ci-upstream-kasan-badwrites-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-badwrites-root/syz-executor679957718 <...> Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-badwrites-root/syz-executor679957718", ["ci-upstream-kasan-badwrites-root/syz-executor679957718"], 0x7ffee22cfa10 /* 10 vars */) = 0 brk(NULL) = 0x55556857a000 brk(0x55556857ad80) = 0x55556857ad80 arch_prctl(ARCH_SET_FS, 0x55556857a400) = 0 set_tid_address(0x55556857a6d0) = 5632 set_robust_list(0x55556857a6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-badwrites-root/syz-executor679957718", 4096) = 60 getrandom("\x14\x5e\x87\x45\xdb\x39\xf4\x98", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556857ad80 brk(0x55556859bd80) = 0x55556859bd80 brk(0x55556859c000) = 0x55556859c000 mprotect(0x7f254941d000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-badwrites-root/strace-static-x86_64: Process 5633 attached , child_tidptr=0x55556857a6d0) = 5633 [pid 5632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5633] set_robust_list(0x55556857a6e0, 24) = 0 [pid 5633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5633] setpgid(0, 0) = 0 [pid 5633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5633] write(3, "1000", 4) = 4 [pid 5633] close(3) = 0 executing program [pid 5633] write(1, "executing program\n", 18) = 18 [pid 5633] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5633] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffe216ca050) = 0 [pid 5633] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe216c9040) = 18 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [ 94.844810][ T30] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe216c9040) = 18 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe216c9040) = 9 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe216c9040) = 46 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x32) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f2549423b4c) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f2549423b5c) = 1 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f2549423b6c) = 12 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f2549423b7c) = -1 EINVAL (Invalid argument) [pid 5633] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe216c9040) = 0 [ 95.005839][ T30] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 95.010057][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 95.010119][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 95.010180][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.091158][ T30] usb 1-1: probing VID:PID(0424:012C) [ 95.093017][ T30] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 95.093054][ T30] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 95.093088][ T30] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 95.093121][ T30] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 95.093155][ T30] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca070) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe216c9060) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca070) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe216c9060) = 0 [ 95.505461][ T30] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [pid 5633] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca070) = 0 [pid 5633] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe216c9060) = 15 [ 95.707750][ T30] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [pid 5633] exit_group(0) = ? [pid 5633] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5633, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556857a6d0) = 5637 ci-upstream-kasan-badwrites-root/strace-static-x86_64: Process 5637 attached [pid 5632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] set_robust_list(0x55556857a6e0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5637] setpgid(0, 0) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1000", 4) = 4 [pid 5637] close(3) = 0 [pid 5637] write(1, "executing program\n", 18) = 18 executing program [pid 5637] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5637] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffe216ca050) = 0 [pid 5637] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [ 96.527634][ T30] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 96.553721][ T1613] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 96.556785][ T1613] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 96.556850][ T30] usb 1-1: USB disconnect, device number 2 [ 96.558443][ T1613] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe216c9040) = 18 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe216ca050) = 0 [ 97.227833][ T30] USB vub300 remote SDIO host controller[0] now disconnected [ 97.524680][ T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.594908][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 97.594939][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 97.594968][ C1] preempt_count: 101, expected: 0 [ 97.594986][ C1] RCU nest depth: 0, expected: 0 [ 97.595003][ C1] locks held by swapper/1/0: 1, last CPU#1: [ 97.595029][ C1] #0: ffffc90000a18c98 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11d/0x5f0 [ 97.595165][ C1] Preemption disabled at: [ 97.595175][ C1] [<0000000000000000>] 0x0 [ 97.595212][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 97.595253][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 97.595274][ C1] Call Trace: [ 97.595286][ C1] [ 97.595300][ C1] dump_stack_lvl+0x100/0x190 [ 97.595354][ C1] __might_resched.cold+0x1dc/0x222 [ 97.595406][ C1] ? __pfx___might_resched+0x10/0x10 [ 97.595467][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.595512][ C1] ? kfree_const+0x5f/0x70 [ 97.595574][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.595630][ C1] cancel_delayed_work_sync+0xb8/0xf0 [ 97.595672][ C1] mmc_free_host+0x19/0x40 [ 97.595723][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 97.595771][ C1] call_timer_fn+0x198/0x5f0 [ 97.595822][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 97.595875][ C1] ? __run_timers+0x747/0xb00 [ 97.595904][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.595941][ C1] ? rcu_is_watching+0x13/0xc0 [ 97.595984][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.596026][ C1] __run_timers+0x757/0xb00 [ 97.596065][ C1] ? __pfx___run_timers+0x10/0x10 [ 97.596092][ C1] ? clockevents_program_event+0x23e/0x820 [ 97.596139][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.596175][ C1] ? lock_acquire+0x1d1/0x380 [ 97.596209][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.596247][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 97.596302][ C1] run_timer_base+0x114/0x190 [ 97.596331][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 97.596360][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.596402][ C1] run_timer_softirq+0x1a/0x50 [ 97.596431][ C1] handle_softirqs+0x1e6/0x9d0 [ 97.596466][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 97.596495][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.596531][ C1] ? _raw_spin_unlock+0x28/0x50 [ 97.596578][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.596615][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 97.596664][ C1] __irq_exit_rcu+0x16a/0x210 [ 97.596693][ C1] irq_exit_rcu+0x9/0x30 [ 97.596720][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 97.596770][ C1] [ 97.596780][ C1] [ 97.596791][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.596825][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 97.596876][ C1] Code: 38 95 02 e9 6e aa 3f f5 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 07 1b 00 fb f4 47 aa 3f f5 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 97.596904][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000242 [ 97.596929][ C1] RAX: 0000000000043445 RBX: ffff88801f2dddc0 RCX: ffffffff8bd0b185 [ 97.596950][ C1] RDX: 0000000000000001 RSI: ffffffff8e391f4a RDI: ffffffff8c623a80 [ 97.596970][ C1] RBP: ffffed1003e5bbb8 R08: 0000000000000001 R09: ffffed10170a67bd [ 97.596990][ C1] R10: ffff8880b8533deb R11: 0000000000000000 R12: 0000000000000000 [ 97.597010][ C1] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 97.597039][ C1] ? ct_kernel_exit+0x125/0x180 [ 97.597075][ C1] default_idle+0x9/0x10 [ 97.597107][ C1] default_idle_call+0x6c/0xb0 [ 97.597141][ C1] do_idle+0x3ae/0x5b0 [ 97.597176][ C1] ? __pfx_do_idle+0x10/0x10 [ 97.597209][ C1] ? rcu_is_watching+0x13/0xc0 [ 97.597247][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 97.597294][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.597329][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.597358][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 97.597399][ C1] cpu_startup_entry+0x4f/0x60 [ 97.597436][ C1] start_secondary+0x21d/0x2d0 [ 97.597464][ C1] ? __pfx_start_secondary+0x10/0x10 [ 97.597521][ C1] common_startup_64+0x13e/0x158 [ 97.597579][ C1] [ 97.597871][ C1] ODEBUG: object ffffc90000a18a60 is NOT on stack ffffc900001a0000, but annotated. [ 97.598820][ C1] ------------[ cut here ]------------ [ 97.598830][ C1] 1 [ 97.598837][ C1] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#1: swapper/1/0 [ 98.040263][ C1] Modules linked in: [ 98.044190][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.054700][ C1] Tainted: [W]=WARN [ 98.058510][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 98.068561][ C1] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 98.075617][ C1] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 f4 c1 d9 ff 83 c5 01 89 2d 00 a3 7c 1a 4c 89 e6 48 c7 c7 c0 45 62 8c e8 41 ca eb ff 90 <0f> 0b 90 e9 a2 c3 fd 03 83 c5 01 89 2d df a2 7c 1a 49 39 c4 73 da [ 98.095223][ C1] RSP: 0018:ffffc90000a188f0 EFLAGS: 00010082 [ 98.101283][ C1] RAX: 0000000000000050 RBX: ffff888032cfad58 RCX: 0000000000000000 [ 98.109246][ C1] RDX: 0000000000000050 RSI: ffffffff81ea0339 RDI: fffff5200014310f [ 98.117206][ C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 98.125173][ C1] R10: 0000000000000102 R11: 0000000000000001 R12: ffffc90000a18a60 [ 98.133169][ C1] R13: ffff88801f2dddc0 R14: 0000000000000001 R15: 0000000000000000 [ 98.141149][ C1] FS: 0000000000000000(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000 [ 98.150074][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.156651][ C1] CR2: 00007f7d3a9f37b0 CR3: 0000000021302000 CR4: 0000000000350ef0 [ 98.164616][ C1] Call Trace: [ 98.167908][ C1] [ 98.170834][ C1] __debug_object_init+0x2a9/0x3d0 [ 98.175965][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 98.181609][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.187251][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 98.192621][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.198273][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.203926][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 98.209303][ C1] ? __init_swait_queue_head+0xca/0x150 [ 98.214873][ C1] __synchronize_srcu+0x1c3/0x300 [ 98.219919][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 98.225477][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 98.231020][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.236662][ C1] ? synchronize_srcu+0xa8/0x380 [ 98.241607][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 98.247774][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 98.253939][ C1] wakeup_source_unregister+0x1f/0x30 [ 98.259322][ C1] mmc_host_classdev_release+0x42/0x120 [ 98.264885][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 98.271049][ C1] device_release+0xd2/0x270 [ 98.275641][ C1] kobject_put+0x1f7/0x640 [ 98.280068][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 98.286765][ C1] put_device+0x1f/0x30 [ 98.290930][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 98.297093][ C1] call_timer_fn+0x198/0x5f0 [ 98.301701][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 98.306849][ C1] ? __run_timers+0x747/0xb00 [ 98.311526][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.317171][ C1] ? rcu_is_watching+0x13/0xc0 [ 98.321949][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 98.328637][ C1] __run_timers+0x757/0xb00 [ 98.333151][ C1] ? __pfx___run_timers+0x10/0x10 [ 98.338174][ C1] ? clockevents_program_event+0x23e/0x820 [ 98.343994][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.349636][ C1] ? lock_acquire+0x1d1/0x380 [ 98.354318][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.359975][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 98.365027][ C1] run_timer_base+0x114/0x190 [ 98.369711][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 98.374906][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.380546][ C1] run_timer_softirq+0x1a/0x50 [ 98.385306][ C1] handle_softirqs+0x1e6/0x9d0 [ 98.390075][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 98.395354][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.401005][ C1] ? _raw_spin_unlock+0x28/0x50 [ 98.405874][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.411542][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 98.417197][ C1] __irq_exit_rcu+0x16a/0x210 [ 98.421874][ C1] irq_exit_rcu+0x9/0x30 [ 98.426111][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 98.431762][ C1] [ 98.434699][ C1] [ 98.437618][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.443615][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 98.449284][ C1] Code: 38 95 02 e9 6e aa 3f f5 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 07 1b 00 fb f4 47 aa 3f f5 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 98.468991][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000242 [ 98.475055][ C1] RAX: 0000000000043445 RBX: ffff88801f2dddc0 RCX: ffffffff8bd0b185 [ 98.483016][ C1] RDX: 0000000000000001 RSI: ffffffff8e391f4a RDI: ffffffff8c623a80 [ 98.490987][ C1] RBP: ffffed1003e5bbb8 R08: 0000000000000001 R09: ffffed10170a67bd [ 98.498947][ C1] R10: ffff8880b8533deb R11: 0000000000000000 R12: 0000000000000000 [ 98.506908][ C1] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 98.514879][ C1] ? ct_kernel_exit+0x125/0x180 [ 98.519736][ C1] default_idle+0x9/0x10 [ 98.523980][ C1] default_idle_call+0x6c/0xb0 [ 98.528762][ C1] do_idle+0x3ae/0x5b0 [ 98.532833][ C1] ? __pfx_do_idle+0x10/0x10 [ 98.537428][ C1] ? rcu_is_watching+0x13/0xc0 [ 98.542204][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 98.548054][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.553690][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.558884][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.564524][ C1] cpu_startup_entry+0x4f/0x60 [ 98.569296][ C1] start_secondary+0x21d/0x2d0 [ 98.574057][ C1] ? __pfx_start_secondary+0x10/0x10 [ 98.579369][ C1] common_startup_64+0x13e/0x158 [ 98.584346][ C1] [ 98.587353][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.594642][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.605146][ C1] Tainted: [W]=WARN [ 98.608936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 98.618980][ C1] Call Trace: [ 98.622246][ C1] [ 98.625081][ C1] dump_stack_lvl+0x100/0x190 [ 98.629772][ C1] vpanic+0x553/0x970 [ 98.633752][ C1] ? __pfx_vpanic+0x10/0x10 [ 98.638268][ C1] panic+0xd1/0xe0 [ 98.641988][ C1] ? __pfx_panic+0x10/0x10 [ 98.646421][ C1] check_panic_on_warn.cold+0x19/0x34 [ 98.651792][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 98.658300][ C1] __warn.cold+0x191/0x318 [ 98.662717][ C1] __report_bug+0x30f/0x440 [ 98.667220][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 98.673646][ C1] ? __pfx___report_bug+0x10/0x10 [ 98.678670][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.684325][ C1] ? irq_work_queue+0xd1/0x100 [ 98.689114][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.694749][ C1] ? __wake_up_klogd+0xe5/0x140 [ 98.699600][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.705253][ C1] ? vprintk_emit+0x1c9/0x6b0 [ 98.709939][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 98.714975][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 98.721405][ C1] report_bug+0xb3/0x220 [ 98.725643][ C1] ? lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 98.732066][ C1] handle_bug+0x16a/0x2a0 [ 98.736419][ C1] exc_invalid_op+0x17/0x50 [ 98.740931][ C1] asm_exc_invalid_op+0x1a/0x20 [ 98.745779][ C1] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 98.752811][ C1] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 f4 c1 d9 ff 83 c5 01 89 2d 00 a3 7c 1a 4c 89 e6 48 c7 c7 c0 45 62 8c e8 41 ca eb ff 90 <0f> 0b 90 e9 a2 c3 fd 03 83 c5 01 89 2d df a2 7c 1a 49 39 c4 73 da [ 98.772431][ C1] RSP: 0018:ffffc90000a188f0 EFLAGS: 00010082 [ 98.778493][ C1] RAX: 0000000000000050 RBX: ffff888032cfad58 RCX: 0000000000000000 [ 98.786472][ C1] RDX: 0000000000000050 RSI: ffffffff81ea0339 RDI: fffff5200014310f [ 98.794433][ C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 98.802395][ C1] R10: 0000000000000102 R11: 0000000000000001 R12: ffffc90000a18a60 [ 98.810380][ C1] R13: ffff88801f2dddc0 R14: 0000000000000001 R15: 0000000000000000 [ 98.818354][ C1] ? vprintk_emit+0x1c9/0x6b0 [ 98.823059][ C1] __debug_object_init+0x2a9/0x3d0 [ 98.828186][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 98.833849][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.839511][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 98.847333][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.852974][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.858608][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 98.863978][ C1] ? __init_swait_queue_head+0xca/0x150 [ 98.869531][ C1] __synchronize_srcu+0x1c3/0x300 [ 98.874578][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 98.880136][ C1] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 98.885682][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.891343][ C1] ? synchronize_srcu+0xa8/0x380 [ 98.896283][ C1] wakeup_source_unregister.part.0+0x12c/0x540 [ 98.902451][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 98.908633][ C1] wakeup_source_unregister+0x1f/0x30 [ 98.914021][ C1] mmc_host_classdev_release+0x42/0x120 [ 98.919582][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 98.925745][ C1] device_release+0xd2/0x270 [ 98.930337][ C1] kobject_put+0x1f7/0x640 [ 98.934762][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 98.941445][ C1] put_device+0x1f/0x30 [ 98.945622][ C1] vub300_inactivity_timer_expired+0x42f/0x550 [ 98.951794][ C1] call_timer_fn+0x198/0x5f0 [ 98.956429][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 98.961578][ C1] ? __run_timers+0x747/0xb00 [ 98.966257][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 98.971919][ C1] ? rcu_is_watching+0x13/0xc0 [ 98.976694][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 98.983380][ C1] __run_timers+0x757/0xb00 [ 98.987891][ C1] ? __pfx___run_timers+0x10/0x10 [ 98.992939][ C1] ? clockevents_program_event+0x23e/0x820 [ 98.998759][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.004398][ C1] ? lock_acquire+0x1d1/0x380 [ 99.009075][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.014820][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 99.019864][ C1] run_timer_base+0x114/0x190 [ 99.024540][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 99.029734][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.035402][ C1] run_timer_softirq+0x1a/0x50 [ 99.040165][ C1] handle_softirqs+0x1e6/0x9d0 [ 99.044934][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.050217][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.055852][ C1] ? _raw_spin_unlock+0x28/0x50 [ 99.060713][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.066365][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 99.072015][ C1] __irq_exit_rcu+0x16a/0x210 [ 99.076695][ C1] irq_exit_rcu+0x9/0x30 [ 99.080931][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 99.086581][ C1] [ 99.089497][ C1] [ 99.092418][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.098436][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 99.104090][ C1] Code: 38 95 02 e9 6e aa 3f f5 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 07 1b 00 fb f4 47 aa 3f f5 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 99.123712][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000242 [ 99.129778][ C1] RAX: 0000000000043445 RBX: ffff88801f2dddc0 RCX: ffffffff8bd0b185 [ 99.137741][ C1] RDX: 0000000000000001 RSI: ffffffff8e391f4a RDI: ffffffff8c623a80 [ 99.145702][ C1] RBP: ffffed1003e5bbb8 R08: 0000000000000001 R09: ffffed10170a67bd [ 99.153664][ C1] R10: ffff8880b8533deb R11: 0000000000000000 R12: 0000000000000000 [ 99.161627][ C1] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 99.169600][ C1] ? ct_kernel_exit+0x125/0x180 [ 99.174480][ C1] default_idle+0x9/0x10 [ 99.178723][ C1] default_idle_call+0x6c/0xb0 [ 99.183509][ C1] do_idle+0x3ae/0x5b0 [ 99.187583][ C1] ? __pfx_do_idle+0x10/0x10 [ 99.192191][ C1] ? rcu_is_watching+0x13/0xc0 [ 99.196966][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 99.202803][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.208526][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 99.213722][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 99.219380][ C1] cpu_startup_entry+0x4f/0x60 [ 99.224150][ C1] start_secondary+0x21d/0x2d0 [ 99.228911][ C1] ? __pfx_start_secondary+0x10/0x10 [ 99.234221][ C1] common_startup_64+0x13e/0x158 [ 99.239190][ C1] [ 99.242479][ C1] Kernel Offset: disabled [ 99.246796][ C1] Rebooting in 86400 seconds..