Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. 2026/01/14 07:46:01 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 57.271193][ T3063] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.056598][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.064478][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.102190][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.111996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.126209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.135591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.410816][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.419151][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.432027][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.439978][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.448070][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.455640][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.464386][ T3076] device veth0_vlan entered promiscuous mode [ 59.626985][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.635228][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.716986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.725752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.735467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.743817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/01/14 07:46:04 executed programs: 0 [ 60.752786][ T9] device veth0_vlan left promiscuous mode [ 62.516241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.526522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.677190][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.687172][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.721085][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.729679][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.748409][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.756401][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.764619][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.773000][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.787437][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.796477][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.830889][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.843671][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.851857][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.859415][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.940793][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.950024][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.958414][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.967202][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.975668][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.983952][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.992859][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.001339][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.014909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.030606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.041163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.050131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.058123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.066681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.080603][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.088765][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.108985][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.128441][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.138735][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.147744][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.156525][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.164930][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.173324][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.181484][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.191978][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.209633][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.278089][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.299770][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.309556][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.320571][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.337714][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.349189][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.377178][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.388945][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.189973][ T3356] device veth0_vlan entered promiscuous mode [ 64.211896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.224158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.232622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.240995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.248968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.256610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.271376][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.280679][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.305421][ T3350] device veth0_vlan entered promiscuous mode [ 64.314407][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.323248][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.342878][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.352149][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.365134][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.380968][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.396819][ T3348] device veth0_vlan entered promiscuous mode [ 64.411200][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.419739][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.427920][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.435465][ T86] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.450400][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.458757][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.492765][ T3349] device veth0_vlan entered promiscuous mode [ 64.510189][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.528958][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.537479][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.545322][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.563344][ T2580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.591078][ T2580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.612696][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.630748][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.640223][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.647957][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.658180][ T3352] device veth0_vlan entered promiscuous mode [ 64.994234][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.003382][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.116922][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.126601][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.150053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.178364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.301904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.314394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.382152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.401542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.421413][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.441961][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.450608][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.458966][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.474711][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.483359][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.501262][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.511847][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.553310][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.568080][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.587310][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.597087][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/01/14 07:46:10 executed programs: 10 [ 65.763970][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.773577][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.791878][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.801448][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.816383][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.824902][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.838170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.847734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.000475][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.010499][ T2669] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 66.070485][ T3425] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.190516][ T3424] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.230500][ T2670] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.270696][ T2669] usb 6-1: Using ep0 maxpacket: 8 [ 66.275762][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 66.310484][ T3425] usb 3-1: Using ep0 maxpacket: 8 [ 66.430541][ T3424] usb 2-1: Using ep0 maxpacket: 8 [ 66.470677][ T3425] usb 3-1: unable to get BOS descriptor or descriptor too short [ 66.470965][ T2669] usb 6-1: unable to get BOS descriptor or descriptor too short [ 66.486222][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 66.510558][ T2670] usb 7-1: Using ep0 maxpacket: 8 [ 66.550593][ T3425] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 66.560593][ T3425] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 66.570294][ T3425] usb 3-1: config 8 interface 0 has no altsetting 0 [ 66.580518][ T25] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 66.590315][ T2669] usb 6-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 66.590488][ T3424] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.600123][ T2669] usb 6-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 66.600130][ T2669] usb 6-1: config 8 interface 0 has no altsetting 0 [ 66.600185][ T25] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 66.634275][ T25] usb 5-1: config 8 interface 0 has no altsetting 0 [ 66.680550][ T3424] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 66.690535][ T3424] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 66.700235][ T3424] usb 2-1: config 8 interface 0 has no altsetting 0 [ 66.730495][ T3425] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 66.739661][ T3425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.740475][ T2670] usb 7-1: unable to get BOS descriptor or descriptor too short [ 66.748150][ T3425] usb 3-1: Product: syz [ 66.759425][ T3425] usb 3-1: Manufacturer: syz [ 66.764115][ T3425] usb 3-1: SerialNumber: syz [ 66.800562][ T2669] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 66.809767][ T2669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.817799][ T2669] usb 6-1: Product: syz [ 66.822002][ T2669] usb 6-1: Manufacturer: syz [ 66.826587][ T2669] usb 6-1: SerialNumber: syz [ 66.850627][ T25] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 66.859741][ T2670] usb 7-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 66.860532][ T3424] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 66.869678][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.878854][ T3424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.886676][ T2670] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 66.894764][ T3424] usb 2-1: Product: syz [ 66.904299][ T25] usb 5-1: Product: syz [ 66.908590][ T3424] usb 2-1: Manufacturer: syz [ 66.912523][ T2670] usb 7-1: config 8 interface 0 has no altsetting 0 [ 66.917255][ T3424] usb 2-1: SerialNumber: syz [ 66.923900][ T25] usb 5-1: Manufacturer: syz [ 66.933122][ T25] usb 5-1: SerialNumber: syz [ 67.091187][ T3425] usb 3-1: selecting invalid altsetting 0 [ 67.100540][ T2670] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 67.109054][ T3425] snd-usb-audio: probe of 3-1:8.0 failed with error -12 [ 67.119319][ T2670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.125049][ T3425] usb 3-1: USB disconnect, device number 2 [ 67.127973][ T2670] usb 7-1: Product: syz [ 67.137512][ T2670] usb 7-1: Manufacturer: syz [ 67.142528][ T2670] usb 7-1: SerialNumber: syz [ 67.171390][ T2669] usb 6-1: selecting invalid altsetting 0 [ 67.203228][ T2669] ------------[ cut here ]------------ [ 67.208675][ T2669] ODEBUG: free active (active state 0) object type: timer_list hint: snd_usbmidi_error_timer+0x0/0x270 [ 67.220099][ T2669] WARNING: CPU: 1 PID: 2669 at lib/debugobjects.c:518 debug_print_object+0x16e/0x260 [ 67.229845][ T2669] Modules linked in: [ 67.233879][ T2669] CPU: 1 PID: 2669 Comm: kworker/1:9 Not tainted syzkaller #0 [ 67.241443][ T2669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.251652][ T2669] Workqueue: usb_hub_wq hub_event [ 67.256672][ T2669] RIP: 0010:debug_print_object+0x16e/0x260 [ 67.263475][ T2669] Code: dd c0 cc 1c 86 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 d2 00 00 00 48 8b 14 dd c0 cc 1c 86 48 c7 c7 a0 c0 1c 86 e8 4d f2 d6 02 <0f> 0b 83 05 75 9d 6d 05 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 c3 48 [ 67.283128][ T2669] RSP: 0018:ffffc9000246ed08 EFLAGS: 00010286 [ 67.289189][ T2669] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 67.297184][ T2669] RDX: 0000000000000004 RSI: 0000000000000008 RDI: fffff5200048dd93 [ 67.305367][ T2669] RBP: 0000000000000001 R08: 0000000000000001 R09: ffff8880ba3339c7 [ 67.313345][ T2669] R10: ffffed1017466738 R11: 0000000000000001 R12: ffffffff85e8d760 [ 67.320524][ C0] ================================================================== [ 67.321373][ T2669] R13: ffffffff812e3030 R14: dead000000000100 R15: ffff888075e34040 [ 67.329338][ C0] BUG: KASAN: use-after-free in snd_usbmidi_error_timer+0x231/0x270 [ 67.337426][ T2669] FS: 0000000000000000(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000 [ 67.345338][ C0] Read of size 1 at addr ffff888017a9fd43 by task swapper/0/0 [ 67.345345][ C0] [ 67.345348][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 67.345354][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.345358][ C0] Call Trace: [ 67.345362][ C0] [ 67.345364][ C0] dump_stack_lvl+0x41/0x5e [ 67.345374][ C0] print_address_description.constprop.0.cold+0x6c/0x309 [ 67.345383][ C0] ? snd_usbmidi_error_timer+0x231/0x270 [ 67.345390][ C0] ? snd_usbmidi_error_timer+0x231/0x270 [ 67.345397][ C0] kasan_report.cold+0x83/0xdf [ 67.345402][ C0] ? snd_usbmidi_error_timer+0x231/0x270 [ 67.345408][ C0] snd_usbmidi_error_timer+0x231/0x270 [ 67.345415][ C0] ? call_timer_fn+0xcd/0x400 [ 67.354340][ T2669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.361728][ C0] ? snd_usbmidi_out_work+0x10/0x10 [ 67.361736][ C0] call_timer_fn+0x163/0x400 [ 67.361743][ C0] ? timer_fixup_init+0x30/0x30 [ 67.361749][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 67.361755][ C0] ? __next_timer_interrupt+0xd0/0x1f0 [ 67.364049][ T2669] CR2: 00007f3e101afdac CR3: 000000007233a000 CR4: 00000000003506e0 [ 67.371032][ C0] ? snd_usbmidi_out_work+0x10/0x10 [ 67.371041][ C0] __run_timers.part.0+0x530/0x890 [ 67.371048][ C0] ? call_timer_fn+0x400/0x400 [ 67.381198][ T2669] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.384332][ C0] ? ktime_get+0xfb/0x240 [ 67.387152][ T2669] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.391639][ C0] ? lapic_next_event+0x4d/0x80 [ 67.391648][ C0] ? clockevents_program_event+0x1be/0x270 [ 67.391655][ C0] run_timer_softirq+0x65/0xf0 [ 67.391661][ C0] handle_softirqs+0x14f/0x590 [ 67.391667][ C0] irq_exit_rcu+0xd0/0x110 [ 67.398754][ T2669] Call Trace: [ 67.404357][ C0] sysvec_apic_timer_interrupt+0x6a/0x90 [ 67.404374][ C0] [ 67.404376][ C0] [ 67.404378][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 67.404385][ C0] RIP: 0010:default_idle+0xb/0x10 [ 67.404395][ C0] Code: 54 49 89 f4 55 48 89 fd 2e 2e 2e 31 c0 4c 89 e2 48 89 ef 5d 41 5c 31 f6 e9 22 a0 41 fd cc cc 66 90 0f 00 2d f7 59 54 00 fb f4 0f 1f 40 00 41 54 be 08 00 00 00 53 65 48 8b 1c 25 00 6f 02 00 [ 67.404400][ C0] RSP: 0018:ffffffff87007e50 EFLAGS: 00000246 [ 67.404407][ C0] RAX: 00000000000066ca RBX: ffffffff87051d00 RCX: ffffffff858b6849 [ 67.404411][ C0] RDX: ffff8880ba23a808 RSI: 0000000000000004 RDI: 00000000000066ca [ 67.410031][ T2669] [ 67.414767][ C0] RBP: fffffbfff0e0a3a0 R08: 0000000000000001 R09: ffff8880ba23a80b [ 67.414778][ C0] R10: ffffed1017447501 R11: ffffffff8700f1c8 R12: 0000000000000000 [ 67.414782][ C0] R13: 0000000000000000 R14: ffffffff87fcb190 R15: 0000000000000000 [ 67.414786][ C0] ? rcu_eqs_enter.constprop.0+0x99/0xd0 [ 67.414801][ C0] default_idle_call+0x65/0x90 [ 67.414810][ C0] do_idle+0x3e6/0x560 [ 67.414817][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 67.414822][ C0] cpu_startup_entry+0x14/0x20 [ 67.414827][ C0] start_kernel+0x30e/0x32c [ 67.414835][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 67.420855][ T2669] ? do_raw_spin_unlock+0x171/0x230 [ 67.426056][ C0] [ 67.430733][ T2669] debug_check_no_obj_freed+0x3f4/0x530 [ 67.437377][ C0] [ 67.437383][ C0] Allocated by task 2669: [ 67.442612][ T2669] ? debug_object_assert_init+0x300/0x300 [ 67.447121][ C0] kasan_save_stack+0x1b/0x40 [ 67.451950][ T2669] ? debug_object_assert_init+0x300/0x300 [ 67.456745][ C0] __kasan_kmalloc+0x7c/0x90 [ 67.462195][ T2669] ? kasan_set_track+0x1c/0x30 [ 67.470117][ C0] snd_usbmidi_in_endpoint_create+0x83/0x9e0 [ 67.475314][ T2669] ? snd_usbmidi_in_endpoint_delete+0xcf/0x180 [ 67.480360][ C0] __snd_usbmidi_create+0xaad/0x16d0 [ 67.480367][ C0] create_composite_quirk+0x1da/0x450 [ 67.480373][ C0] usb_audio_probe+0x4ce/0x2760 [ 67.480377][ C0] usb_probe_interface+0x274/0x6a0 [ 67.480383][ C0] really_probe+0x1c2/0xb60 [ 67.480389][ C0] __driver_probe_device+0x27f/0x3e0 [ 67.485115][ T2669] ? kasan_set_track+0x1c/0x30 [ 67.493053][ C0] driver_probe_device+0x44/0x110 [ 67.493059][ C0] __device_attach_driver+0x14a/0x270 [ 67.493064][ C0] bus_for_each_drv+0x11e/0x1a0 [ 67.493068][ C0] __device_attach+0x19e/0x440 [ 67.497359][ T2669] ? snd_rawmidi_free.part.0+0x32d/0x500 [ 67.505295][ C0] bus_probe_device+0x19d/0x250 [ 67.505301][ C0] device_add+0x9bb/0x1b30 [ 67.505309][ C0] usb_set_configuration+0x9f4/0x1630 [ 67.505315][ C0] usb_generic_driver_probe+0x74/0xa0 [ 67.505322][ C0] usb_probe_device+0x95/0x240 [ 67.510134][ T2669] kfree+0x113/0x510 [ 67.515901][ C0] really_probe+0x1c2/0xb60 [ 67.515907][ C0] __driver_probe_device+0x27f/0x3e0 [ 67.515911][ C0] driver_probe_device+0x44/0x110 [ 67.515916][ C0] __device_attach_driver+0x14a/0x270 [ 67.520668][ T2669] ? mutex_is_locked+0xe/0x40 [ 67.525374][ C0] bus_for_each_drv+0x11e/0x1a0 [ 67.529755][ T2669] snd_rawmidi_free.part.0+0x32d/0x500 [ 67.533006][ C0] __device_attach+0x19e/0x440 [ 67.533012][ C0] bus_probe_device+0x19d/0x250 [ 67.533016][ C0] device_add+0x9bb/0x1b30 [ 67.533022][ C0] usb_new_device.cold+0x59c/0xdc6 [ 67.533028][ C0] hub_event+0x1a2b/0x3890 [ 67.533035][ C0] process_one_work+0x85b/0x1350 [ 67.538633][ T2669] ? kasan_set_track+0x1c/0x30 [ 67.541538][ C0] worker_thread+0x56d/0xf40 [ 67.541544][ C0] kthread+0x347/0x420 [ 67.541550][ C0] ret_from_fork+0x1f/0x30 [ 67.541557][ C0] [ 67.541559][ C0] Freed by task 2669: [ 67.544467][ T2669] ? kasan_set_free_info+0x20/0x30 [ 67.550415][ C0] kasan_save_stack+0x1b/0x40 [ 67.550421][ C0] kasan_set_track+0x1c/0x30 [ 67.550426][ C0] kasan_set_free_info+0x20/0x30 [ 67.550431][ C0] __kasan_slab_free+0xe0/0x110 [ 67.550436][ C0] kfree+0xd9/0x510 [ 67.555434][ T2669] snd_rawmidi_dev_free+0x2d/0x40 [ 67.575011][ C0] snd_usbmidi_rawmidi_free+0xa0/0x150 [ 67.575023][ C0] snd_rawmidi_free.part.0+0x32d/0x500 [ 67.575028][ C0] snd_rawmidi_dev_free+0x2d/0x40 [ 67.575032][ C0] __snd_device_free+0x16c/0x2a0 [ 67.575038][ C0] snd_device_free_all+0xb9/0x1c0 [ 67.575043][ C0] release_card_device+0x61/0x1b0 [ 67.575047][ C0] device_release+0x93/0x200 [ 67.581221][ T2669] __snd_device_free+0x16c/0x2a0 [ 67.589109][ C0] kobject_put+0x139/0x410 [ 67.597189][ T2669] snd_device_free_all+0xb9/0x1c0 [ 67.600055][ C0] snd_card_free+0x137/0x160 [ 67.608013][ T2669] release_card_device+0x61/0x1b0 [ 67.615928][ C0] usb_audio_probe+0x18ea/0x2760 [ 67.615935][ C0] usb_probe_interface+0x274/0x6a0 [ 67.615941][ C0] really_probe+0x1c2/0xb60 [ 67.615947][ C0] __driver_probe_device+0x27f/0x3e0 [ 67.615952][ C0] driver_probe_device+0x44/0x110 [ 67.623905][ T2669] device_release+0x93/0x200 [ 67.629588][ C0] __device_attach_driver+0x14a/0x270 [ 67.634372][ T2669] kobject_put+0x139/0x410 [ 67.638368][ C0] bus_for_each_drv+0x11e/0x1a0 [ 67.643389][ T2669] snd_card_free+0x137/0x160 [ 67.648085][ C0] __device_attach+0x19e/0x440 [ 67.652598][ T2669] ? snd_card_file_remove+0x540/0x540 [ 67.658406][ C0] bus_probe_device+0x19d/0x250 [ 67.663911][ T2669] ? try_to_register_card+0x1fe/0x280 [ 67.666766][ C0] device_add+0x9bb/0x1b30 [ 67.672303][ T2669] usb_audio_probe+0x18ea/0x2760 [ 67.674576][ C0] usb_set_configuration+0x9f4/0x1630 [ 67.678869][ T2669] ? snd_usb_create_stream.isra.0+0x420/0x420 [ 67.684551][ C0] usb_generic_driver_probe+0x74/0xa0 [ 67.684559][ C0] usb_probe_device+0x95/0x240 [ 67.684563][ C0] really_probe+0x1c2/0xb60 [ 67.684568][ C0] __driver_probe_device+0x27f/0x3e0 [ 67.689209][ T2669] ? lock_downgrade+0x6e0/0x6e0 [ 67.694894][ C0] driver_probe_device+0x44/0x110 [ 67.694900][ C0] __device_attach_driver+0x14a/0x270 [ 67.694904][ C0] bus_for_each_drv+0x11e/0x1a0 [ 67.694908][ C0] __device_attach+0x19e/0x440 [ 67.694913][ C0] bus_probe_device+0x19d/0x250 [ 67.694917][ C0] device_add+0x9bb/0x1b30 [ 67.699473][ T2669] ? lock_acquire+0x124/0x280 [ 67.704200][ C0] usb_new_device.cold+0x59c/0xdc6 [ 67.704209][ C0] hub_event+0x1a2b/0x3890 [ 67.704216][ C0] process_one_work+0x85b/0x1350 [ 67.704221][ C0] worker_thread+0x56d/0xf40 [ 67.704225][ C0] kthread+0x347/0x420 [ 67.704231][ C0] ret_from_fork+0x1f/0x30 [ 67.710179][ T2669] ? pm_runtime_enable+0x23/0x280 [ 67.716296][ C0] [ 67.716299][ C0] Last potentially related work creation: [ 67.716302][ C0] kasan_save_stack+0x1b/0x40 [ 67.716309][ C0] kasan_record_aux_stack+0xc5/0xf0 [ 67.716315][ C0] kvfree_call_rcu+0x74/0x770 [ 67.716322][ C0] ipv6_mc_destroy_dev+0x60d/0x940 [ 67.716329][ C0] addrconf_ifdown.isra.0+0xd79/0x1290 [ 67.716334][ C0] addrconf_notify+0x30d/0x1250 [ 67.721600][ T2669] usb_probe_interface+0x274/0x6a0 [ 67.726925][ C0] notifier_call_chain+0x94/0x170 [ 67.731761][ T2669] really_probe+0x1c2/0xb60 [ 67.736813][ C0] unregister_netdevice_many+0x78c/0x1480 [ 67.741711][ T2669] __driver_probe_device+0x27f/0x3e0 [ 67.746525][ C0] default_device_exit_batch+0x2a5/0x360 [ 67.751271][ T2669] ? usb_match_id.part.0+0xdd/0x140 [ 67.756297][ C0] cleanup_net+0x4b7/0xac0 [ 67.761649][ T2669] driver_probe_device+0x44/0x110 [ 67.766441][ C0] process_one_work+0x85b/0x1350 [ 67.771232][ T2669] __device_attach_driver+0x14a/0x270 [ 67.776786][ C0] worker_thread+0x56d/0xf40 [ 67.781620][ T2669] ? driver_allows_async_probing+0x120/0x120 [ 67.785978][ C0] kthread+0x347/0x420 [ 67.791333][ T2669] bus_for_each_drv+0x11e/0x1a0 [ 67.796650][ C0] ret_from_fork+0x1f/0x30 [ 67.801388][ T2669] ? __pm_runtime_resume+0x5e/0x100 [ 67.805322][ C0] [ 67.805325][ C0] The buggy address belongs to the object at ffff888017a9fc00 [ 67.805325][ C0] which belongs to the cache kmalloc-512 of size 512 [ 67.809789][ T2669] ? bus_for_each_dev+0x1a0/0x1a0 [ 67.815036][ C0] The buggy address is located 323 bytes inside of [ 67.815036][ C0] 512-byte region [ffff888017a9fc00, ffff888017a9fe00) [ 67.815042][ C0] The buggy address belongs to the page: [ 67.815055][ C0] page:ffffea00005ea700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17a9c [ 67.815067][ C0] head:ffffea00005ea700 order:2 compound_mapcount:0 compound_pincount:0 [ 67.820060][ T2669] ? do_raw_spin_unlock+0x171/0x230 [ 67.825403][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 67.825414][ C0] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff88800d441c80 [ 67.825425][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 67.825428][ C0] page dumped because: kasan: bad access detected [ 67.825434][ C0] page_owner tracks the page as allocated [ 67.825437][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2563, ts 34070804787, free_ts 34064924686 [ 67.825447][ C0] get_page_from_freelist+0x1223/0x2e90 [ 67.825454][ C0] __alloc_pages+0x1b2/0x470 [ 67.825458][ C0] allocate_slab+0x2ee/0x430 [ 67.825463][ C0] ___slab_alloc+0xb19/0x11a0 [ 67.825467][ C0] __kmalloc_node_track_caller+0x18e/0x4e0 [ 67.825473][ C0] __alloc_skb+0x8b/0x280 [ 67.825480][ C0] netlink_sendmsg+0x7f3/0xc20 [ 67.825486][ C0] __sock_sendmsg+0xab/0xe0 [ 67.825492][ C0] __sys_sendto+0x1a4/0x270 [ 67.825497][ C0] __x64_sys_sendto+0xd8/0x1b0 [ 67.825501][ C0] do_syscall_64+0x33/0x80 [ 67.825509][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.825514][ C0] page last free stack trace: [ 67.825516][ C0] free_pcp_prepare+0x29d/0x750 [ 67.825521][ C0] free_unref_page+0x19/0x5a0 [ 67.825526][ C0] stack_depot_save+0x160/0x440 [ 67.825533][ C0] kasan_save_stack+0x32/0x40 [ 67.825537][ C0] __kasan_slab_alloc+0x61/0x80 [ 67.825542][ C0] kmem_cache_alloc+0x22c/0x390 [ 67.825546][ C0] getname_flags.part.0+0x4a/0x440 [ 67.825553][ C0] user_path_at_empty+0x1e/0x50 [ 67.825558][ C0] path_setxattr+0x8c/0x170 [ 67.825563][ C0] __x64_sys_setxattr+0xbb/0x150 [ 67.825567][ C0] do_syscall_64+0x33/0x80 [ 67.825571][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.825576][ C0] [ 67.825578][ C0] Memory state around the buggy address: [ 67.825582][ C0] ffff888017a9fc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.825586][ C0] ffff888017a9fc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.825589][ C0] >ffff888017a9fd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.825592][ C0] ^ [ 67.825596][ C0] ffff888017a9fd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.825600][ C0] ffff888017a9fe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.825603][ C0] ================================================================== [ 67.825606][ C0] Disabling lock debugging due to kernel taint [ 67.825669][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 67.825674][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 [ 67.825680][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.825684][ C0] Call Trace: [ 67.825686][ C0] [ 67.825689][ C0] dump_stack_lvl+0x41/0x5e [ 67.825697][ C0] panic+0x1e3/0x461 [ 67.825702][ C0] ? __warn_printk+0xee/0xee [ 67.825706][ C0] ? snd_usbmidi_error_timer+0x231/0x270 [ 67.825714][ C0] ? snd_usbmidi_error_timer+0x231/0x270 [ 67.825721][ C0] ? do_raw_spin_unlock+0x50/0x230 [ 67.825727][ C0] ? snd_usbmidi_error_timer+0x231/0x270 [ 67.825734][ C0] ? snd_usbmidi_error_timer+0x231/0x270 [ 67.830415][ T2669] __device_attach+0x19e/0x440 [ 67.835202][ C0] check_panic_on_warn.cold+0x14/0x2b [ 67.840720][ T2669] ? device_driver_attach+0x1b0/0x1b0 [ 67.845435][ C0] end_report.cold+0x41/0x5c [ 67.850257][ T2669] ? kobject_uevent_env+0x222/0x10e0 [ 67.854737][ C0] kasan_report.cold+0x71/0xdf [ 67.854743][ C0] ? snd_usbmidi_error_timer+0x231/0x270 [ 67.854749][ C0] snd_usbmidi_error_timer+0x231/0x270 [ 67.854755][ C0] ? call_timer_fn+0xcd/0x400 [ 67.859831][ T2669] bus_probe_device+0x19d/0x250 [ 67.864212][ C0] ? snd_usbmidi_out_work+0x10/0x10 [ 67.864218][ C0] call_timer_fn+0x163/0x400 [ 67.864224][ C0] ? timer_fixup_init+0x30/0x30 [ 67.869130][ T2669] device_add+0x9bb/0x1b30 [ 67.873941][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 67.873955][ C0] ? __next_timer_interrupt+0xd0/0x1f0 [ 67.878507][ T2669] ? kasan_set_track+0x1c/0x30 [ 67.882675][ C0] ? snd_usbmidi_out_work+0x10/0x10 [ 67.882683][ C0] __run_timers.part.0+0x530/0x890 [ 67.882691][ C0] ? call_timer_fn+0x400/0x400 [ 67.887076][ T2669] ? kasan_set_free_info+0x20/0x30 [ 67.889370][ C0] ? ktime_get+0xfb/0x240 [ 67.893394][ T2669] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 67.898400][ C0] ? lapic_next_event+0x4d/0x80 [ 67.903264][ T2669] ? kfree+0xd9/0x510 [ 67.907684][ C0] ? clockevents_program_event+0x1be/0x270 [ 67.912616][ T2669] usb_set_configuration+0x9f4/0x1630 [ 67.917400][ C0] run_timer_softirq+0x65/0xf0 [ 67.921192][ T2669] ? kernfs_create_link+0x167/0x220 [ 67.926160][ C0] handle_softirqs+0x14f/0x590 [ 67.931599][ T2669] ? do_raw_spin_unlock+0x171/0x230 [ 67.937016][ C0] irq_exit_rcu+0xd0/0x110 [ 67.942030][ T2669] usb_generic_driver_probe+0x74/0xa0 [ 67.946908][ C0] sysvec_apic_timer_interrupt+0x6a/0x90 [ 67.951932][ T2669] usb_probe_device+0x95/0x240 [ 67.956886][ C0] [ 67.961447][ T2669] really_probe+0x1c2/0xb60 [ 67.966336][ C0] [ 67.966339][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 67.970834][ T2669] __driver_probe_device+0x27f/0x3e0 [ 67.975808][ C0] RIP: 0010:default_idle+0xb/0x10 [ 67.980434][ T2669] driver_probe_device+0x44/0x110 [ 67.985371][ C0] Code: 54 49 89 f4 55 48 89 fd 2e 2e 2e 31 c0 4c 89 e2 48 89 ef 5d 41 5c 31 f6 e9 22 a0 41 fd cc cc 66 90 0f 00 2d f7 59 54 00 fb f4 0f 1f 40 00 41 54 be 08 00 00 00 53 65 48 8b 1c 25 00 6f 02 00 [ 67.990272][ T2669] __device_attach_driver+0x14a/0x270 [ 67.995436][ C0] RSP: 0018:ffffffff87007e50 EFLAGS: 00000246 [ 67.995443][ C0] RAX: 00000000000066ca RBX: ffffffff87051d00 RCX: ffffffff858b6849 [ 67.995446][ C0] RDX: ffff8880ba23a808 RSI: 0000000000000004 RDI: 00000000000066ca [ 67.995449][ C0] RBP: fffffbfff0e0a3a0 R08: 0000000000000001 R09: ffff8880ba23a80b [ 67.995452][ C0] R10: ffffed1017447501 R11: ffffffff8700f1c8 R12: 0000000000000000 [ 67.995455][ C0] R13: 0000000000000000 R14: ffffffff87fcb190 R15: 0000000000000000 [ 67.995459][ C0] ? rcu_eqs_enter.constprop.0+0x99/0xd0 [ 67.999930][ T2669] ? driver_allows_async_probing+0x120/0x120 [ 68.005176][ C0] default_idle_call+0x65/0x90 [ 68.005184][ C0] do_idle+0x3e6/0x560 [ 68.010205][ T2669] bus_for_each_drv+0x11e/0x1a0 [ 68.014767][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 68.014774][ C0] cpu_startup_entry+0x14/0x20 [ 68.014779][ C0] start_kernel+0x30e/0x32c [ 68.014787][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 68.014795][ C0] [ 68.020634][ C0] Kernel Offset: disabled [ 69.002467][ C0] Rebooting in 86400 seconds..