Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. 2026/05/24 06:35:53 parsed 1 programs [ 110.999765][ T4646] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 112.678122][ T4657] chnl_net:caif_netlink_parms(): no params data found [ 112.726801][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.734309][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.742620][ T4657] device bridge_slave_0 entered promiscuous mode [ 112.751930][ T4657] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.759676][ T4657] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.768038][ T4657] device bridge_slave_1 entered promiscuous mode [ 112.793812][ T4657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.806426][ T4657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.834529][ T4657] team0: Port device team_slave_0 added [ 112.842424][ T4657] team0: Port device team_slave_1 added [ 112.863714][ T4657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.870831][ T4657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.897311][ T4657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.911574][ T4657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.918689][ T4657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.944720][ T4657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.978084][ T4657] device hsr_slave_0 entered promiscuous mode [ 112.985194][ T4657] device hsr_slave_1 entered promiscuous mode [ 113.571730][ T4657] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.581768][ T4657] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.594897][ T4657] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.607634][ T4657] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.720353][ T4657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.751627][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.770076][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.788084][ T4657] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.802876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.816097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.836003][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.843138][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.875678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.896945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.916311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.936553][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.943701][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.982986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.010205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.047111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.058356][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.077990][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.090576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.100073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.110978][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.127960][ T4657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.141033][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.152454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.164586][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.173453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.388604][ T4657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.398190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.408052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.430526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.442085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.471599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.482906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.494988][ T4657] device veth0_vlan entered promiscuous mode [ 114.515411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.523551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.548850][ T4657] device veth1_vlan entered promiscuous mode [ 114.577264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.587394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.598862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.614657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.637613][ T4657] device veth0_macvtap entered promiscuous mode [ 114.655473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.669683][ T4657] device veth1_macvtap entered promiscuous mode [ 114.700571][ T4657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.708522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.718536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.732886][ T4657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.741837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.752919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.766049][ T4657] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.778077][ T4657] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.788109][ T4657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.798475][ T4657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.242261][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.752528][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.940935][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.012587][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.568792][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.599144][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.619184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.632341][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.652491][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.668889][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.909166][ T154] device hsr_slave_0 left promiscuous mode [ 120.922705][ T154] device hsr_slave_1 left promiscuous mode [ 120.929653][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.938792][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.947009][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.956173][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.964750][ T154] device bridge_slave_1 left promiscuous mode [ 120.971008][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.981296][ T154] device bridge_slave_0 left promiscuous mode [ 120.988223][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.004618][ T154] device veth1_macvtap left promiscuous mode [ 121.010703][ T154] device veth0_macvtap left promiscuous mode [ 121.018502][ T154] device veth1_vlan left promiscuous mode [ 121.024446][ T154] device veth0_vlan left promiscuous mode [ 121.195833][ T154] team0 (unregistering): Port device team_slave_1 removed [ 121.208517][ T154] team0 (unregistering): Port device team_slave_0 removed [ 121.221020][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.238148][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.293226][ T154] bond0 (unregistering): Released all slaves 2026/05/24 06:36:09 executed programs: 0 [ 123.396237][ T5127] chnl_net:caif_netlink_parms(): no params data found [ 123.523332][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.543729][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.553063][ T5127] device bridge_slave_0 entered promiscuous mode [ 123.566481][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.584149][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.604260][ T5127] device bridge_slave_1 entered promiscuous mode [ 123.643193][ T5127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.656180][ T5127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.710093][ T5127] team0: Port device team_slave_0 added [ 123.718619][ T5127] team0: Port device team_slave_1 added [ 123.879185][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.887419][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.914914][ T5127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.928446][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.937035][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.964215][ T5127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.034951][ T5127] device hsr_slave_0 entered promiscuous mode [ 124.045434][ T5127] device hsr_slave_1 entered promiscuous mode [ 124.569589][ T5127] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.580680][ T5127] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.591068][ T5127] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.607767][ T5127] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.750073][ T5127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.767694][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.777635][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.820317][ T5127] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.832710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.841980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.852529][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.859726][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.870454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.887728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.896902][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.907155][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.914321][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.965252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.984582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.997007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.027806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.037519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.053096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.109787][ T5127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.120700][ T5127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.134200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.142580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.151103][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 125.161322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.170806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.179975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.196287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.369621][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.378440][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.395522][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.426902][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.436627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.472953][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.482154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.493936][ T5127] device veth0_vlan entered promiscuous mode [ 125.502123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.512205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.544038][ T5127] device veth1_vlan entered promiscuous mode [ 125.618725][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.631361][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.640788][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.651250][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.664194][ T5127] device veth0_macvtap entered promiscuous mode [ 125.673585][ T5127] device veth1_macvtap entered promiscuous mode [ 125.699624][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.726169][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.743546][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.764959][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.786652][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.807125][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.824984][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.844696][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.869406][ T5127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.878630][ T5127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.887809][ T5127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.900052][ T5127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.986455][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.998143][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.015234][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.049653][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.058119][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.077882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.484388][ T4268] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.735371][ T4268] usb 1-1: Using ep0 maxpacket: 16 [ 126.855199][ T4268] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 126.863727][ T4268] usb 1-1: config 0 has no interface number 0 [ 126.870563][ T4268] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.892006][ T4268] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 41407, setting to 1024 [ 127.024505][ T4268] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 127.043890][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 127.064671][ T4268] usb 1-1: Product: syz [ 127.068897][ T4268] usb 1-1: SerialNumber: syz [ 127.090109][ T4268] usb 1-1: config 0 descriptor?? [ 127.156159][ T4268] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 127.187961][ T4268] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 127.225162][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 127.584477][ T4268] usb 1-1: USB disconnect, device number 2 [ 127.594275][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 127.601543][ C0] ------------[ cut here ]------------ [ 127.607206][ C0] URB ffff888023547200 submitted while active [ 127.613836][ C0] WARNING: CPU: 0 PID: 5261 at drivers/usb/core/urb.c:378 usb_submit_urb+0xff2/0x1910 [ 127.623449][ C0] Modules linked in: [ 127.627514][ C0] CPU: 0 PID: 5261 Comm: rm Not tainted syzkaller #0 [ 127.634228][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.644344][ C0] RIP: 0010:usb_submit_urb+0xff2/0x1910 [ 127.649932][ C0] Code: 2d c5 8a 89 ea e8 de 7b d7 03 e9 fb fb ff ff e8 a4 e0 9a fb c6 05 3f fc 97 07 01 48 c7 c7 60 2b c5 8a 48 89 de e8 de 93 d3 03 <0f> 0b e9 84 f0 ff ff e8 82 e0 9a fb eb 21 e8 7b e0 9a fb 44 8b 6c [ 127.669659][ C0] RSP: 0018:ffffc90000007780 EFLAGS: 00010046 [ 127.675784][ C0] RAX: 26eb987829f2d700 RBX: ffff888023547200 RCX: ffff888076930000 [ 127.683787][ C0] RDX: 0000000000000100 RSI: 0000000080000102 RDI: 0000000000000000 [ 127.691785][ C0] RBP: 000000000000000f R08: ffff8880b902795b R09: 1ffff11017204f2b [ 127.699782][ C0] R10: dffffc0000000000 R11: ffffed1017204f2c R12: dffffc0000000000 [ 127.707782][ C0] R13: 0000000000000a20 R14: ffff888023547208 R15: ffff888074dc3848 [ 127.715794][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 127.724761][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.731369][ C0] CR2: 00007f82ae8c2e9c CR3: 0000000074cce000 CR4: 00000000003506f0 [ 127.739383][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.747382][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.755380][ C0] Call Trace: [ 127.758683][ C0] [ 127.761561][ C0] ? _raw_spin_lock+0x40/0x40 [ 127.766278][ C0] ? dummy_timer+0x86e/0x30b0 [ 127.770993][ C0] cm109_urb_irq_callback+0x701/0xc70 [ 127.776397][ C0] __usb_hcd_giveback_urb+0x35f/0x520 [ 127.781812][ C0] dummy_timer+0x880/0x30b0 [ 127.786355][ C0] ? verify_lock_unused+0x140/0x140 [ 127.791589][ C0] ? mark_lock+0x94/0x320 [ 127.795946][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 127.801024][ C0] ? dummy_free_streams+0x530/0x530 [ 127.806269][ C0] ? dummy_free_streams+0x530/0x530 [ 127.811505][ C0] call_timer_fn+0x17b/0x540 [ 127.816134][ C0] ? dummy_free_streams+0x530/0x530 [ 127.821365][ C0] ? __run_timers+0x800/0x800 [ 127.826088][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 127.831326][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 127.836564][ C0] ? dummy_free_streams+0x530/0x530 [ 127.841803][ C0] __run_timers+0x53e/0x800 [ 127.846357][ C0] ? detach_timer+0x2b0/0x2b0 [ 127.851072][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 127.857092][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 127.861981][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 127.867318][ C0] run_timer_softirq+0x63/0xf0 [ 127.872158][ C0] handle_softirqs+0x339/0x830 [ 127.876956][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 127.881834][ C0] ? do_softirq+0x210/0x210 [ 127.886434][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 127.891660][ C0] __irq_exit_rcu+0x13b/0x230 [ 127.896337][ C0] ? irq_exit_rcu+0x20/0x20 [ 127.900855][ C0] irq_exit_rcu+0x5/0x20 [ 127.905188][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 127.910863][ C0] [ 127.913821][ C0] [ 127.916777][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 127.922780][ C0] RIP: 0010:finish_lock_switch+0x134/0x280 [ 127.928590][ C0] Code: be ff ff ff ff e8 dc 60 68 08 85 c0 74 4a 4d 85 ff 75 66 0f 1f 44 00 00 48 89 df e8 86 cc 71 08 e8 81 e6 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 c9 09 fe ff 43 80 3c [ 127.948196][ C0] RSP: 0018:ffffc9000340f388 EFLAGS: 00000286 [ 127.954270][ C0] RAX: 26eb987829f2d700 RBX: ffff8880b903a340 RCX: 26eb987829f2d700 [ 127.962261][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3100 RDI: ffffffff8a7a0700 [ 127.970236][ C0] RBP: 1ffff11017207613 R08: ffff8880b903a343 R09: 1ffff11017207468 [ 127.978222][ C0] R10: dffffc0000000000 R11: ffffed1017207469 R12: 1ffff110172075c1 [ 127.986211][ C0] R13: dffffc0000000000 R14: ffff8880b903ae08 R15: 0000000000000000 [ 127.994298][ C0] finish_task_switch+0x12f/0x640 [ 127.999344][ C0] ? __switch_to_asm+0x34/0x60 [ 128.004133][ C0] __schedule+0x11f7/0x43c0 [ 128.008684][ C0] ? deref_stack_reg+0xd0/0x120 [ 128.013580][ C0] ? verify_lock_unused+0x140/0x140 [ 128.018844][ C0] ? release_firmware_map_entry+0x190/0x190 [ 128.024748][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 128.030733][ C0] ? lock_chain_count+0x20/0x20 [ 128.035586][ C0] ? preempt_schedule+0xbc/0xd0 [ 128.040543][ C0] preempt_schedule_common+0x82/0xd0 [ 128.045864][ C0] preempt_schedule+0xbc/0xd0 [ 128.050571][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 128.056215][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 128.062412][ C0] preempt_schedule_thunk+0x16/0x18 [ 128.067650][ C0] _raw_spin_unlock_irqrestore+0x10d/0x120 [ 128.073465][ C0] ? _raw_spin_unlock+0x40/0x40 [ 128.078318][ C0] ? do_exit+0x5a9/0x20c0 [ 128.082665][ C0] ? __x64_sys_exit_group+0x3b/0x40 [ 128.087962][ C0] ? do_syscall_64+0x4c/0xa0 [ 128.092561][ C0] debug_check_no_obj_freed+0x515/0x530 [ 128.098121][ C0] free_unref_page_prepare+0x237/0x6c0 [ 128.103678][ C0] free_unref_page_list+0x119/0x820 [ 128.108894][ C0] ? uncharge_page+0x490/0x490 [ 128.113795][ C0] ? free_unref_page_commit+0x4c0/0x4c0 [ 128.119358][ C0] ? uncharge_page+0x246/0x490 [ 128.124229][ C0] release_pages+0x186c/0x1be0 [ 128.129003][ C0] ? lru_cache_disable+0x30/0x30 [ 128.133944][ C0] tlb_finish_mmu+0x1b4/0x370 [ 128.138651][ C0] exit_mmap+0x3d0/0x640 [ 128.142910][ C0] ? vm_brk+0x20/0x20 [ 128.146924][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 128.152126][ C0] ? mm_update_next_owner+0x522/0x640 [ 128.157544][ C0] __mmput+0x115/0x3b0 [ 128.161642][ C0] exit_mm+0x5f7/0x770 [ 128.165734][ C0] ? do_exit+0x20c0/0x20c0 [ 128.170148][ C0] ? __ia32_sys_timer_delete+0x40/0x40 [ 128.175609][ C0] ? hrtimer_try_to_cancel+0x3c9/0x410 [ 128.181070][ C0] ? taskstats_exit+0x439/0xab0 [ 128.185923][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 128.190776][ C0] do_exit+0x5a9/0x20c0 [ 128.194934][ C0] ? put_task_struct+0x80/0x80 [ 128.199709][ C0] ? lock_chain_count+0x20/0x20 [ 128.204573][ C0] do_group_exit+0x12e/0x300 [ 128.209196][ C0] __x64_sys_exit_group+0x3b/0x40 [ 128.214283][ C0] do_syscall_64+0x4c/0xa0 [ 128.218718][ C0] ? clear_bhb_loop+0x30/0x80 [ 128.223395][ C0] ? clear_bhb_loop+0x30/0x80 [ 128.228090][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.234017][ C0] RIP: 0033:0x7f82aea216c5 [ 128.238450][ C0] Code: Unable to access opcode bytes at RIP 0x7f82aea2169b. [ 128.245909][ C0] RSP: 002b:00007ffc2081c4b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 128.254360][ C0] RAX: ffffffffffffffda RBX: 00007f82aeb22fe8 RCX: 00007f82aea216c5 [ 128.262366][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 128.270346][ C0] RBP: 0000000000000001 R08: 00007ffc2081c448 R09: 0000000000000000 [ 128.278497][ C0] R10: 00007ffc2081c2e0 R11: 0000000000000206 R12: 0000000000000000 [ 128.286495][ C0] R13: 0000000000000000 R14: 00007f82aeb21680 R15: 00007f82aeb23000 [ 128.294484][ C0] [ 128.297517][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.304985][ C0] CPU: 0 PID: 5261 Comm: rm Not tainted syzkaller #0 [ 128.311712][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.321776][ C0] Call Trace: [ 128.325063][ C0] [ 128.327930][ C0] dump_stack_lvl+0x188/0x250 [ 128.332613][ C0] ? show_regs_print_info+0x20/0x20 [ 128.337812][ C0] ? load_image+0x400/0x400 [ 128.342320][ C0] panic+0x2e5/0x810 [ 128.346217][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 128.350739][ C0] ? usb_submit_urb+0xff2/0x1910 [ 128.355708][ C0] __warn+0x248/0x2b0 [ 128.359740][ C0] ? usb_submit_urb+0xff2/0x1910 [ 128.364685][ C0] report_bug+0x1b7/0x2e0 [ 128.369029][ C0] handle_bug+0x3a/0x70 [ 128.373200][ C0] exc_invalid_op+0x16/0x40 [ 128.377713][ C0] asm_exc_invalid_op+0x16/0x20 [ 128.382569][ C0] RIP: 0010:usb_submit_urb+0xff2/0x1910 [ 128.388132][ C0] Code: 2d c5 8a 89 ea e8 de 7b d7 03 e9 fb fb ff ff e8 a4 e0 9a fb c6 05 3f fc 97 07 01 48 c7 c7 60 2b c5 8a 48 89 de e8 de 93 d3 03 <0f> 0b e9 84 f0 ff ff e8 82 e0 9a fb eb 21 e8 7b e0 9a fb 44 8b 6c [ 128.407746][ C0] RSP: 0018:ffffc90000007780 EFLAGS: 00010046 [ 128.413854][ C0] RAX: 26eb987829f2d700 RBX: ffff888023547200 RCX: ffff888076930000 [ 128.421853][ C0] RDX: 0000000000000100 RSI: 0000000080000102 RDI: 0000000000000000 [ 128.429912][ C0] RBP: 000000000000000f R08: ffff8880b902795b R09: 1ffff11017204f2b [ 128.437882][ C0] R10: dffffc0000000000 R11: ffffed1017204f2c R12: dffffc0000000000 [ 128.445940][ C0] R13: 0000000000000a20 R14: ffff888023547208 R15: ffff888074dc3848 [ 128.454034][ C0] ? _raw_spin_lock+0x40/0x40 [ 128.458852][ C0] ? dummy_timer+0x86e/0x30b0 [ 128.463637][ C0] cm109_urb_irq_callback+0x701/0xc70 [ 128.469020][ C0] __usb_hcd_giveback_urb+0x35f/0x520 [ 128.474400][ C0] dummy_timer+0x880/0x30b0 [ 128.478913][ C0] ? verify_lock_unused+0x140/0x140 [ 128.484128][ C0] ? mark_lock+0x94/0x320 [ 128.488470][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 128.493514][ C0] ? dummy_free_streams+0x530/0x530 [ 128.498736][ C0] ? dummy_free_streams+0x530/0x530 [ 128.503939][ C0] call_timer_fn+0x17b/0x540 [ 128.508540][ C0] ? dummy_free_streams+0x530/0x530 [ 128.513771][ C0] ? __run_timers+0x800/0x800 [ 128.518458][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 128.523743][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 128.529123][ C0] ? dummy_free_streams+0x530/0x530 [ 128.534342][ C0] __run_timers+0x53e/0x800 [ 128.538871][ C0] ? detach_timer+0x2b0/0x2b0 [ 128.543566][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 128.549575][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 128.554446][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 128.559779][ C0] run_timer_softirq+0x63/0xf0 [ 128.564559][ C0] handle_softirqs+0x339/0x830 [ 128.569331][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 128.574208][ C0] ? do_softirq+0x210/0x210 [ 128.578723][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 128.583934][ C0] __irq_exit_rcu+0x13b/0x230 [ 128.588611][ C0] ? irq_exit_rcu+0x20/0x20 [ 128.593120][ C0] irq_exit_rcu+0x5/0x20 [ 128.597365][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 128.603003][ C0] [ 128.605943][ C0] [ 128.608892][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 128.614881][ C0] RIP: 0010:finish_lock_switch+0x134/0x280 [ 128.620691][ C0] Code: be ff ff ff ff e8 dc 60 68 08 85 c0 74 4a 4d 85 ff 75 66 0f 1f 44 00 00 48 89 df e8 86 cc 71 08 e8 81 e6 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 c9 09 fe ff 43 80 3c [ 128.640299][ C0] RSP: 0018:ffffc9000340f388 EFLAGS: 00000286 [ 128.646370][ C0] RAX: 26eb987829f2d700 RBX: ffff8880b903a340 RCX: 26eb987829f2d700 [ 128.654346][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3100 RDI: ffffffff8a7a0700 [ 128.662523][ C0] RBP: 1ffff11017207613 R08: ffff8880b903a343 R09: 1ffff11017207468 [ 128.670503][ C0] R10: dffffc0000000000 R11: ffffed1017207469 R12: 1ffff110172075c1 [ 128.678476][ C0] R13: dffffc0000000000 R14: ffff8880b903ae08 R15: 0000000000000000 [ 128.686473][ C0] finish_task_switch+0x12f/0x640 [ 128.691521][ C0] ? __switch_to_asm+0x34/0x60 [ 128.696291][ C0] __schedule+0x11f7/0x43c0 [ 128.700810][ C0] ? deref_stack_reg+0xd0/0x120 [ 128.705676][ C0] ? verify_lock_unused+0x140/0x140 [ 128.710937][ C0] ? release_firmware_map_entry+0x190/0x190 [ 128.716954][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 128.722955][ C0] ? lock_chain_count+0x20/0x20 [ 128.727814][ C0] ? preempt_schedule+0xbc/0xd0 [ 128.732668][ C0] preempt_schedule_common+0x82/0xd0 [ 128.737972][ C0] preempt_schedule+0xbc/0xd0 [ 128.742654][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 128.748476][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 128.754730][ C0] preempt_schedule_thunk+0x16/0x18 [ 128.759974][ C0] _raw_spin_unlock_irqrestore+0x10d/0x120 [ 128.765819][ C0] ? _raw_spin_unlock+0x40/0x40 [ 128.770711][ C0] ? do_exit+0x5a9/0x20c0 [ 128.775134][ C0] ? __x64_sys_exit_group+0x3b/0x40 [ 128.780334][ C0] ? do_syscall_64+0x4c/0xa0 [ 128.784947][ C0] debug_check_no_obj_freed+0x515/0x530 [ 128.790523][ C0] free_unref_page_prepare+0x237/0x6c0 [ 128.795999][ C0] free_unref_page_list+0x119/0x820 [ 128.801209][ C0] ? uncharge_page+0x490/0x490 [ 128.805989][ C0] ? free_unref_page_commit+0x4c0/0x4c0 [ 128.811576][ C0] ? uncharge_page+0x246/0x490 [ 128.816358][ C0] release_pages+0x186c/0x1be0 [ 128.821289][ C0] ? lru_cache_disable+0x30/0x30 [ 128.826250][ C0] tlb_finish_mmu+0x1b4/0x370 [ 128.830951][ C0] exit_mmap+0x3d0/0x640 [ 128.835211][ C0] ? vm_brk+0x20/0x20 [ 128.839204][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 128.844406][ C0] ? mm_update_next_owner+0x522/0x640 [ 128.849785][ C0] __mmput+0x115/0x3b0 [ 128.853855][ C0] exit_mm+0x5f7/0x770 [ 128.857944][ C0] ? do_exit+0x20c0/0x20c0 [ 128.862396][ C0] ? __ia32_sys_timer_delete+0x40/0x40 [ 128.867863][ C0] ? hrtimer_try_to_cancel+0x3c9/0x410 [ 128.873329][ C0] ? taskstats_exit+0x439/0xab0 [ 128.878183][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 128.883139][ C0] do_exit+0x5a9/0x20c0 [ 128.887388][ C0] ? put_task_struct+0x80/0x80 [ 128.892158][ C0] ? lock_chain_count+0x20/0x20 [ 128.897020][ C0] do_group_exit+0x12e/0x300 [ 128.901610][ C0] __x64_sys_exit_group+0x3b/0x40 [ 128.906639][ C0] do_syscall_64+0x4c/0xa0 [ 128.911085][ C0] ? clear_bhb_loop+0x30/0x80 [ 128.915762][ C0] ? clear_bhb_loop+0x30/0x80 [ 128.920450][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.926346][ C0] RIP: 0033:0x7f82aea216c5 [ 128.930854][ C0] Code: Unable to access opcode bytes at RIP 0x7f82aea2169b. [ 128.938231][ C0] RSP: 002b:00007ffc2081c4b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 128.946646][ C0] RAX: ffffffffffffffda RBX: 00007f82aeb22fe8 RCX: 00007f82aea216c5 [ 128.954628][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 128.962633][ C0] RBP: 0000000000000001 R08: 00007ffc2081c448 R09: 0000000000000000 [ 128.970648][ C0] R10: 00007ffc2081c2e0 R11: 0000000000000206 R12: 0000000000000000 [ 128.978647][ C0] R13: 0000000000000000 R14: 00007f82aeb21680 R15: 00007f82aeb23000 [ 128.986634][ C0] [ 128.990051][ C0] Kernel Offset: disabled [ 128.994610][ C0] Rebooting in 86400 seconds..