[ 88.064041][ T823] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts.
2026/07/13 16:16:25 parsed 1 programs
2026/07/13 16:16:25 serving rpc on tcp://44437
[ 94.581258][ T5614] cgroup: Unknown subsys name 'net'
[ 94.822386][ T5614] cgroup: Unknown subsys name 'cpuset'
[ 94.876949][ T5614] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 96.589811][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 100.499651][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.499675][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.583832][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.583863][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.669313][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.670539][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.670739][ T5643] bridge_slave_0: entered allmulticast mode
[ 101.673484][ T5643] bridge_slave_0: entered promiscuous mode
[ 101.710062][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.710285][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.710508][ T5643] bridge_slave_1: entered allmulticast mode
[ 101.713260][ T5643] bridge_slave_1: entered promiscuous mode
[ 101.777542][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.781384][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.841449][ T5643] team0: Port device team_slave_0 added
[ 101.844829][ T5643] team0: Port device team_slave_1 added
[ 101.893248][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.893266][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.893280][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.897550][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.897565][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.897589][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.315390][ T5643] hsr_slave_0: entered promiscuous mode
[ 102.317701][ T5643] hsr_slave_1: entered promiscuous mode
[ 103.070951][ T5643] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.134195][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 103.143247][ T5643] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.177510][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 103.182078][ T5643] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.211958][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 103.218593][ T5643] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.261006][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 103.424493][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.489011][ T5643] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.519716][ T3791] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.519857][ T3791] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.566704][ T3791] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.566834][ T3791] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.085684][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.255666][ T5643] veth0_vlan: entered promiscuous mode
[ 104.295748][ T5643] veth1_vlan: entered promiscuous mode
[ 104.371516][ T5643] veth0_macvtap: entered promiscuous mode
[ 104.391852][ T5643] veth1_macvtap: entered promiscuous mode
[ 104.474836][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.499603][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 104.548910][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.554155][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.567113][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.588145][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.472540][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.344178][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 106.359954][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 106.360900][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 106.362346][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 106.363235][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 106.642143][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.529566][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.881174][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.771087][ T154] bridge_slave_1: left allmulticast mode
[ 108.771226][ T154] bridge_slave_1: left promiscuous mode
[ 108.794501][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.968826][ T154] bridge_slave_0: left allmulticast mode
[ 108.968850][ T154] bridge_slave_0: left promiscuous mode
[ 108.969014][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.877456][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 109.937190][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 109.983734][ T154] bond0 (unregistering): Released all slaves
[ 110.238846][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1
[ 110.716553][ T154] hsr_slave_0: left promiscuous mode
[ 110.766789][ T154] hsr_slave_1: left promiscuous mode
[ 110.768100][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 110.768183][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 110.838830][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 110.838887][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 111.013172][ T154] veth1_macvtap: left promiscuous mode
[ 111.022911][ T154] veth0_macvtap: left promiscuous mode
[ 111.023383][ T154] veth1_vlan: left promiscuous mode
[ 111.023825][ T154] veth0_vlan: left promiscuous mode
[ 111.747159][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 111.809070][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 111.980594][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2
[ 112.851441][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3
[ 113.582784][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4
2026/07/13 16:16:49 executed programs: 0
[ 115.784541][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 115.819115][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 115.821262][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 115.828859][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 115.835514][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 116.572970][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.573190][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.573344][ T5801] bridge_slave_0: entered allmulticast mode
[ 116.580214][ T5801] bridge_slave_0: entered promiscuous mode
[ 116.584778][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.585194][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.585417][ T5801] bridge_slave_1: entered allmulticast mode
[ 116.591811][ T5801] bridge_slave_1: entered promiscuous mode
[ 116.655679][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 116.663383][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 116.701638][ T5801] team0: Port device team_slave_0 added
[ 116.704459][ T5801] team0: Port device team_slave_1 added
[ 116.736576][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.736590][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.736607][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.739153][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 116.739167][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.739186][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 116.821431][ T5801] hsr_slave_0: entered promiscuous mode
[ 116.823275][ T5801] hsr_slave_1: entered promiscuous mode
[ 117.889178][ T60] Bluetooth: hci0: command tx timeout
[ 119.604041][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 119.640194][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 119.643630][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 119.671769][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 119.673101][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 119.759950][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 119.761502][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 119.801278][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 119.982734][ T60] Bluetooth: hci0: command tx timeout
[ 120.156660][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0
[ 120.202576][ T5801] 8021q: adding VLAN 0 to HW filter on device team0
[ 120.240342][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.240570][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 120.270400][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.270567][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 121.101757][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 121.283516][ T5801] veth0_vlan: entered promiscuous mode
[ 121.323606][ T5801] veth1_vlan: entered promiscuous mode
[ 121.440054][ T5801] veth0_macvtap: entered promiscuous mode
[ 121.469046][ T5801] veth1_macvtap: entered promiscuous mode
[ 121.550364][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 121.641085][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 121.705224][ T3782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.705278][ T3782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.727231][ T3782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.749127][ T1423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.046710][ T60] Bluetooth: hci0: command tx timeout
[ 122.315067][ T3782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.315092][ T3782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 122.432899][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.432919][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/07/13 16:16:56 executed programs: 2
[ 123.046196][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 123.246562][ T32] usb 1-1: Using ep0 maxpacket: 8
[ 123.254449][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 123.285497][ T32] usb 1-1: config 140 has an invalid interface number: 182 but max is 1
[ 123.285526][ T32] usb 1-1: config 140 has no interface number 1
[ 123.285563][ T32] usb 1-1: config 140 interface 182 has no altsetting 0
[ 123.310926][ T32] usb 1-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81
[ 123.310954][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 123.310971][ T32] usb 1-1: Product: syz
[ 123.310982][ T32] usb 1-1: Manufacturer: syz
[ 123.310994][ T32] usb 1-1: SerialNumber: syz
[ 124.126539][ T60] Bluetooth: hci0: command tx timeout
[ 124.508034][ T32] usb 1-1: reset high-speed USB device number 2 using dummy_hcd
[ 124.692084][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 124.918122][ T32] usb 1-1: failed to restore interface 182 altsetting 8 (error=-71)
[ 124.941769][ T32] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 124.962174][ T32] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 124.989669][ T32] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 124.994662][ T32] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 125.017944][ T822] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[ 125.017961][ T822] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[ 125.082157][ T32] usb 1-1: USB disconnect, device number 2
[ 125.122304][ T32] ==================================================================
[ 125.122316][ T32] BUG: KASAN: slab-out-of-bounds in mutex_lock_nested+0x5a/0x1d0
[ 125.122334][ T32] Read of size 1 at addr ffff8880213f91e0 by task kworker/1:0/32
[ 125.122343][ T32]
[ 125.122361][ T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 125.122378][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 125.122387][ T32] Workqueue: usb_hub_wq hub_event
[ 125.122425][ T32] Call Trace:
[ 125.122432][ T32]
[ 125.122440][ T32] dump_stack_lvl+0xe8/0x150
[ 125.122460][ T32] print_address_description+0x55/0x1e0
[ 125.122490][ T32] ? mutex_lock_nested+0x5a/0x1d0
[ 125.122503][ T32] print_report+0x58/0x70
[ 125.122521][ T32] kasan_report+0x117/0x150
[ 125.122537][ T32] ? mutex_lock_nested+0x5a/0x1d0
[ 125.122595][ T32] ? usbatm_usb_disconnect+0x74/0x620
[ 125.122610][ T32] __kasan_check_byte+0x2a/0x40
[ 125.122619][ T32] lock_acquire+0x7d/0x350
[ 125.122636][ T32] ? usbatm_usb_disconnect+0x74/0x620
[ 125.122650][ T32] ? usbatm_usb_disconnect+0x74/0x620
[ 125.122662][ T32] mutex_lock_nested+0x5a/0x1d0
[ 125.122670][ T32] ? usbatm_usb_disconnect+0x74/0x620
[ 125.122682][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 125.122696][ T32] usbatm_usb_disconnect+0x74/0x620
[ 125.122708][ T32] ? uea_disconnect+0x173/0x280
[ 125.122737][ T32] uea_disconnect+0x17b/0x280
[ 125.122747][ T32] usb_unbind_interface+0x295/0x9f0
[ 125.122759][ T32] ? __pfx_usb_unbind_interface+0x10/0x10
[ 125.122768][ T32] device_release_driver_internal+0x4f5/0x880
[ 125.122780][ T32] bus_remove_device+0x449/0x560
[ 125.122793][ T32] ? __pfx_bus_remove_device+0x10/0x10
[ 125.122805][ T32] ? up_read+0x34/0x180
[ 125.122818][ T32] ? kernfs_remove_by_name_ns+0x101/0x140
[ 125.122832][ T32] device_del+0x528/0x8f0
[ 125.122846][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 125.122860][ T32] ? __pfx_device_del+0x10/0x10
[ 125.122876][ T32] usb_disable_device+0x3d4/0x8d0
[ 125.122893][ T32] usb_disconnect+0x32d/0x990
[ 125.122907][ T32] hub_event+0x1bb7/0x4cf0
[ 125.122923][ T32] ? __lock_acquire+0x6df/0x2e40
[ 125.122932][ T32] ? register_lock_class+0x31/0x2e0
[ 125.122947][ T32] ? __pfx_hub_event+0x10/0x10
[ 125.122963][ T32] ? rcu_is_watching+0x15/0xb0
[ 125.122975][ T32] ? process_one_work+0x7fd/0x1480
[ 125.122985][ T32] process_one_work+0xaaf/0x1480
[ 125.122994][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 125.123012][ T32] ? __pfx_process_one_work+0x10/0x10
[ 125.123021][ T32] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.123035][ T32] ? assign_work+0x3cf/0x5d0
[ 125.123045][ T32] worker_thread+0xb3c/0x10d0
[ 125.123060][ T32] kthread+0x388/0x470
[ 125.123073][ T32] ? __pfx_worker_thread+0x10/0x10
[ 125.123083][ T32] ? __pfx_kthread+0x10/0x10
[ 125.123096][ T32] ret_from_fork+0x514/0xb70
[ 125.123116][ T32] ? __pfx_ret_from_fork+0x10/0x10
[ 125.123132][ T32] ? __switch_to+0xc89/0x1420
[ 125.123144][ T32] ? __pfx_kthread+0x10/0x10
[ 125.123156][ T32] ret_from_fork_asm+0x1a/0x30
[ 125.123172][ T32]
[ 125.123176][ T32]
[ 125.123179][ T32] Allocated by task 5622:
[ 125.123185][ T32] kasan_save_track+0x3e/0x80
[ 125.123203][ T32] __kasan_kmalloc+0x93/0xb0
[ 125.123216][ T32] __kmalloc_noprof+0x415/0x790
[ 125.123229][ T32] tomoyo_encode+0x2ad/0x570
[ 125.123241][ T32] tomoyo_realpath_from_path+0x5fa/0x640
[ 125.123252][ T32] tomoyo_check_open_permission+0x229/0x470
[ 125.123261][ T32] security_file_open+0x9c/0x200
[ 125.123269][ T32] do_dentry_open+0x4be/0x1420
[ 125.123283][ T32] vfs_open+0x3b/0x350
[ 125.123295][ T32] path_openat+0x2e64/0x3850
[ 125.123306][ T32] do_file_open+0x23e/0x4a0
[ 125.123316][ T32] do_sys_openat2+0x115/0x200
[ 125.123322][ T32] __x64_sys_openat+0x138/0x170
[ 125.123330][ T32] do_syscall_64+0x174/0x580
[ 125.123342][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.123351][ T32]
[ 125.123353][ T32] Freed by task 5622:
[ 125.123357][ T32] kasan_save_track+0x3e/0x80
[ 125.123369][ T32] kasan_save_free_info+0x40/0x50
[ 125.123379][ T32] __kasan_slab_free+0x5c/0x80
[ 125.123391][ T32] kfree+0x1c5/0x6c0
[ 125.123402][ T32] tomoyo_check_open_permission+0x32c/0x470
[ 125.123411][ T32] security_file_open+0x9c/0x200
[ 125.123419][ T32] do_dentry_open+0x4be/0x1420
[ 125.123431][ T32] vfs_open+0x3b/0x350
[ 125.123443][ T32] path_openat+0x2e64/0x3850
[ 125.123453][ T32] do_file_open+0x23e/0x4a0
[ 125.123463][ T32] do_sys_openat2+0x115/0x200
[ 125.123470][ T32] __x64_sys_openat+0x138/0x170
[ 125.123477][ T32] do_syscall_64+0x174/0x580
[ 125.123492][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.123507][ T32]
[ 125.123509][ T32] The buggy address belongs to the object at ffff8880213f9180
[ 125.123509][ T32] which belongs to the cache kmalloc-96 of size 96
[ 125.123517][ T32] The buggy address is located 0 bytes to the right of
[ 125.123517][ T32] allocated 96-byte region [ffff8880213f9180, ffff8880213f91e0)
[ 125.123531][ T32]
[ 125.123534][ T32] The buggy address belongs to the physical page:
[ 125.123546][ T32] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x213f9
[ 125.123557][ T32] flags: 0x80000000000000(node=0|zone=1)
[ 125.123569][ T32] page_type: f5(slab)
[ 125.123580][ T32] raw: 0080000000000000 ffff88813fe3a280 dead000000000100 dead000000000122
[ 125.123608][ T32] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
[ 125.123613][ T32] page dumped because: kasan: bad access detected
[ 125.123628][ T32] page_owner tracks the page as allocated
[ 125.123632][ T32] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7232012303
[ 125.123648][ T32] post_alloc_hook+0x1f9/0x250
[ 125.123662][ T32] get_page_from_freelist+0x264c/0x26c0
[ 125.123670][ T32] __alloc_frozen_pages_noprof+0x222/0x5b0
[ 125.123678][ T32] allocate_slab+0x7c/0x5e0
[ 125.123688][ T32] refill_objects+0x2d8/0x350
[ 125.123697][ T32] __pcs_replace_empty_main+0x330/0x690
[ 125.123706][ T32] __kmalloc_cache_noprof+0x467/0x670
[ 125.123719][ T32] acpi_evaluate_object+0xf6/0xd70
[ 125.123732][ T32] acpi_evaluate_integer+0x112/0x320
[ 125.123743][ T32] acpi_bus_get_status+0x150/0x3c0
[ 125.123754][ T32] acpi_pci_link_set+0x560/0xac0
[ 125.123764][ T32] acpi_pci_link_allocate_irq+0x1023/0x1660
[ 125.123774][ T32] acpi_pci_irq_enable+0x268/0x7a0
[ 125.123783][ T32] do_pci_enable_device+0x26f/0x4a0
[ 125.123792][ T32] pci_enable_device_flags+0x5ab/0x700
[ 125.123800][ T32] virtio_pci_probe+0x1ab/0x340
[ 125.123812][ T32] page_owner free stack trace missing
[ 125.123816][ T32]
[ 125.123818][ T32] Memory state around the buggy address:
[ 125.123823][ T32] ffff8880213f9080: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 125.123829][ T32] ffff8880213f9100: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 125.123835][ T32] >ffff8880213f9180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 125.123839][ T32] ^
[ 125.123845][ T32] ffff8880213f9200: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 125.123855][ T32] ffff8880213f9280: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 125.123860][ T32] ==================================================================
[ 125.123871][ T32] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 125.123880][ T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 125.123891][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 125.123897][ T32] Workqueue: usb_hub_wq hub_event
[ 125.123913][ T32] Call Trace:
[ 125.123917][ T32]
[ 125.123921][ T32] vpanic+0x5d9/0xad0
[ 125.123931][ T32] ? __pfx_vpanic+0x10/0x10
[ 125.123939][ T32] ? vprintk_emit+0x4eb/0x560
[ 125.123956][ T32] ? __pfx_vprintk_emit+0x10/0x10
[ 125.123975][ T32] panic+0xc5/0xd0
[ 125.123984][ T32] ? __pfx_panic+0x10/0x10
[ 125.123993][ T32] ? mutex_lock_nested+0x5a/0x1d0
[ 125.124001][ T32] ? rcu_is_watching+0x15/0xb0
[ 125.124013][ T32] ? mutex_lock_nested+0x5a/0x1d0
[ 125.124022][ T32] check_panic_on_warn+0x89/0xb0
[ 125.124036][ T32] ? mutex_lock_nested+0x5a/0x1d0
[ 125.124044][ T32] end_report+0x73/0x170
[ 125.124053][ T32] ? mutex_lock_nested+0x5a/0x1d0
[ 125.124061][ T32] kasan_report+0x128/0x150
[ 125.124070][ T32] ? mutex_lock_nested+0x5a/0x1d0
[ 125.124080][ T32] ? usbatm_usb_disconnect+0x74/0x620
[ 125.124092][ T32] __kasan_check_byte+0x2a/0x40
[ 125.124101][ T32] lock_acquire+0x7d/0x350
[ 125.124110][ T32] ? usbatm_usb_disconnect+0x74/0x620
[ 125.124131][ T32] ? usbatm_usb_disconnect+0x74/0x620
[ 125.124146][ T32] mutex_lock_nested+0x5a/0x1d0
[ 125.124155][ T32] ? usbatm_usb_disconnect+0x74/0x620
[ 125.124170][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 125.124183][ T32] usbatm_usb_disconnect+0x74/0x620
[ 125.124195][ T32] ? uea_disconnect+0x173/0x280
[ 125.124206][ T32] uea_disconnect+0x17b/0x280
[ 125.124216][ T32] usb_unbind_interface+0x295/0x9f0
[ 125.124227][ T32] ? __pfx_usb_unbind_interface+0x10/0x10
[ 125.124237][ T32] device_release_driver_internal+0x4f5/0x880
[ 125.124247][ T32] bus_remove_device+0x449/0x560
[ 125.124265][ T32] ? __pfx_bus_remove_device+0x10/0x10
[ 125.124277][ T32] ? up_read+0x34/0x180
[ 125.124289][ T32] ? kernfs_remove_by_name_ns+0x101/0x140
[ 125.124302][ T32] device_del+0x528/0x8f0
[ 125.124320][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 125.124333][ T32] ? __pfx_device_del+0x10/0x10
[ 125.124349][ T32] usb_disable_device+0x3d4/0x8d0
[ 125.124365][ T32] usb_disconnect+0x32d/0x990
[ 125.124379][ T32] hub_event+0x1bb7/0x4cf0
[ 125.124395][ T32] ? __lock_acquire+0x6df/0x2e40
[ 125.124404][ T32] ? register_lock_class+0x31/0x2e0
[ 125.124419][ T32] ? __pfx_hub_event+0x10/0x10
[ 125.124435][ T32] ? rcu_is_watching+0x15/0xb0
[ 125.124446][ T32] ? process_one_work+0x7fd/0x1480
[ 125.124455][ T32] process_one_work+0xaaf/0x1480
[ 125.124465][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 125.124481][ T32] ? __pfx_process_one_work+0x10/0x10
[ 125.124490][ T32] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.124504][ T32] ? assign_work+0x3cf/0x5d0
[ 125.124514][ T32] worker_thread+0xb3c/0x10d0
[ 125.124529][ T32] kthread+0x388/0x470
[ 125.124541][ T32] ? __pfx_worker_thread+0x10/0x10
[ 125.124551][ T32] ? __pfx_kthread+0x10/0x10
[ 125.124564][ T32] ret_from_fork+0x514/0xb70
[ 125.124578][ T32] ? __pfx_ret_from_fork+0x10/0x10
[ 125.124590][ T32] ? __switch_to+0xc89/0x1420
[ 125.124602][ T32] ? __pfx_kthread+0x10/0x10
[ 125.124614][ T32] ret_from_fork_asm+0x1a/0x30
[ 125.124635][ T32]
[ 125.125062][ T32] Kernel Offset: disabled