Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts.
2026/08/20 11:06:18 parsed 1 programs
2026/08/20 11:06:18 serving rpc on tcp://45521
Setting up swapspace version 1, size = 127995904 bytes
[ 127.683769][ T6023] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 130.883363][ T3280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.895859][ T3280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.935258][ T3280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.944101][ T3280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 131.954484][ T4925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 131.965789][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 131.975100][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 131.990423][ T4925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 131.999500][ T4925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 132.197581][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.204290][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 134.229438][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state
[ 134.236671][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state
[ 134.243797][ T6149] bridge_slave_0: entered allmulticast mode
[ 134.251576][ T6149] bridge_slave_0: entered promiscuous mode
[ 134.259897][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state
[ 134.267265][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state
[ 134.274380][ T6149] bridge_slave_1: entered allmulticast mode
[ 134.282326][ T6149] bridge_slave_1: entered promiscuous mode
[ 134.314521][ T6149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 134.326761][ T6149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 134.360378][ T6149] team0: Port device team_slave_0 added
[ 134.368312][ T6149] team0: Port device team_slave_1 added
[ 134.398110][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 134.405078][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 134.431267][ T6149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 134.443600][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 134.450956][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 134.476871][ T6149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 134.526521][ T6149] hsr_slave_0: entered promiscuous mode
[ 134.532961][ T6149] hsr_slave_1: entered promiscuous mode
[ 135.056548][ T6149] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 135.079614][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 135.088461][ T6149] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 135.098990][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 135.108137][ T6149] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 135.120037][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 135.132413][ T6149] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 135.142262][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 135.248884][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0
[ 135.275104][ T6149] 8021q: adding VLAN 0 to HW filter on device team0
[ 135.290160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 135.297332][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 135.318126][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 135.325306][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 135.881584][ T6149] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 135.943587][ T6149] veth0_vlan: entered promiscuous mode
[ 135.962039][ T6149] veth1_vlan: entered promiscuous mode
[ 136.009414][ T6149] veth0_macvtap: entered promiscuous mode
[ 136.022849][ T6149] veth1_macvtap: entered promiscuous mode
[ 136.049479][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 136.065128][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 136.146402][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.161407][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.174877][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.204248][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.331455][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 136.437119][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 136.507855][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 136.620409][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/08/20 11:06:35 executed programs: 0
[ 137.321425][ T4925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 137.331599][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 137.339226][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 137.348674][ T4925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 137.356562][ T4925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 138.206303][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state
[ 138.222223][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state
[ 138.230047][ T6259] bridge_slave_0: entered allmulticast mode
[ 138.238042][ T6259] bridge_slave_0: entered promiscuous mode
[ 138.264334][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state
[ 138.277432][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state
[ 138.284668][ T6259] bridge_slave_1: entered allmulticast mode
[ 138.293374][ T6259] bridge_slave_1: entered promiscuous mode
[ 138.302607][ T12] bridge_slave_1: left allmulticast mode
[ 138.308367][ T12] bridge_slave_1: left promiscuous mode
[ 138.314169][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 138.324499][ T12] bridge_slave_0: left allmulticast mode
[ 138.330546][ T12] bridge_slave_0: left promiscuous mode
[ 138.337519][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 138.515704][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 138.527953][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 138.538783][ T12] bond0 (unregistering): Released all slaves
[ 138.580727][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 138.594578][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 138.659945][ T12] hsr_slave_0: left promiscuous mode
[ 138.666229][ T12] hsr_slave_1: left promiscuous mode
[ 138.672241][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 138.679733][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 138.689000][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 138.696479][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 138.712117][ T12] veth1_macvtap: left promiscuous mode
[ 138.717945][ T12] veth0_macvtap: left promiscuous mode
[ 138.723506][ T12] veth1_vlan: left promiscuous mode
[ 138.729216][ T12] veth0_vlan: left promiscuous mode
[ 139.029053][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 139.055688][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 139.262853][ T6259] team0: Port device team_slave_0 added
[ 139.288191][ T6259] team0: Port device team_slave_1 added
[ 139.345485][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 139.352470][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 139.388593][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 139.396493][ T4925] Bluetooth: hci0: command tx timeout
[ 139.408112][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 139.417028][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 139.443547][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 139.530468][ T6259] hsr_slave_0: entered promiscuous mode
[ 139.537921][ T6259] hsr_slave_1: entered promiscuous mode
[ 140.291542][ T6259] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 140.302587][ T6259] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 140.310829][ T6259] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 140.321309][ T6259] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 140.330442][ T6259] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 140.342888][ T6259] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 140.351197][ T6259] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 140.362591][ T6259] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 140.476162][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0
[ 140.501126][ T6259] 8021q: adding VLAN 0 to HW filter on device team0
[ 140.516955][ T3280] bridge0: port 1(bridge_slave_0) entered blocking state
[ 140.524098][ T3280] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 140.547861][ T3280] bridge0: port 2(bridge_slave_1) entered blocking state
[ 140.555036][ T3280] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 141.086325][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 141.149542][ T6259] veth0_vlan: entered promiscuous mode
[ 141.165168][ T6259] veth1_vlan: entered promiscuous mode
[ 141.209801][ T6259] veth0_macvtap: entered promiscuous mode
[ 141.220885][ T6259] veth1_macvtap: entered promiscuous mode
[ 141.252376][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 141.270956][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 141.327261][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.386292][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.410768][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 141.426312][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.458677][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.468229][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 141.479312][ T4925] Bluetooth: hci0: command tx timeout
[ 141.482747][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.511670][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.806079][ T981] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 141.987483][ T981] usb 1-1: New USB device found, idVendor=04b4, idProduct=3101, bcdDevice= 0.00
[ 141.998646][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 142.021656][ T981] dvb-usb: found a 'DVBWorld DVB-C 3101 USB2.0' in cold state, will try to load a firmware
[ 142.122025][ T981] usb 1-1: Direct firmware load for dvb-usb-dw3101.fw failed with error -2
[ 142.131821][ T981] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dw3101.fw
[ 142.225412][ T981] dvb-usb: downloading firmware from file 'dvb-usb-dw3101.fw'
[ 142.234711][ T981] dw2102: start downloading DW210X firmware
[ 142.242061][ T981] ==================================================================
[ 142.250118][ T981] BUG: KASAN: slab-out-of-bounds in dw210x_op_rw+0xb6/0x180
[ 142.257405][ T981] Read of size 64 at addr ffff8880226e9b80 by task kworker/0:3/981
[ 142.265271][ T981]
[ 142.267574][ T981] CPU: 0 UID: 0 PID: 981 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full)
[ 142.267594][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 142.267606][ T981] Workqueue: usb_hub_wq hub_event
[ 142.267628][ T981] Call Trace:
[ 142.267636][ T981]
[ 142.267643][ T981] dump_stack_lvl+0xe8/0x150
[ 142.267671][ T981] print_address_description+0x55/0x1e0
[ 142.267699][ T981] ? dw210x_op_rw+0xb6/0x180
[ 142.267721][ T981] print_report+0x58/0x70
[ 142.267743][ T981] kasan_report+0x117/0x150
[ 142.267762][ T981] ? dw210x_op_rw+0xb6/0x180
[ 142.267787][ T981] kasan_check_range+0x264/0x2c0
[ 142.267805][ T981] ? dw210x_op_rw+0xb6/0x180
[ 142.267827][ T981] __asan_memcpy+0x29/0x70
[ 142.267851][ T981] dw210x_op_rw+0xb6/0x180
[ 142.267881][ T981] dw2102_load_firmware+0x2b4/0x970
[ 142.267902][ T981] ? __pfx_dw2102_load_firmware+0x10/0x10
[ 142.267928][ T981] ? __pfx_dw2102_load_firmware+0x10/0x10
[ 142.267946][ T981] dvb_usb_download_firmware+0x1c3/0x270
[ 142.267976][ T981] ? __pfx__printk+0x10/0x10
[ 142.267994][ T981] ? __pfx_dvb_usb_download_firmware+0x10/0x10
[ 142.268023][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.268044][ T981] ? trace_kmalloc+0x2a/0xf0
[ 142.268068][ T981] ? dvb_usb_device_init+0x148/0x2570
[ 142.268088][ T981] dvb_usb_device_init+0xddf/0x2570
[ 142.268105][ T981] ? rcu_is_watching+0x16/0xb0
[ 142.268133][ T981] ? do_raw_spin_lock+0x12b/0x2f0
[ 142.268154][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.268178][ T981] ? __pfx_dvb_usb_device_init+0x10/0x10
[ 142.268196][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.268218][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.268238][ T981] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 142.268267][ T981] ? __pm_runtime_set_status+0x994/0xc80
[ 142.268292][ T981] dw2102_probe+0x8a/0x270
[ 142.268314][ T981] usb_probe_interface+0x653/0xc60
[ 142.268338][ T981] ? __pfx_usb_probe_interface+0x10/0x10
[ 142.268357][ T981] really_probe+0x254/0xae0
[ 142.268381][ T981] __driver_probe_device+0x1e8/0x360
[ 142.268404][ T981] driver_probe_device+0x4f/0x240
[ 142.268427][ T981] __device_attach_driver+0x270/0x410
[ 142.268451][ T981] bus_for_each_drv+0x258/0x2f0
[ 142.268477][ T981] ? __pfx___device_attach_driver+0x10/0x10
[ 142.268499][ T981] ? __pfx_bus_for_each_drv+0x10/0x10
[ 142.268526][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.268548][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.268568][ T981] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 142.268594][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.268617][ T981] __device_attach+0x2c4/0x450
[ 142.268636][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.268659][ T981] ? __pfx___device_attach+0x10/0x10
[ 142.268678][ T981] ? do_raw_spin_unlock+0xf5/0x200
[ 142.268700][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.268721][ T981] ? _raw_spin_unlock+0x28/0x50
[ 142.268744][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.268768][ T981] device_initial_probe+0xa1/0xd0
[ 142.268789][ T981] bus_probe_device+0x12a/0x220
[ 142.268817][ T981] device_add+0x7d7/0xb80
[ 142.268835][ T981] usb_set_configuration+0x1ad8/0x2180
[ 142.268869][ T981] usb_generic_driver_probe+0x8d/0x150
[ 142.268900][ T981] usb_probe_device+0x1c3/0x3b0
[ 142.268920][ T981] ? __pfx_usb_probe_device+0x10/0x10
[ 142.268938][ T981] really_probe+0x254/0xae0
[ 142.268961][ T981] __driver_probe_device+0x1e8/0x360
[ 142.268983][ T981] driver_probe_device+0x4f/0x240
[ 142.269007][ T981] __device_attach_driver+0x270/0x410
[ 142.269030][ T981] bus_for_each_drv+0x258/0x2f0
[ 142.269070][ T981] ? __pfx___device_attach_driver+0x10/0x10
[ 142.269092][ T981] ? __pfx_bus_for_each_drv+0x10/0x10
[ 142.269119][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269140][ T981] ? _raw_spin_unlock_irqrestore+0x76/0x80
[ 142.269166][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269189][ T981] __device_attach+0x2c4/0x450
[ 142.269210][ T981] ? __pfx___device_attach+0x10/0x10
[ 142.269231][ T981] ? do_raw_spin_unlock+0xf5/0x200
[ 142.269252][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269274][ T981] ? _raw_spin_unlock+0x28/0x50
[ 142.269298][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269321][ T981] device_initial_probe+0xa1/0xd0
[ 142.269342][ T981] bus_probe_device+0x12a/0x220
[ 142.269370][ T981] device_add+0x7d7/0xb80
[ 142.269388][ T981] usb_new_device+0x9aa/0x1690
[ 142.269418][ T981] ? __pfx_usb_new_device+0x10/0x10
[ 142.269445][ T981] ? _raw_spin_unlock_irq+0x23/0x50
[ 142.269472][ T981] hub_event+0x28e8/0x4d30
[ 142.269488][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269509][ T981] ? do_raw_spin_unlock+0xf5/0x200
[ 142.269552][ T981] ? __pfx_hub_event+0x10/0x10
[ 142.269568][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269593][ T981] ? rcu_is_watching+0x16/0xb0
[ 142.269609][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269631][ T981] ? process_scheduled_works+0xa1a/0x14c0
[ 142.269653][ T981] process_scheduled_works+0xa88/0x14c0
[ 142.269686][ T981] ? __pfx_process_scheduled_works+0x10/0x10
[ 142.269709][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269730][ T981] ? assign_work+0x3cf/0x5d0
[ 142.269751][ T981] worker_thread+0xa47/0xfb0
[ 142.269773][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269799][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269820][ T981] ? __kthread_parkme+0x71/0x1f0
[ 142.269847][ T981] kthread+0x38b/0x480
[ 142.269876][ T981] ? __pfx_worker_thread+0x10/0x10
[ 142.269896][ T981] ? __pfx_kthread+0x10/0x10
[ 142.269922][ T981] ret_from_fork+0x514/0xb70
[ 142.269949][ T981] ? __pfx_ret_from_fork+0x10/0x10
[ 142.269974][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.269995][ T981] ? __switch_to+0xc89/0x1420
[ 142.270018][ T981] ? __pfx_kthread+0x10/0x10
[ 142.270044][ T981] ret_from_fork_asm+0x1a/0x30
[ 142.270078][ T981]
[ 142.270085][ T981]
[ 142.835718][ T981] Allocated by task 981:
[ 142.839958][ T981] kasan_save_track+0x3e/0x80
[ 142.844643][ T981] __kasan_kmalloc+0x93/0xb0
[ 142.849237][ T981] __kmalloc_noprof+0x379/0x720
[ 142.854086][ T981] dw2102_load_firmware+0x175/0x970
[ 142.859275][ T981] dvb_usb_download_firmware+0x1c3/0x270
[ 142.864963][ T981] dvb_usb_device_init+0xddf/0x2570
[ 142.870149][ T981] dw2102_probe+0x8a/0x270
[ 142.874558][ T981] usb_probe_interface+0x653/0xc60
[ 142.879667][ T981] really_probe+0x254/0xae0
[ 142.884163][ T981] __driver_probe_device+0x1e8/0x360
[ 142.889439][ T981] driver_probe_device+0x4f/0x240
[ 142.894481][ T981] __device_attach_driver+0x270/0x410
[ 142.899844][ T981] bus_for_each_drv+0x258/0x2f0
[ 142.904694][ T981] __device_attach+0x2c4/0x450
[ 142.909446][ T981] device_initial_probe+0xa1/0xd0
[ 142.914468][ T981] bus_probe_device+0x12a/0x220
[ 142.919354][ T981] device_add+0x7d7/0xb80
[ 142.923679][ T981] usb_set_configuration+0x1ad8/0x2180
[ 142.929128][ T981] usb_generic_driver_probe+0x8d/0x150
[ 142.934588][ T981] usb_probe_device+0x1c3/0x3b0
[ 142.939465][ T981] really_probe+0x254/0xae0
[ 142.943961][ T981] __driver_probe_device+0x1e8/0x360
[ 142.949348][ T981] driver_probe_device+0x4f/0x240
[ 142.954397][ T981] __device_attach_driver+0x270/0x410
[ 142.959760][ T981] bus_for_each_drv+0x258/0x2f0
[ 142.964609][ T981] __device_attach+0x2c4/0x450
[ 142.969362][ T981] device_initial_probe+0xa1/0xd0
[ 142.974377][ T981] bus_probe_device+0x12a/0x220
[ 142.979225][ T981] device_add+0x7d7/0xb80
[ 142.983544][ T981] usb_new_device+0x9aa/0x1690
[ 142.988304][ T981] hub_event+0x28e8/0x4d30
[ 142.992710][ T981] process_scheduled_works+0xa88/0x14c0
[ 142.998248][ T981] worker_thread+0xa47/0xfb0
[ 143.002841][ T981] kthread+0x38b/0x480
[ 143.006911][ T981] ret_from_fork+0x514/0xb70
[ 143.011496][ T981] ret_from_fork_asm+0x1a/0x30
[ 143.016254][ T981]
[ 143.018560][ T981] The buggy address belongs to the object at ffff8880226e9b80
[ 143.018560][ T981] which belongs to the cache kmalloc-16 of size 16
[ 143.032426][ T981] The buggy address is located 0 bytes inside of
[ 143.032426][ T981] allocated 16-byte region [ffff8880226e9b80, ffff8880226e9b90)
[ 143.046300][ T981]
[ 143.048613][ T981] The buggy address belongs to the physical page:
[ 143.055011][ T981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x226e9
[ 143.063767][ T981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 143.070905][ T981] page_type: f5(slab)
[ 143.074901][ T981] raw: 00fff00000000000 ffff88801b004640 dead000000000100 dead000000000122
[ 143.083475][ T981] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000
[ 143.092044][ T981] page dumped because: kasan: bad access detected
[ 143.098442][ T981] page_owner tracks the page as allocated
[ 143.104176][ T981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2980497121, free_ts 0
[ 143.123213][ T981] register_dummy_stack+0x98/0x100
[ 143.128334][ T981] init_page_owner+0x2e/0x5f0
[ 143.133011][ T981] page_ext_init+0x511/0x550
[ 143.137602][ T981] mm_core_init+0x97/0xb0
[ 143.141925][ T981] page_owner free stack trace missing
[ 143.147270][ T981]
[ 143.149578][ T981] Memory state around the buggy address:
[ 143.155202][ T981] ffff8880226e9a80: fa fb fc fc 00 00 fc fc 00 00 fc fc 00 02 fc fc
[ 143.163690][ T981] ffff8880226e9b00: fa fb fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc
[ 143.171740][ T981] >ffff8880226e9b80: 00 00 fc fc fa fb fc fc 00 00 fc fc fa fb fc fc
[ 143.179783][ T981] ^
[ 143.184359][ T981] ffff8880226e9c00: 00 00 fc fc 00 00 fc fc fa fb fc fc fa fb fc fc
[ 143.192435][ T981] ffff8880226e9c80: fa fb fc fc fa fb fc fc 00 00 fc fc fa fb fc fc
[ 143.200481][ T981] ==================================================================
[ 143.227998][ T981] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 143.235230][ T981] CPU: 0 UID: 0 PID: 981 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full)
[ 143.244512][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 143.254652][ T981] Workqueue: usb_hub_wq hub_event
[ 143.259696][ T981] Call Trace:
[ 143.263058][ T981]
[ 143.265984][ T981] vpanic+0x56d/0xa60
[ 143.269990][ T981] ? __pfx_vpanic+0x10/0x10
[ 143.274514][ T981] panic+0xc5/0xd0
[ 143.278246][ T981] ? __pfx_panic+0x10/0x10
[ 143.282699][ T981] ? preempt_schedule_thunk+0x16/0x40
[ 143.288068][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.293698][ T981] ? preempt_schedule_thunk+0x16/0x40
[ 143.299067][ T981] ? dw210x_op_rw+0xb6/0x180
[ 143.303654][ T981] check_panic_on_warn+0x89/0xb0
[ 143.308599][ T981] ? dw210x_op_rw+0xb6/0x180
[ 143.313190][ T981] end_report+0x73/0x170
[ 143.317423][ T981] ? dw210x_op_rw+0xb6/0x180
[ 143.322006][ T981] kasan_report+0x128/0x150
[ 143.326500][ T981] ? dw210x_op_rw+0xb6/0x180
[ 143.331094][ T981] kasan_check_range+0x264/0x2c0
[ 143.336021][ T981] ? dw210x_op_rw+0xb6/0x180
[ 143.340607][ T981] __asan_memcpy+0x29/0x70
[ 143.345020][ T981] dw210x_op_rw+0xb6/0x180
[ 143.349434][ T981] dw2102_load_firmware+0x2b4/0x970
[ 143.354670][ T981] ? __pfx_dw2102_load_firmware+0x10/0x10
[ 143.360397][ T981] ? __pfx_dw2102_load_firmware+0x10/0x10
[ 143.366106][ T981] dvb_usb_download_firmware+0x1c3/0x270
[ 143.371780][ T981] ? __pfx__printk+0x10/0x10
[ 143.376364][ T981] ? __pfx_dvb_usb_download_firmware+0x10/0x10
[ 143.382524][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.388146][ T981] ? trace_kmalloc+0x2a/0xf0
[ 143.392735][ T981] ? dvb_usb_device_init+0x148/0x2570
[ 143.398100][ T981] dvb_usb_device_init+0xddf/0x2570
[ 143.403290][ T981] ? rcu_is_watching+0x16/0xb0
[ 143.408088][ T981] ? do_raw_spin_lock+0x12b/0x2f0
[ 143.413107][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.418737][ T981] ? __pfx_dvb_usb_device_init+0x10/0x10
[ 143.424363][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.429991][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.435650][ T981] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 143.441458][ T981] ? __pm_runtime_set_status+0x994/0xc80
[ 143.447085][ T981] dw2102_probe+0x8a/0x270
[ 143.451497][ T981] usb_probe_interface+0x653/0xc60
[ 143.456605][ T981] ? __pfx_usb_probe_interface+0x10/0x10
[ 143.462227][ T981] really_probe+0x254/0xae0
[ 143.466729][ T981] __driver_probe_device+0x1e8/0x360
[ 143.472009][ T981] driver_probe_device+0x4f/0x240
[ 143.477029][ T981] __device_attach_driver+0x270/0x410
[ 143.482486][ T981] bus_for_each_drv+0x258/0x2f0
[ 143.487335][ T981] ? __pfx___device_attach_driver+0x10/0x10
[ 143.493225][ T981] ? __pfx_bus_for_each_drv+0x10/0x10
[ 143.498592][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.504219][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.509852][ T981] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 143.515660][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.521288][ T981] __device_attach+0x2c4/0x450
[ 143.526046][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.531678][ T981] ? __pfx___device_attach+0x10/0x10
[ 143.536954][ T981] ? do_raw_spin_unlock+0xf5/0x200
[ 143.542061][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.547685][ T981] ? _raw_spin_unlock+0x28/0x50
[ 143.552533][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.558159][ T981] device_initial_probe+0xa1/0xd0
[ 143.563180][ T981] bus_probe_device+0x12a/0x220
[ 143.568044][ T981] device_add+0x7d7/0xb80
[ 143.572366][ T981] usb_set_configuration+0x1ad8/0x2180
[ 143.577827][ T981] usb_generic_driver_probe+0x8d/0x150
[ 143.583294][ T981] usb_probe_device+0x1c3/0x3b0
[ 143.588227][ T981] ? __pfx_usb_probe_device+0x10/0x10
[ 143.593588][ T981] really_probe+0x254/0xae0
[ 143.598088][ T981] __driver_probe_device+0x1e8/0x360
[ 143.603389][ T981] driver_probe_device+0x4f/0x240
[ 143.608409][ T981] __device_attach_driver+0x270/0x410
[ 143.613773][ T981] bus_for_each_drv+0x258/0x2f0
[ 143.618630][ T981] ? __pfx___device_attach_driver+0x10/0x10
[ 143.624517][ T981] ? __pfx_bus_for_each_drv+0x10/0x10
[ 143.629921][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.635547][ T981] ? _raw_spin_unlock_irqrestore+0x76/0x80
[ 143.641355][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.646982][ T981] __device_attach+0x2c4/0x450
[ 143.651749][ T981] ? __pfx___device_attach+0x10/0x10
[ 143.657029][ T981] ? do_raw_spin_unlock+0xf5/0x200
[ 143.662135][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.667759][ T981] ? _raw_spin_unlock+0x28/0x50
[ 143.672692][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.678317][ T981] device_initial_probe+0xa1/0xd0
[ 143.683372][ T981] bus_probe_device+0x12a/0x220
[ 143.688230][ T981] device_add+0x7d7/0xb80
[ 143.692555][ T981] usb_new_device+0x9aa/0x1690
[ 143.697337][ T981] ? __pfx_usb_new_device+0x10/0x10
[ 143.702635][ T981] ? _raw_spin_unlock_irq+0x23/0x50
[ 143.707831][ T981] hub_event+0x28e8/0x4d30
[ 143.712237][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.717864][ T981] ? do_raw_spin_unlock+0xf5/0x200
[ 143.722995][ T981] ? __pfx_hub_event+0x10/0x10
[ 143.727747][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.733380][ T981] ? rcu_is_watching+0x16/0xb0
[ 143.738135][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.743763][ T981] ? process_scheduled_works+0xa1a/0x14c0
[ 143.749472][ T981] process_scheduled_works+0xa88/0x14c0
[ 143.755026][ T981] ? __pfx_process_scheduled_works+0x10/0x10
[ 143.760999][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.766626][ T981] ? assign_work+0x3cf/0x5d0
[ 143.771243][ T981] worker_thread+0xa47/0xfb0
[ 143.775914][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.781545][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.787168][ T981] ? __kthread_parkme+0x71/0x1f0
[ 143.792105][ T981] kthread+0x38b/0x480
[ 143.796172][ T981] ? __pfx_worker_thread+0x10/0x10
[ 143.801273][ T981] ? __pfx_kthread+0x10/0x10
[ 143.805862][ T981] ret_from_fork+0x514/0xb70
[ 143.810451][ T981] ? __pfx_ret_from_fork+0x10/0x10
[ 143.815559][ T981] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.821187][ T981] ? __switch_to+0xc89/0x1420
[ 143.825858][ T981] ? __pfx_kthread+0x10/0x10
[ 143.830450][ T981] ret_from_fork_asm+0x1a/0x30
[ 143.835310][ T981]
[ 143.838536][ T981] Kernel Offset: disabled
[ 143.842866][ T981] Rebooting in 86400 seconds..