Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. 2026/07/27 07:33:22 parsed 1 programs 2026/07/27 07:33:22 serving rpc on tcp://42933 [ 91.064974][ T5641] cgroup: Unknown subsys name 'net' [ 91.157105][ T5641] cgroup: Unknown subsys name 'cpuset' [ 91.167313][ T5641] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.918399][ T809] cfg80211: failed to load regulatory.db [ 92.953295][ T5641] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.101329][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.109553][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.143241][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.151133][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.198301][ T5656] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.334574][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.342533][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.349952][ T5672] bridge_slave_0: entered allmulticast mode [ 97.357838][ T5672] bridge_slave_0: entered promiscuous mode [ 97.368990][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.376595][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.383980][ T5672] bridge_slave_1: entered allmulticast mode [ 97.391384][ T5672] bridge_slave_1: entered promiscuous mode [ 97.422765][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.435598][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.469835][ T5672] team0: Port device team_slave_0 added [ 97.478024][ T5672] team0: Port device team_slave_1 added [ 97.505116][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.512097][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.538069][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.551159][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.558235][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.584417][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.631309][ T5672] hsr_slave_0: entered promiscuous mode [ 97.638450][ T5672] hsr_slave_1: entered promiscuous mode [ 97.802279][ T5672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.817829][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.826803][ T5672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.836851][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.844891][ T5672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.857620][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.865972][ T5672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.876405][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.908650][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.916335][ T5672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.924331][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.931552][ T5672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.998887][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.019709][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.029073][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.046634][ T5672] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.062173][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.069428][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.087047][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.094352][ T3371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.458902][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.517358][ T5672] veth0_vlan: entered promiscuous mode [ 98.531608][ T5672] veth1_vlan: entered promiscuous mode [ 98.565872][ T5672] veth0_macvtap: entered promiscuous mode [ 98.576558][ T5672] veth1_macvtap: entered promiscuous mode [ 98.597706][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.614011][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.631156][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.645415][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.657949][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.667084][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.823919][ T1180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.916470][ T1180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.979406][ T1180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.086368][ T1180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.877476][ T5725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.887351][ T5725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.896393][ T5725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.904840][ T5725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.916240][ T5725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.187988][ T1180] bridge_slave_1: left allmulticast mode [ 101.194113][ T1180] bridge_slave_1: left promiscuous mode [ 101.201886][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.220417][ T1180] bridge_slave_0: left allmulticast mode [ 101.226193][ T1180] bridge_slave_0: left promiscuous mode [ 101.232242][ T1180] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.453047][ T1180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.478922][ T1180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.489704][ T1180] bond0 (unregistering): Released all slaves [ 101.699090][ T1180] hsr_slave_0: left promiscuous mode [ 101.725360][ T1180] hsr_slave_1: left promiscuous mode [ 101.748206][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.759946][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.772001][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.779825][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.798785][ T1180] veth1_macvtap: left promiscuous mode [ 101.805121][ T1180] veth0_macvtap: left promiscuous mode [ 101.810785][ T1180] veth1_vlan: left promiscuous mode [ 101.817105][ T1180] veth0_vlan: left promiscuous mode [ 102.031619][ T1180] team0 (unregistering): Port device team_slave_1 removed [ 102.052315][ T1180] team0 (unregistering): Port device team_slave_0 removed [ 102.182825][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 2026/07/27 07:33:39 executed programs: 0 [ 103.567459][ T5725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.580699][ T5725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.589274][ T5725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.598649][ T5725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.606388][ T5725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.697457][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 104.521008][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 104.839936][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.847338][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.855476][ T5796] bridge_slave_0: entered allmulticast mode [ 104.863519][ T5796] bridge_slave_0: entered promiscuous mode [ 104.873613][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.880863][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.888314][ T5796] bridge_slave_1: entered allmulticast mode [ 104.896398][ T5796] bridge_slave_1: entered promiscuous mode [ 104.943452][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.957955][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.004687][ T5796] team0: Port device team_slave_0 added [ 105.014118][ T5796] team0: Port device team_slave_1 added [ 105.057246][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.064357][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.090976][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.106061][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.114548][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.140753][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.212518][ T5796] hsr_slave_0: entered promiscuous mode [ 105.219771][ T5796] hsr_slave_1: entered promiscuous mode [ 105.287226][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 105.673737][ T5725] Bluetooth: hci0: command tx timeout [ 105.816754][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.829289][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.844397][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.858099][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.866551][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.878989][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.887904][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.899914][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.018072][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.044605][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.058738][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.065988][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.087960][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.095238][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.646729][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.711150][ T5796] veth0_vlan: entered promiscuous mode [ 106.729177][ T5796] veth1_vlan: entered promiscuous mode [ 106.774207][ T5796] veth0_macvtap: entered promiscuous mode [ 106.789252][ T5796] veth1_macvtap: entered promiscuous mode [ 106.819886][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.839052][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.859493][ T181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.885034][ T181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.907046][ T181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.915969][ T181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.001394][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.018571][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.060002][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.070799][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.397365][ T5362] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.563358][ T5362] usb 1-1: Using ep0 maxpacket: 16 [ 107.585448][ T5362] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 107.594011][ T5362] usb 1-1: config 0 has no interface number 0 [ 107.600904][ T5362] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.614989][ T5362] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 107.626206][ T5362] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 107.634655][ T5362] usb 1-1: Product: syz [ 107.638882][ T5362] usb 1-1: SerialNumber: syz [ 107.656665][ T5362] usb 1-1: config 0 descriptor?? [ 107.678937][ T5362] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 107.692619][ T5362] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 107.753392][ T5725] Bluetooth: hci0: command tx timeout [ 108.125493][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 108.132596][ C1] ------------[ cut here ]------------ [ 108.138245][ C1] URB ffff888071e57600 submitted while active [ 108.144362][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: syz.0.17/5898 [ 108.154336][ C1] Modules linked in: [ 108.158438][ C1] CPU: 1 UID: 0 PID: 5898 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 108.167593][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.177695][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 108.183218][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 99 e0 d2 fa 49 83 3e 00 74 40 e8 2e 4c 65 fa 48 8d 3d 67 c9 03 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 13 4c 65 fa eb 05 e8 0c 4c [ 108.202869][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00010046 [ 108.208982][ C1] RAX: ffffffff8761b7d2 RBX: ffff888071e57600 RCX: ffff888032cf5d00 [ 108.217002][ C1] RDX: 0000000000000100 RSI: ffff888071e57600 RDI: ffffffff90658140 [ 108.225015][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 108.233032][ C1] R10: dffffc0000000000 R11: fffff5200014113c R12: ffff88807abf8048 [ 108.241067][ C1] R13: ffff88807abf8030 R14: ffff888071e57608 R15: 0000000000000820 [ 108.249057][ C1] FS: 00005555848d9500(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 108.258009][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.264612][ C1] CR2: 00007fbbe5d568f0 CR3: 00000000736f6000 CR4: 00000000003526f0 [ 108.272620][ C1] Call Trace: [ 108.275921][ C1] [ 108.278795][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 108.284637][ C1] cm109_urb_irq_callback+0x6fb/0xca0 [ 108.290053][ C1] __usb_hcd_giveback_urb+0x374/0x530 [ 108.295455][ C1] dummy_timer+0xa91/0x4cf0 [ 108.299985][ C1] ? update_se+0x90/0x1020 [ 108.304456][ C1] ? __lock_acquire+0x683/0x2cf0 [ 108.309432][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.314838][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 108.319803][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 108.325636][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 108.330689][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 108.335926][ C1] hrtimer_run_softirq+0x17a/0x240 [ 108.341062][ C1] handle_softirqs+0x225/0x840 [ 108.345974][ C1] ? __irq_exit_rcu+0xca/0x220 [ 108.350780][ C1] __irq_exit_rcu+0xca/0x220 [ 108.355407][ C1] irq_exit_rcu+0x9/0x30 [ 108.359672][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 108.365411][ C1] [ 108.368362][ C1] [ 108.371314][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.377318][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 108.383753][ C1] Code: f7 e8 ad bc cf f5 f7 c3 00 02 00 00 74 05 e8 20 a1 fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 d2 c0 f5 65 8b 05 ad 82 99 07 85 c0 74 18 5b 41 5e e9 91 48 [ 108.403393][ C1] RSP: 0018:ffffc90003257b78 EFLAGS: 00000206 [ 108.409496][ C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001 [ 108.417489][ C1] RDX: 0000000000000006 RSI: ffffffff8e22d06b RDI: 0000000000000001 [ 108.425485][ C1] RBP: 0000000000000000 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 108.433487][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000246 [ 108.441487][ C1] R13: dffffc0000000000 R14: ffff888025fc8000 R15: ffff888029b58400 [ 108.449502][ C1] dummy_pullup+0xcf/0x120 [ 108.453948][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 108.459010][ C1] usb_gadget_disconnect_locked+0x126/0x480 [ 108.464943][ C1] gadget_unbind_driver+0xc2/0x410 [ 108.470126][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 108.475876][ C1] device_release_driver_internal+0x48b/0x880 [ 108.482006][ C1] driver_detach+0x1f3/0x2d0 [ 108.486641][ C1] bus_remove_driver+0x226/0x320 [ 108.491610][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 108.497362][ C1] raw_release+0xd7/0x260 [ 108.501716][ C1] ? __pfx_raw_release+0x10/0x10 [ 108.506676][ C1] __fput+0x418/0xa50 [ 108.510690][ C1] task_work_run+0x1d9/0x270 [ 108.515300][ C1] ? __pfx_task_work_run+0x10/0x10 [ 108.520436][ C1] exit_to_user_mode_loop+0x1fa/0x730 [ 108.525834][ C1] ? rcu_is_watching+0x15/0xb0 [ 108.530618][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.536722][ C1] do_syscall_64+0x353/0x580 [ 108.541354][ C1] ? trace_irq_disable+0x3b/0x140 [ 108.546404][ C1] ? clear_bhb_loop+0x40/0x90 [ 108.551107][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.557023][ C1] RIP: 0033:0x7f6bcf99de99 [ 108.561487][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.581127][ C1] RSP: 002b:00007fff63096ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 108.589577][ C1] RAX: 0000000000000000 RBX: 00007fff63096bd0 RCX: 00007f6bcf99de99 [ 108.597584][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 108.605583][ C1] RBP: 000000000001a257 R08: 0000000000000001 R09: 0000000000000000 [ 108.613578][ C1] R10: 0000001b2e320000 R11: 0000000000000246 R12: 0000000000000000 [ 108.621585][ C1] R13: 00007f6bcfc25fac R14: 00007f6bcfc25fa8 R15: 00007f6bcfc25fa0 [ 108.629612][ C1] [ 108.632723][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.640036][ C1] CPU: 1 UID: 0 PID: 5898 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 108.649178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.659444][ C1] Call Trace: [ 108.662754][ C1] [ 108.665671][ C1] vpanic+0x56c/0xa60 [ 108.669691][ C1] ? __pfx__printk+0x10/0x10 [ 108.674304][ C1] ? __pfx_vpanic+0x10/0x10 [ 108.678838][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 108.684154][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 108.689391][ C1] panic+0xc5/0xd0 [ 108.693148][ C1] ? __pfx_panic+0x10/0x10 [ 108.697622][ C1] __warn+0x315/0x4c0 [ 108.701621][ C1] ? usb_submit_urb+0x79/0x18b0 [ 108.706504][ C1] ? usb_submit_urb+0x79/0x18b0 [ 108.711382][ C1] __report_bug+0x276/0x570 [ 108.715916][ C1] ? usb_submit_urb+0x79/0x18b0 [ 108.720806][ C1] ? __pfx___report_bug+0x10/0x10 [ 108.725864][ C1] ? __lock_acquire+0x683/0x2cf0 [ 108.730840][ C1] report_bug_entry+0x19a/0x290 [ 108.735720][ C1] ? usb_submit_urb+0x7c/0x18b0 [ 108.740781][ C1] ? usb_submit_urb+0x81/0x18b0 [ 108.745669][ C1] handle_bug+0xce/0x200 [ 108.749938][ C1] exc_invalid_op+0x1a/0x50 [ 108.754561][ C1] asm_exc_invalid_op+0x1a/0x20 [ 108.759435][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 108.764923][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 99 e0 d2 fa 49 83 3e 00 74 40 e8 2e 4c 65 fa 48 8d 3d 67 c9 03 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 13 4c 65 fa eb 05 e8 0c 4c [ 108.784579][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00010046 [ 108.790673][ C1] RAX: ffffffff8761b7d2 RBX: ffff888071e57600 RCX: ffff888032cf5d00 [ 108.798671][ C1] RDX: 0000000000000100 RSI: ffff888071e57600 RDI: ffffffff90658140 [ 108.806686][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 108.814693][ C1] R10: dffffc0000000000 R11: fffff5200014113c R12: ffff88807abf8048 [ 108.822699][ C1] R13: ffff88807abf8030 R14: ffff888071e57608 R15: 0000000000000820 [ 108.830717][ C1] ? usb_submit_urb+0x72/0x18b0 [ 108.835614][ C1] ? usb_submit_urb+0x72/0x18b0 [ 108.840513][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 108.846362][ C1] cm109_urb_irq_callback+0x6fb/0xca0 [ 108.851794][ C1] __usb_hcd_giveback_urb+0x374/0x530 [ 108.857209][ C1] dummy_timer+0xa91/0x4cf0 [ 108.861755][ C1] ? update_se+0x90/0x1020 [ 108.866314][ C1] ? __lock_acquire+0x683/0x2cf0 [ 108.871300][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.876713][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 108.881701][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 108.887641][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 108.892612][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 108.897846][ C1] hrtimer_run_softirq+0x17a/0x240 [ 108.902990][ C1] handle_softirqs+0x225/0x840 [ 108.907792][ C1] ? __irq_exit_rcu+0xca/0x220 [ 108.912583][ C1] __irq_exit_rcu+0xca/0x220 [ 108.917233][ C1] irq_exit_rcu+0x9/0x30 [ 108.921499][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 108.927158][ C1] [ 108.930201][ C1] [ 108.933149][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.939147][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 108.945584][ C1] Code: f7 e8 ad bc cf f5 f7 c3 00 02 00 00 74 05 e8 20 a1 fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 d2 c0 f5 65 8b 05 ad 82 99 07 85 c0 74 18 5b 41 5e e9 91 48 [ 108.965221][ C1] RSP: 0018:ffffc90003257b78 EFLAGS: 00000206 [ 108.971325][ C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001 [ 108.979312][ C1] RDX: 0000000000000006 RSI: ffffffff8e22d06b RDI: 0000000000000001 [ 108.987307][ C1] RBP: 0000000000000000 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 108.995298][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 0000000000000246 [ 109.003303][ C1] R13: dffffc0000000000 R14: ffff888025fc8000 R15: ffff888029b58400 [ 109.011324][ C1] dummy_pullup+0xcf/0x120 [ 109.015779][ C1] ? __pfx_dummy_pullup+0x10/0x10 [ 109.020834][ C1] usb_gadget_disconnect_locked+0x126/0x480 [ 109.026773][ C1] gadget_unbind_driver+0xc2/0x410 [ 109.031916][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 109.037765][ C1] device_release_driver_internal+0x48b/0x880 [ 109.043864][ C1] driver_detach+0x1f3/0x2d0 [ 109.048508][ C1] bus_remove_driver+0x226/0x320 [ 109.053481][ C1] usb_gadget_unregister_driver+0x4e/0x70 [ 109.059233][ C1] raw_release+0xd7/0x260 [ 109.063582][ C1] ? __pfx_raw_release+0x10/0x10 [ 109.068540][ C1] __fput+0x418/0xa50 [ 109.072557][ C1] task_work_run+0x1d9/0x270 [ 109.077179][ C1] ? __pfx_task_work_run+0x10/0x10 [ 109.082321][ C1] exit_to_user_mode_loop+0x1fa/0x730 [ 109.087718][ C1] ? rcu_is_watching+0x15/0xb0 [ 109.092508][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.098627][ C1] do_syscall_64+0x353/0x580 [ 109.103244][ C1] ? trace_irq_disable+0x3b/0x140 [ 109.108317][ C1] ? clear_bhb_loop+0x40/0x90 [ 109.113020][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.119120][ C1] RIP: 0033:0x7f6bcf99de99 [ 109.123559][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.143185][ C1] RSP: 002b:00007fff63096ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 109.151621][ C1] RAX: 0000000000000000 RBX: 00007fff63096bd0 RCX: 00007f6bcf99de99 [ 109.159617][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 109.167605][ C1] RBP: 000000000001a257 R08: 0000000000000001 R09: 0000000000000000 [ 109.175593][ C1] R10: 0000001b2e320000 R11: 0000000000000246 R12: 0000000000000000 [ 109.183584][ C1] R13: 00007f6bcfc25fac R14: 00007f6bcfc25fa8 R15: 00007f6bcfc25fa0 [ 109.191704][ C1] [ 109.194926][ C1] Kernel Offset: disabled [ 109.199271][ C1] Rebooting in 86400 seconds..