ci-upstream-kasan-gce-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce-root/syz-executor1250741889 <...> Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-gce-root/syz-executor1250741889", ["ci-upstream-kasan-gce-root/syz-executor1250741889"], 0x7ffdc23a2b70 /* 10 vars */) = 0 brk(NULL) = 0x55557dfc5000 brk(0x55557dfc5d80) = 0x55557dfc5d80 arch_prctl(ARCH_SET_FS, 0x55557dfc5400) = 0 set_tid_address(0x55557dfc56d0) = 5631 set_robust_list(0x55557dfc56e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce-root/syz-executor1250741889", 4096) = 55 getrandom("\x29\x9b\x6e\x62\xab\x7f\x0f\x22", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557dfc5d80 brk(0x55557dfe6d80) = 0x55557dfe6d80 brk(0x55557dfe7000) = 0x55557dfe7000 mprotect(0x7fbf6a48e000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce-root/strace-static-x86_64: Process 5632 attached [pid 5632] set_robust_list(0x55557dfc56e0, 24 [pid 5631] <... clone resumed>, child_tidptr=0x55557dfc56d0) = 5632 [pid 5632] <... set_robust_list resumed>) = 0 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5632] setpgid(0, 0) = 0 [pid 5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1000", 4) = 4 [pid 5632] close(3) = 0 [pid 5632] write(1, "executing program\n", 18) = 18 executing program [pid 5632] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5632] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb8d90a50) = 0 [pid 5632] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb8d8fa40) = 18 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [ 90.296693][ T803] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb8d8fa40) = 18 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb8d8fa40) = 9 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcb8d8fa40) = 32 [pid 5632] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0xfa) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fbf6a494b4c) = 0 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fbf6a494b5c) = 10 [pid 5632] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcb8d8fa40) = 0 [ 90.472352][ T803] usb 1-1: New USB device found, idVendor=04b4, idProduct=3101, bcdDevice= 0.00 [ 90.481693][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.538185][ T803] dvb-usb: found a 'DVBWorld DVB-C 3101 USB2.0' in cold state, will try to load a firmware [ 90.565002][ T803] usb 1-1: Direct firmware load for dvb-usb-dw3101.fw failed with error -2 [ 90.573760][ T803] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dw3101.fw [pid 5632] mkdirat(AT_FDCWD, "./sys", 0755) = 0 [pid 5632] mount(NULL, "./sys", "sysfs", 0, NULL) = 0 [pid 5632] openat(AT_FDCWD, "./sys/class/firmware/dvb-usb-dw3101.fw/loading", O_RDWR) = 4 [pid 5632] write(4, "1", 1) = 1 [pid 5632] openat(AT_FDCWD, "./sys/class/firmware/dvb-usb-dw3101.fw/data", O_RDWR) = 5 [pid 5632] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16 [pid 5632] write(4, "0", 1) = 1 [pid 5632] exit_group(0) = ? [pid 5632] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5632, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce-root/strace-static-x86_64: Process 5637 attached [ 90.806353][ T803] dvb-usb: downloading firmware from file 'dvb-usb-dw3101.fw' [ 90.814416][ T803] dw2102: start downloading DW210X firmware [ 90.823488][ T803] ================================================================== [ 90.831548][ T803] BUG: KASAN: slab-out-of-bounds in dw210x_op_rw+0xb6/0x180 [ 90.838866][ T803] Read of size 64 at addr ffff88802bcf2ba0 by task kworker/1:2/803 [ 90.846748][ T803] [ 90.849059][ T803] CPU: 1 UID: 0 PID: 803 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 90.849082][ T803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.849096][ T803] Workqueue: usb_hub_wq hub_event [ 90.849129][ T803] Call Trace: [ 90.849138][ T803] [ 90.849147][ T803] dump_stack_lvl+0xe8/0x150 [ 90.849182][ T803] print_address_description+0x55/0x1e0 [ 90.849214][ T803] ? dw210x_op_rw+0xb6/0x180 [ 90.849241][ T803] print_report+0x58/0x70 [ 90.849270][ T803] kasan_report+0x117/0x150 [ 90.849306][ T803] ? dw210x_op_rw+0xb6/0x180 [ 90.849337][ T803] kasan_check_range+0x264/0x2c0 [ 90.849371][ T803] ? dw210x_op_rw+0xb6/0x180 [ 90.849399][ T803] __asan_memcpy+0x29/0x70 [ 90.849427][ T803] dw210x_op_rw+0xb6/0x180 [ 90.849457][ T803] dw2102_load_firmware+0x2b4/0x970 [ 90.849483][ T803] ? __pfx_dw2102_load_firmware+0x10/0x10 [ 90.849515][ T803] ? __pfx_dw2102_load_firmware+0x10/0x10 [ 90.849539][ T803] dvb_usb_download_firmware+0x1c3/0x270 [ 90.849562][ T803] ? __pfx__printk+0x10/0x10 [ 90.849586][ T803] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 90.849608][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.849634][ T803] ? trace_kmalloc+0x2a/0xf0 [ 90.849662][ T803] ? dvb_usb_device_init+0x148/0x2570 [ 90.849687][ T803] dvb_usb_device_init+0xddf/0x2570 [ 90.849708][ T803] ? rcu_is_watching+0x15/0xb0 [ 90.849740][ T803] ? do_raw_spin_lock+0x12b/0x2f0 [ 90.849766][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.849795][ T803] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 90.849817][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.849842][ T803] ? lockdep_hardirqs_on+0x7a/0x110 [ 90.849870][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.849896][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 90.849926][ T803] ? __pm_runtime_set_status+0x994/0xc80 [ 90.849958][ T803] dw2102_probe+0x8a/0x270 [ 90.849985][ T803] usb_probe_interface+0x653/0xc60 [ 90.850016][ T803] ? __pfx_usb_probe_interface+0x10/0x10 [ 90.850040][ T803] really_probe+0x254/0xae0 [ 90.850072][ T803] __driver_probe_device+0x1e8/0x360 [ 90.850102][ T803] driver_probe_device+0x4f/0x240 [ 90.850133][ T803] __device_attach_driver+0x270/0x410 [ 90.850165][ T803] bus_for_each_drv+0x258/0x2f0 [ 90.850186][ T803] ? __pfx___device_attach_driver+0x10/0x10 [ 90.850216][ T803] ? __pfx_bus_for_each_drv+0x10/0x10 [ 90.850237][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.850262][ T803] ? lockdep_hardirqs_on+0x7a/0x110 [ 90.850289][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.850314][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 90.850339][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.850366][ T803] __device_attach+0x2c4/0x450 [ 90.850392][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.850420][ T803] ? __pfx___device_attach+0x10/0x10 [ 90.850446][ T803] ? do_raw_spin_unlock+0xf5/0x210 [ 90.850473][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.850498][ T803] ? _raw_spin_unlock+0x28/0x50 [ 90.850520][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.850547][ T803] device_initial_probe+0xa1/0xd0 [ 90.850576][ T803] bus_probe_device+0x12a/0x220 [ 90.850599][ T803] device_add+0x7d7/0xb80 [ 90.850625][ T803] usb_set_configuration+0x1ad8/0x2180 [ 90.850662][ T803] usb_generic_driver_probe+0x8d/0x150 [ 90.850686][ T803] usb_probe_device+0x1c3/0x3b0 [ 90.850712][ T803] ? __pfx_usb_probe_device+0x10/0x10 [ 90.850736][ T803] really_probe+0x254/0xae0 [ 90.850767][ T803] __driver_probe_device+0x1e8/0x360 [ 90.850797][ T803] driver_probe_device+0x4f/0x240 [ 90.850828][ T803] __device_attach_driver+0x270/0x410 [ 90.850860][ T803] bus_for_each_drv+0x258/0x2f0 [ 90.850881][ T803] ? __pfx___device_attach_driver+0x10/0x10 [ 90.850915][ T803] ? __pfx_bus_for_each_drv+0x10/0x10 [ 90.850936][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.850961][ T803] ? lockdep_hardirqs_on+0x7a/0x110 [ 90.850988][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.851013][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 90.851038][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.851065][ T803] __device_attach+0x2c4/0x450 [ 90.851094][ T803] ? __pfx___device_attach+0x10/0x10 [ 90.851121][ T803] ? do_raw_spin_unlock+0xf5/0x210 [ 90.851148][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.851173][ T803] ? _raw_spin_unlock+0x28/0x50 [ 90.851195][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.851222][ T803] device_initial_probe+0xa1/0xd0 [ 90.851251][ T803] bus_probe_device+0x12a/0x220 [ 90.851273][ T803] device_add+0x7d7/0xb80 [ 90.851299][ T803] usb_new_device+0x99d/0x1620 [ 90.851335][ T803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.851366][ T803] ? __pfx_usb_new_device+0x10/0x10 [ 90.851399][ T803] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.851426][ T803] hub_event+0x28e8/0x4d30 [ 90.851447][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.851472][ T803] ? do_raw_spin_unlock+0xf5/0x210 [ 90.851523][ T803] ? __pfx_hub_event+0x10/0x10 [ 90.851544][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.851573][ T803] ? rcu_is_watching+0x15/0xb0 [ 90.851594][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.851623][ T803] ? process_scheduled_works+0xa20/0x14e0 [ 90.851649][ T803] process_scheduled_works+0xa8e/0x14e0 [ 90.851690][ T803] ? __pfx_process_scheduled_works+0x10/0x10 [ 90.851719][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.851744][ T803] ? assign_work+0x3cf/0x5d0 [ 90.851771][ T803] worker_thread+0xa47/0xfb0 [ 90.851807][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.851838][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.851863][ T803] ? __kthread_parkme+0x71/0x1f0 [ 90.851897][ T803] kthread+0x388/0x470 [ 90.851933][ T803] ? __pfx_worker_thread+0x10/0x10 [ 90.851959][ T803] ? __pfx_kthread+0x10/0x10 [ 90.851991][ T803] ret_from_fork+0x514/0xb70 [ 90.852027][ T803] ? __pfx_ret_from_fork+0x10/0x10 [ 90.852059][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.852084][ T803] ? __switch_to+0xc89/0x1420 [ 90.852113][ T803] ? __pfx_kthread+0x10/0x10 [ 90.852146][ T803] ret_from_fork_asm+0x1a/0x30 [ 90.852175][ T803] [ 90.852182][ T803] [ 91.443450][ T803] Allocated by task 803: [ 91.447678][ T803] kasan_save_track+0x3e/0x80 [ 91.452360][ T803] __kasan_kmalloc+0x93/0xb0 [ 91.456955][ T803] __kmalloc_noprof+0x375/0x720 [ 91.461803][ T803] dw2102_load_firmware+0x175/0x970 [ 91.466995][ T803] dvb_usb_download_firmware+0x1c3/0x270 [ 91.472622][ T803] dvb_usb_device_init+0xddf/0x2570 [ 91.477811][ T803] dw2102_probe+0x8a/0x270 [ 91.482223][ T803] usb_probe_interface+0x653/0xc60 [ 91.487328][ T803] really_probe+0x254/0xae0 [ 91.491829][ T803] __driver_probe_device+0x1e8/0x360 [ 91.497115][ T803] driver_probe_device+0x4f/0x240 [ 91.502142][ T803] __device_attach_driver+0x270/0x410 [ 91.507509][ T803] bus_for_each_drv+0x258/0x2f0 [ 91.512349][ T803] __device_attach+0x2c4/0x450 [ 91.517192][ T803] device_initial_probe+0xa1/0xd0 [ 91.522212][ T803] bus_probe_device+0x12a/0x220 [ 91.527050][ T803] device_add+0x7d7/0xb80 [ 91.531369][ T803] usb_set_configuration+0x1ad8/0x2180 [ 91.536856][ T803] usb_generic_driver_probe+0x8d/0x150 [ 91.542312][ T803] usb_probe_device+0x1c3/0x3b0 [ 91.547153][ T803] really_probe+0x254/0xae0 [ 91.551658][ T803] __driver_probe_device+0x1e8/0x360 [ 91.556938][ T803] driver_probe_device+0x4f/0x240 [ 91.561958][ T803] __device_attach_driver+0x270/0x410 [ 91.567326][ T803] bus_for_each_drv+0x258/0x2f0 [ 91.572168][ T803] __device_attach+0x2c4/0x450 [ 91.576927][ T803] device_initial_probe+0xa1/0xd0 [ 91.581947][ T803] bus_probe_device+0x12a/0x220 [ 91.586784][ T803] device_add+0x7d7/0xb80 [ 91.591109][ T803] usb_new_device+0x99d/0x1620 [ 91.595878][ T803] hub_event+0x28e8/0x4d30 [ 91.600280][ T803] process_scheduled_works+0xa8e/0x14e0 [ 91.605819][ T803] worker_thread+0xa47/0xfb0 [ 91.610402][ T803] kthread+0x388/0x470 [ 91.614515][ T803] ret_from_fork+0x514/0xb70 [ 91.619147][ T803] ret_from_fork_asm+0x1a/0x30 [ 91.623899][ T803] [ 91.626205][ T803] The buggy address belongs to the object at ffff88802bcf2ba0 [ 91.626205][ T803] which belongs to the cache kmalloc-16 of size 16 [ 91.640072][ T803] The buggy address is located 0 bytes inside of [ 91.640072][ T803] allocated 16-byte region [ffff88802bcf2ba0, ffff88802bcf2bb0) [ 91.653951][ T803] [ 91.656266][ T803] The buggy address belongs to the physical page: [ 91.662841][ T803] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802bcf2600 pfn:0x2bcf2 [ 91.672915][ T803] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 91.680977][ T803] page_type: f5(slab) [ 91.684952][ T803] raw: 00fff00000000200 ffff88801b001640 ffff88801b000408 ffffea0000af2d50 [ 91.693529][ T803] raw: ffff88802bcf2600 000000080080007a 00000000f5000000 0000000000000000 [ 91.702100][ T803] page dumped because: kasan: bad access detected [ 91.708499][ T803] page_owner tracks the page as allocated [ 91.714194][ T803] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16259999448, free_ts 0 [ 91.733330][ T803] register_dummy_stack+0x98/0x100 [ 91.738457][ T803] init_page_owner+0x2e/0x5f0 [ 91.743157][ T803] page_ext_init+0x509/0x550 [ 91.747750][ T803] mm_core_init+0x97/0xb0 [ 91.752077][ T803] page_owner free stack trace missing [ 91.757424][ T803] [ 91.759730][ T803] Memory state around the buggy address: [ 91.765339][ T803] ffff88802bcf2a80: 00 00 fc fc fa fb fc fc 00 01 fc fc 00 01 fc fc [ 91.773388][ T803] ffff88802bcf2b00: 00 01 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 91.781442][ T803] >ffff88802bcf2b80: 00 04 fc fc 00 00 fc fc 00 00 fc fc fa fb fc fc [ 91.789575][ T803] ^ [ 91.795189][ T803] ffff88802bcf2c00: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [pid 5637] set_robust_list(0x55557dfc56e0, 24 [pid 5631] <... clone resumed>, child_tidptr=0x55557dfc56d0) = 5637 [pid 5637] <... set_robust_list resumed>) = 0 [pid 5631] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5631] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5637] setpgid(0, 0) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1000", 4) = 4 [pid 5637] close(3) = 0 [pid 5637] write(1, "executing program\n", 18) = 18 executing program [pid 5637] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 5637] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcb8d90a50) = 0 [pid 5637] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5637] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcb8d90a50) = 0 [ 91.803242][ T803] ffff88802bcf2c80: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 91.811287][ T803] ================================================================== [ 91.852562][ T803] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.859860][ T803] CPU: 1 UID: 0 PID: 803 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 91.869153][ T803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 91.879203][ T803] Workqueue: usb_hub_wq hub_event [ 91.884231][ T803] Call Trace: [ 91.887525][ T803] [ 91.890445][ T803] vpanic+0x56c/0xa60 [ 91.894433][ T803] ? __pfx_vpanic+0x10/0x10 [ 91.898942][ T803] panic+0xc5/0xd0 [ 91.902667][ T803] ? __pfx_panic+0x10/0x10 [ 91.907089][ T803] ? preempt_schedule_thunk+0x16/0x40 [ 91.912468][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.918094][ T803] ? preempt_schedule_thunk+0x16/0x40 [ 91.923465][ T803] ? dw210x_op_rw+0xb6/0x180 [ 91.928063][ T803] check_panic_on_warn+0x89/0xb0 [ 91.933008][ T803] ? dw210x_op_rw+0xb6/0x180 [ 91.937594][ T803] end_report+0x73/0x170 [ 91.941839][ T803] ? dw210x_op_rw+0xb6/0x180 [ 91.946457][ T803] kasan_report+0x128/0x150 [ 91.950966][ T803] ? dw210x_op_rw+0xb6/0x180 [ 91.955660][ T803] kasan_check_range+0x264/0x2c0 [ 91.960601][ T803] ? dw210x_op_rw+0xb6/0x180 [ 91.965186][ T803] __asan_memcpy+0x29/0x70 [ 91.969600][ T803] dw210x_op_rw+0xb6/0x180 [ 91.974041][ T803] dw2102_load_firmware+0x2b4/0x970 [ 91.979234][ T803] ? __pfx_dw2102_load_firmware+0x10/0x10 [ 91.984963][ T803] ? __pfx_dw2102_load_firmware+0x10/0x10 [ 91.990672][ T803] dvb_usb_download_firmware+0x1c3/0x270 [ 91.996297][ T803] ? __pfx__printk+0x10/0x10 [ 92.000903][ T803] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 92.007050][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.012678][ T803] ? trace_kmalloc+0x2a/0xf0 [ 92.017264][ T803] ? dvb_usb_device_init+0x148/0x2570 [ 92.022670][ T803] dvb_usb_device_init+0xddf/0x2570 [ 92.027859][ T803] ? rcu_is_watching+0x15/0xb0 [ 92.032632][ T803] ? do_raw_spin_lock+0x12b/0x2f0 [ 92.037695][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.043325][ T803] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 92.048948][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.054576][ T803] ? lockdep_hardirqs_on+0x7a/0x110 [ 92.059774][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.065400][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 92.071201][ T803] ? __pm_runtime_set_status+0x994/0xc80 [ 92.076838][ T803] dw2102_probe+0x8a/0x270 [ 92.081264][ T803] usb_probe_interface+0x653/0xc60 [ 92.086378][ T803] ? __pfx_usb_probe_interface+0x10/0x10 [ 92.092032][ T803] really_probe+0x254/0xae0 [ 92.096540][ T803] __driver_probe_device+0x1e8/0x360 [ 92.101832][ T803] driver_probe_device+0x4f/0x240 [ 92.106864][ T803] __device_attach_driver+0x270/0x410 [ 92.112246][ T803] bus_for_each_drv+0x258/0x2f0 [ 92.117091][ T803] ? __pfx___device_attach_driver+0x10/0x10 [ 92.122990][ T803] ? __pfx_bus_for_each_drv+0x10/0x10 [ 92.128359][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.133991][ T803] ? lockdep_hardirqs_on+0x7a/0x110 [ 92.139193][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.144830][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 92.150645][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.156290][ T803] __device_attach+0x2c4/0x450 [ 92.161055][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.166690][ T803] ? __pfx___device_attach+0x10/0x10 [ 92.171976][ T803] ? do_raw_spin_unlock+0xf5/0x210 [ 92.177123][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.182750][ T803] ? _raw_spin_unlock+0x28/0x50 [ 92.187594][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.193225][ T803] device_initial_probe+0xa1/0xd0 [ 92.198288][ T803] bus_probe_device+0x12a/0x220 [ 92.203167][ T803] device_add+0x7d7/0xb80 [ 92.207494][ T803] usb_set_configuration+0x1ad8/0x2180 [ 92.212965][ T803] usb_generic_driver_probe+0x8d/0x150 [ 92.218421][ T803] usb_probe_device+0x1c3/0x3b0 [ 92.223275][ T803] ? __pfx_usb_probe_device+0x10/0x10 [ 92.228661][ T803] really_probe+0x254/0xae0 [ 92.233175][ T803] __driver_probe_device+0x1e8/0x360 [ 92.238469][ T803] driver_probe_device+0x4f/0x240 [ 92.243506][ T803] __device_attach_driver+0x270/0x410 [ 92.248895][ T803] bus_for_each_drv+0x258/0x2f0 [ 92.253745][ T803] ? __pfx___device_attach_driver+0x10/0x10 [ 92.259663][ T803] ? __pfx_bus_for_each_drv+0x10/0x10 [ 92.265027][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.270656][ T803] ? lockdep_hardirqs_on+0x7a/0x110 [ 92.275856][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.281485][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 92.287292][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.292926][ T803] __device_attach+0x2c4/0x450 [ 92.297737][ T803] ? __pfx___device_attach+0x10/0x10 [ 92.303110][ T803] ? do_raw_spin_unlock+0xf5/0x210 [ 92.308224][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.313871][ T803] ? _raw_spin_unlock+0x28/0x50 [ 92.318739][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.324387][ T803] device_initial_probe+0xa1/0xd0 [ 92.329430][ T803] bus_probe_device+0x12a/0x220 [ 92.334281][ T803] device_add+0x7d7/0xb80 [ 92.338609][ T803] usb_new_device+0x99d/0x1620 [ 92.343385][ T803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.349374][ T803] ? __pfx_usb_new_device+0x10/0x10 [ 92.354580][ T803] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.359775][ T803] hub_event+0x28e8/0x4d30 [ 92.364186][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.369818][ T803] ? do_raw_spin_unlock+0xf5/0x210 [ 92.374958][ T803] ? __pfx_hub_event+0x10/0x10 [ 92.379716][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.385350][ T803] ? rcu_is_watching+0x15/0xb0 [ 92.390116][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.395747][ T803] ? process_scheduled_works+0xa20/0x14e0 [ 92.401521][ T803] process_scheduled_works+0xa8e/0x14e0 [ 92.407117][ T803] ? __pfx_process_scheduled_works+0x10/0x10 [ 92.413102][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.418735][ T803] ? assign_work+0x3cf/0x5d0 [ 92.423331][ T803] worker_thread+0xa47/0xfb0 [ 92.427930][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.433572][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.439201][ T803] ? __kthread_parkme+0x71/0x1f0 [ 92.444152][ T803] kthread+0x388/0x470 [ 92.448225][ T803] ? __pfx_worker_thread+0x10/0x10 [ 92.453356][ T803] ? __pfx_kthread+0x10/0x10 [ 92.457954][ T803] ret_from_fork+0x514/0xb70 [ 92.462550][ T803] ? __pfx_ret_from_fork+0x10/0x10 [ 92.467712][ T803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.473342][ T803] ? __switch_to+0xc89/0x1420 [ 92.478023][ T803] ? __pfx_kthread+0x10/0x10 [ 92.482617][ T803] ret_from_fork_asm+0x1a/0x30 [ 92.487388][ T803] [ 92.490755][ T803] Kernel Offset: disabled [ 92.495064][ T803] Rebooting in 86400 seconds..