no params data found
[ 117.715555][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.715972][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.716235][ T5951] bridge_slave_0: entered allmulticast mode
[ 117.735931][ T5951] bridge_slave_0: entered promiscuous mode
[ 117.750340][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.750777][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.751056][ T5951] bridge_slave_1: entered allmulticast mode
[ 117.753772][ T5951] bridge_slave_1: entered promiscuous mode
[ 117.863631][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 117.895460][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 117.984793][ T5951] team0: Port device team_slave_0 added
[ 118.015454][ T5951] team0: Port device team_slave_1 added
[ 118.440302][ T1362] bridge_slave_1: left allmulticast mode
[ 118.440387][ T1362] bridge_slave_1: left promiscuous mode
[ 118.481655][ T1362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.599764][ T1362] bridge_slave_0: left allmulticast mode
[ 118.599787][ T1362] bridge_slave_0: left promiscuous mode
[ 118.600074][ T1362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.051842][ T61] Bluetooth: hci0: command tx timeout
[ 119.349192][ T1362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 119.409083][ T1362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 119.430938][ T1362] bond0 (unregistering): Released all slaves
[ 119.471355][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 119.471369][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.471389][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 119.626671][ T5496] 8021q: adding VLAN 0 to HW filter on device eth1
[ 119.631632][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 119.631687][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.631782][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 119.828377][ T1362] hsr_slave_0: left promiscuous mode
[ 119.848388][ T1362] hsr_slave_1: left promiscuous mode
[ 119.849617][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 119.849668][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 119.892201][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 119.892225][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 119.949666][ T1362] veth1_macvtap: left promiscuous mode
[ 119.949821][ T1362] veth0_macvtap: left promiscuous mode
[ 119.950054][ T1362] veth1_vlan: left promiscuous mode
[ 119.950254][ T1362] veth0_vlan: left promiscuous mode
[ 120.699181][ T1362] team0 (unregistering): Port device team_slave_1 removed
[ 120.759048][ T1362] team0 (unregistering): Port device team_slave_0 removed
[ 121.039886][ T5951] hsr_slave_0: entered promiscuous mode
[ 121.042602][ T5951] hsr_slave_1: entered promiscuous mode
[ 121.128382][ T61] Bluetooth: hci0: command tx timeout
[ 121.750044][ T5496] 8021q: adding VLAN 0 to HW filter on device eth2
[ 123.196757][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 123.208351][ T61] Bluetooth: hci0: command tx timeout
[ 123.232668][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 123.233634][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 123.274592][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 123.275775][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 123.357878][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 123.367355][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 123.431222][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 123.907388][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0
[ 124.000600][ T5951] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.020126][ T70] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.020340][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 124.339794][ T70] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.339916][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.859268][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 124.933910][ T5951] veth0_vlan: entered promiscuous mode
[ 124.955365][ T5951] veth1_vlan: entered promiscuous mode
[ 125.013978][ T5951] veth0_macvtap: entered promiscuous mode
[ 125.026396][ T5951] veth1_macvtap: entered promiscuous mode
[ 125.060770][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 125.078177][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 125.101475][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.102963][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.103213][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.103255][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.289287][ T61] Bluetooth: hci0: command tx timeout
[ 125.520731][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.520752][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.586663][ T3591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.586685][ T3591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/17 22:54:56 executed programs: 2
[ 126.049147][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 126.220824][ T32] usb 1-1: Using ep0 maxpacket: 32
[ 126.235888][ T32] usb 1-1: config 7 has an invalid interface number: 124 but max is 2
[ 126.235916][ T32] usb 1-1: config 7 has an invalid interface number: 52 but max is 2
[ 126.235931][ T32] usb 1-1: config 7 has no interface number 1
[ 126.235942][ T32] usb 1-1: config 7 has no interface number 2
[ 126.235992][ T32] usb 1-1: config 7 interface 0 altsetting 163 bulk endpoint 0x85 has invalid maxpacket 8
[ 126.236010][ T32] usb 1-1: config 7 interface 0 altsetting 163 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 126.236031][ T32] usb 1-1: config 7 interface 124 has no altsetting 0
[ 126.236050][ T32] usb 1-1: config 7 interface 0 has no altsetting 0
[ 126.236062][ T32] usb 1-1: config 7 interface 52 has no altsetting 0
[ 126.242372][ T32] usb 1-1: New USB device found, idVendor=2040, idProduct=b900, bcdDevice=c1.59
[ 126.242462][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 126.242518][ T32] usb 1-1: Product: syz
[ 126.242560][ T32] usb 1-1: Manufacturer: syz
[ 126.242615][ T32] usb 1-1: SerialNumber: syz
[ 126.620750][ T32] smsusb:smsusb_probe: board id=8, interface number 124
[ 126.624887][ T32] smsusb:smsusb_probe: board id=8, interface number 0
[ 126.656728][ T32] smsusb:siano_media_device_register: media controller created
[ 126.666544][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.666639][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.666677][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.666717][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.666754][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.684573][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.688113][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.688252][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.688340][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.702606][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.702789][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.703284][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.703433][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.705867][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.705992][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.706179][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.718854][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.718922][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.767162][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.772125][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.772305][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.772452][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.773160][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.773757][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.773893][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.777125][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.777331][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.777485][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.794789][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.794936][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.806110][ T32] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[ 126.806188][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.806268][ T32] smsmdtv:smscore_set_device_mode: mode detect failed -22
[ 126.806281][ T32] smsmdtv:smscore_start_device: set device mode failed , rc -22
[ 126.806292][ T32] smsusb:smsusb_init_device: smscore_start_device(...) failed
[ 126.850475][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.850689][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.850850][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.851709][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.851864][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.866171][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[ 126.995002][ T32] ------------[ cut here ]------------
[ 126.995015][ T32] !PageLargeKmalloc(page)
[ 126.995027][ T32] WARNING: mm/slub.c:6471 at free_large_kmalloc+0x9b/0x110, CPU#1: kworker/1:0/32
[ 126.995071][ T32] Modules linked in:
[ 126.995112][ T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 126.995133][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 126.995145][ T32] Workqueue: usb_hub_wq hub_event
[ 126.995172][ T32] RIP: 0010:free_large_kmalloc+0x9b/0x110
[ 126.995205][ T32] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 96 c8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 6a 27 9b 8d 5b 41 5e 5d e9 0f 86 04 ff
[ 126.995222][ T32] RSP: 0018:ffffc90000a6eb80 EFLAGS: 00010206
[ 126.995240][ T32] RAX: 00000000ff000000 RBX: ffffea0001719880 RCX: 0000000000000001
[ 126.995255][ T32] RDX: 0000000000000000 RSI: ffff88805c662000 RDI: ffffea0001719880
[ 126.995271][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 126.995283][ T32] R10: dffffc0000000000 R11: ffffed10084886c1 R12: 1ffff11006d19a82
[ 126.995299][ T32] R13: ffff888037a7b100 R14: ffff888042443660 R15: dffffc0000000000
[ 126.995315][ T32] FS: 0000000000000000(0000) GS:ffff888125b62000(0000) knlGS:0000000000000000
[ 126.995354][ T32] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 126.995370][ T32] CR2: 00007f6b96c65980 CR3: 000000002b5f4000 CR4: 00000000003526f0
[ 126.995395][ T32] Call Trace:
[ 126.995403][ T32]
[ 126.995416][ T32] usb_free_urb+0xd0/0x120
[ 126.995445][ T32] smsusb_term_device+0x1d7/0x3e0
[ 126.995478][ T32] smsusb_probe+0x1aba/0x2280
[ 126.995523][ T32] ? __pfx_smsusb_probe+0x10/0x10
[ 126.995551][ T32] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 126.995596][ T32] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 126.995622][ T32] ? rt_spin_unlock+0x14f/0x200
[ 126.995651][ T32] ? rt_spin_unlock+0x160/0x200
[ 126.995681][ T32] ? __pm_runtime_set_status+0x99c/0xc70
[ 126.995726][ T32] usb_probe_interface+0x659/0xc70
[ 126.995773][ T32] ? __pfx_usb_probe_interface+0x10/0x10
[ 126.995804][ T32] really_probe+0x267/0xaf0
[ 126.995833][ T32] __driver_probe_device+0x1ef/0x380
[ 126.995872][ T32] driver_probe_device+0x4f/0x240
[ 126.995896][ T32] __device_attach_driver+0x279/0x430
[ 126.995937][ T32] bus_for_each_drv+0x25b/0x2f0
[ 126.995989][ T32] ? __pfx___device_attach_driver+0x10/0x10
[ 126.996023][ T32] ? __pfx_bus_for_each_drv+0x10/0x10
[ 126.996049][ T32] ? rt_spin_unlock+0x160/0x200
[ 126.996088][ T32] __device_attach+0x2c8/0x450
[ 126.996125][ T32] ? __pfx___device_attach+0x10/0x10
[ 126.996160][ T32] ? rt_spin_unlock+0x160/0x200
[ 126.996198][ T32] device_initial_probe+0xa1/0xd0
[ 126.996236][ T32] bus_probe_device+0x12d/0x220
[ 126.996269][ T32] device_add+0x7e9/0xbb0
[ 126.996305][ T32] usb_set_configuration+0x1a87/0x2110
[ 126.996369][ T32] usb_generic_driver_probe+0x8d/0x150
[ 126.996404][ T32] usb_probe_device+0x1c4/0x3b0
[ 126.996442][ T32] ? __pfx_usb_probe_device+0x10/0x10
[ 126.996473][ T32] really_probe+0x267/0xaf0
[ 126.996501][ T32] __driver_probe_device+0x1ef/0x380
[ 126.996540][ T32] driver_probe_device+0x4f/0x240
[ 126.996566][ T32] __device_attach_driver+0x279/0x430
[ 126.996615][ T32] bus_for_each_drv+0x25b/0x2f0
[ 126.996643][ T32] ? __pfx___device_attach_driver+0x10/0x10
[ 126.996679][ T32] ? __pfx_bus_for_each_drv+0x10/0x10
[ 126.996707][ T32] ? rt_spin_unlock+0x160/0x200
[ 126.996747][ T32] __device_attach+0x2c8/0x450
[ 126.996784][ T32] ? __pfx___device_attach+0x10/0x10
[ 126.996819][ T32] ? rt_spin_unlock+0x160/0x200
[ 126.996858][ T32] device_initial_probe+0xa1/0xd0
[ 126.996894][ T32] bus_probe_device+0x12d/0x220
[ 126.996925][ T32] device_add+0x7e9/0xbb0
[ 126.996961][ T32] usb_new_device+0x9f8/0x16e0
[ 126.997002][ T32] ? __pfx_usb_new_device+0x10/0x10
[ 126.997041][ T32] hub_event+0x2a49/0x4f60
[ 126.997128][ T32] ? __pfx_hub_event+0x10/0x10
[ 126.997159][ T32] ? process_one_work+0x8b7/0x1710
[ 126.997193][ T32] ? process_one_work+0x8b7/0x1710
[ 126.997217][ T32] process_one_work+0x9a3/0x1710
[ 126.997249][ T32] ? __pfx_process_one_work+0x10/0x10
[ 126.997262][ T32] ? do_raw_spin_lock+0x12b/0x2f0
[ 126.997292][ T32] worker_thread+0xba8/0x11e0
[ 126.997328][ T32] kthread+0x388/0x470
[ 126.997351][ T32] ? __pfx_worker_thread+0x10/0x10
[ 126.997367][ T32] ? __pfx_kthread+0x10/0x10
[ 126.997389][ T32] ret_from_fork+0x514/0xb70
[ 126.997409][ T32] ? __pfx_ret_from_fork+0x10/0x10
[ 126.997426][ T32] ? __switch_to+0xc79/0x1410
[ 126.997453][ T32] ? __pfx_kthread+0x10/0x10
[ 126.997475][ T32] ret_from_fork_asm+0x1a/0x30
[ 126.997507][ T32]
[ 126.997516][ T32] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 126.997528][ T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 126.997546][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 126.997557][ T32] Workqueue: usb_hub_wq hub_event
[ 126.997579][ T32] Call Trace:
[ 126.997590][ T32]
[ 126.997597][ T32] vpanic+0x56c/0xa60
[ 126.997617][ T32] ? __pfx__printk+0x10/0x10
[ 126.997640][ T32] ? __pfx_vpanic+0x10/0x10
[ 126.997658][ T32] ? is_bpf_text_address+0x292/0x2b0
[ 126.997679][ T32] ? is_bpf_text_address+0x26/0x2b0
[ 126.997707][ T32] panic+0xc5/0xd0
[ 126.997726][ T32] ? __pfx_panic+0x10/0x10
[ 126.997752][ T32] ? ret_from_fork_asm+0x1a/0x30
[ 126.997776][ T32] __warn+0x315/0x4c0
[ 126.997794][ T32] ? free_large_kmalloc+0x9b/0x110
[ 126.997820][ T32] ? free_large_kmalloc+0x9b/0x110
[ 126.997845][ T32] __report_bug+0x29a/0x540
[ 126.997859][ T32] ? device_initial_probe+0xa1/0xd0
[ 126.997882][ T32] ? bus_probe_device+0x12d/0x220
[ 126.997900][ T32] ? device_add+0x7e9/0xbb0
[ 126.997924][ T32] ? free_large_kmalloc+0x9b/0x110
[ 126.997948][ T32] ? __pfx___report_bug+0x10/0x10
[ 126.997961][ T32] ? usb_new_device+0x9f8/0x16e0
[ 126.997982][ T32] ? do_raw_spin_lock+0x12b/0x2f0
[ 126.998008][ T32] ? free_large_kmalloc+0x9b/0x110
[ 126.998032][ T32] report_bug+0x16a/0x220
[ 126.998048][ T32] ? free_large_kmalloc+0x9b/0x110
[ 126.998071][ T32] ? free_large_kmalloc+0x9d/0x110
[ 126.998094][ T32] handle_bug+0x9c/0x200
[ 126.998114][ T32] exc_invalid_op+0x1a/0x50
[ 126.998133][ T32] asm_exc_invalid_op+0x1a/0x20
[ 126.998149][ T32] RIP: 0010:free_large_kmalloc+0x9b/0x110
[ 126.998208][ T32] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 96 c8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 6a 27 9b 8d 5b 41 5e 5d e9 0f 86 04 ff
[ 126.998226][ T32] RSP: 0018:ffffc90000a6eb80 EFLAGS: 00010206
[ 126.998244][ T32] RAX: 00000000ff000000 RBX: ffffea0001719880 RCX: 0000000000000001
[ 126.998259][ T32] RDX: 0000000000000000 RSI: ffff88805c662000 RDI: ffffea0001719880
[ 126.998274][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 126.998286][ T32] R10: dffffc0000000000 R11: ffffed10084886c1 R12: 1ffff11006d19a82
[ 126.998302][ T32] R13: ffff888037a7b100 R14: ffff888042443660 R15: dffffc0000000000
[ 126.998344][ T32] usb_free_urb+0xd0/0x120
[ 126.998366][ T32] smsusb_term_device+0x1d7/0x3e0
[ 126.998389][ T32] smsusb_probe+0x1aba/0x2280
[ 126.998422][ T32] ? __pfx_smsusb_probe+0x10/0x10
[ 126.998442][ T32] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 126.998469][ T32] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 126.998489][ T32] ? rt_spin_unlock+0x14f/0x200
[ 126.998514][ T32] ? rt_spin_unlock+0x160/0x200
[ 126.998538][ T32] ? __pm_runtime_set_status+0x99c/0xc70
[ 126.998569][ T32] usb_probe_interface+0x659/0xc70
[ 126.998608][ T32] ? __pfx_usb_probe_interface+0x10/0x10
[ 126.998632][ T32] really_probe+0x267/0xaf0
[ 126.998652][ T32] __driver_probe_device+0x1ef/0x380
[ 126.998679][ T32] driver_probe_device+0x4f/0x240
[ 126.998699][ T32] __device_attach_driver+0x279/0x430
[ 126.998728][ T32] bus_for_each_drv+0x25b/0x2f0
[ 126.998749][ T32] ? __pfx___device_attach_driver+0x10/0x10
[ 126.998775][ T32] ? __pfx_bus_for_each_drv+0x10/0x10
[ 126.998795][ T32] ? rt_spin_unlock+0x160/0x200
[ 126.998822][ T32] __device_attach+0x2c8/0x450
[ 126.998849][ T32] ? __pfx___device_attach+0x10/0x10
[ 126.998874][ T32] ? rt_spin_unlock+0x160/0x200
[ 126.998902][ T32] device_initial_probe+0xa1/0xd0
[ 126.998928][ T32] bus_probe_device+0x12d/0x220
[ 126.998950][ T32] device_add+0x7e9/0xbb0
[ 126.998976][ T32] usb_set_configuration+0x1a87/0x2110
[ 126.999020][ T32] usb_generic_driver_probe+0x8d/0x150
[ 126.999045][ T32] usb_probe_device+0x1c4/0x3b0
[ 126.999072][ T32] ? __pfx_usb_probe_device+0x10/0x10
[ 126.999095][ T32] really_probe+0x267/0xaf0
[ 126.999115][ T32] __driver_probe_device+0x1ef/0x380
[ 126.999142][ T32] driver_probe_device+0x4f/0x240
[ 126.999160][ T32] __device_attach_driver+0x279/0x430
[ 126.999189][ T32] bus_for_each_drv+0x25b/0x2f0
[ 126.999209][ T32] ? __pfx___device_attach_driver+0x10/0x10
[ 126.999235][ T32] ? __pfx_bus_for_each_drv+0x10/0x10
[ 126.999255][ T32] ? rt_spin_unlock+0x160/0x200
[ 126.999283][ T32] __device_attach+0x2c8/0x450
[ 126.999323][ T32] ? __pfx___device_attach+0x10/0x10
[ 126.999349][ T32] ? rt_spin_unlock+0x160/0x200
[ 126.999377][ T32] device_initial_probe+0xa1/0xd0
[ 126.999403][ T32] bus_probe_device+0x12d/0x220
[ 126.999425][ T32] device_add+0x7e9/0xbb0
[ 126.999451][ T32] usb_new_device+0x9f8/0x16e0
[ 126.999479][ T32] ? __pfx_usb_new_device+0x10/0x10
[ 126.999506][ T32] hub_event+0x2a49/0x4f60
[ 126.999564][ T32] ? __pfx_hub_event+0x10/0x10
[ 126.999592][ T32] ? process_one_work+0x8b7/0x1710
[ 126.999617][ T32] ? process_one_work+0x8b7/0x1710
[ 126.999632][ T32] process_one_work+0x9a3/0x1710
[ 126.999664][ T32] ? __pfx_process_one_work+0x10/0x10
[ 126.999678][ T32] ? do_raw_spin_lock+0x12b/0x2f0
[ 126.999708][ T32] worker_thread+0xba8/0x11e0
[ 126.999743][ T32] kthread+0x388/0x470
[ 126.999764][ T32] ? __pfx_worker_thread+0x10/0x10
[ 126.999780][ T32] ? __pfx_kthread+0x10/0x10
[ 126.999802][ T32] ret_from_fork+0x514/0xb70
[ 126.999822][ T32] ? __pfx_ret_from_fork+0x10/0x10
[ 126.999840][ T32] ? __switch_to+0xc79/0x1410
[ 126.999866][ T32] ? __pfx_kthread+0x10/0x10
[ 126.999888][ T32] ret_from_fork_asm+0x1a/0x30
[ 126.999919][ T32]
[ 127.000627][ T32] Kernel Offset: disabled