Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 42.101939][ T29] audit: type=1400 audit(1738614058.786:80): avc: denied { execmem } for pid=2943 comm="syz-executor220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.130621][ T29] audit: type=1400 audit(1738614058.796:81): avc: denied { read write } for pid=2945 comm="syz-executor220" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.154723][ T29] audit: type=1400 audit(1738614058.796:82): avc: denied { open } for pid=2945 comm="syz-executor220" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.179162][ T29] audit: type=1400 audit(1738614058.796:83): avc: denied { ioctl } for pid=2945 comm="syz-executor220" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.365719][ T968] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.374476][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 42.375536][ T36] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 42.425534][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.475522][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 42.535497][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 42.542698][ T36] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.553939][ T36] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.555544][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 42.563917][ T36] usb 3-1: config 0 interface 0 has no altsetting 0 [ 42.569102][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 42.575704][ T36] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 42.584754][ T8] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.589925][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.601073][ T8] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.619136][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 42.619928][ T36] usb 3-1: config 0 descriptor?? [ 42.625873][ T8] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 42.625910][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.629738][ T8] usb 2-1: config 0 descriptor?? [ 42.631415][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 42.654269][ T968] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.666521][ T24] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.669359][ T968] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.680337][ T24] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.690136][ T968] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.700016][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 42.700064][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 42.706670][ T968] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 42.706705][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.707182][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 42.713401][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.724342][ T9] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.753143][ T24] usb 5-1: config 0 descriptor?? [ 42.764069][ T9] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.764110][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 42.764154][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 42.795085][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.806179][ T968] usb 1-1: config 0 descriptor?? [ 42.818350][ T9] usb 4-1: config 0 descriptor?? [ 43.049897][ T8] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 43.057919][ T8] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 43.065992][ T8] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 43.071294][ T36] hid-corsair-void 0003:1B1C:1B25.0002: unknown main item tag 0x0 [ 43.073868][ T8] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 43.081787][ T36] hid-corsair-void 0003:1B1C:1B25.0002: unknown main item tag 0x0 [ 43.089570][ T8] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 43.097415][ T36] hid-corsair-void 0003:1B1C:1B25.0002: unknown main item tag 0x0 [ 43.111573][ T8] hid-corsair-void 0003:1B1C:1B25.0001: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.1-1/input0 [ 43.113109][ T36] hid-corsair-void 0003:1B1C:1B25.0002: unknown main item tag 0x0 [ 43.133245][ T36] hid-corsair-void 0003:1B1C:1B25.0002: unknown main item tag 0x0 [ 43.144337][ T36] hid-corsair-void 0003:1B1C:1B25.0002: hidraw1: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.2-1/input0 [ 43.184807][ T24] hid-corsair-void 0003:1B1C:1B25.0003: unknown main item tag 0x0 [ 43.192868][ T24] hid-corsair-void 0003:1B1C:1B25.0003: unknown main item tag 0x0 [ 43.201163][ T24] hid-corsair-void 0003:1B1C:1B25.0003: unknown main item tag 0x0 [ 43.209344][ T24] hid-corsair-void 0003:1B1C:1B25.0003: unknown main item tag 0x0 [ 43.217458][ T24] hid-corsair-void 0003:1B1C:1B25.0003: unknown main item tag 0x0 [ 43.222392][ T968] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0 [ 43.227922][ T24] hid-corsair-void 0003:1B1C:1B25.0003: hidraw2: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.4-1/input0 [ 43.234071][ T968] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0 [ 43.253138][ T968] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0 [ 43.261046][ T968] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0 [ 43.268944][ T968] hid-corsair-void 0003:1B1C:1B25.0004: unknown main item tag 0x0 [ 43.273499][ T24] usb 2-1: USB disconnect, device number 2 [ 43.280009][ T9] hid-corsair-void 0003:1B1C:1B25.0005: unknown main item tag 0x0 [ 43.286639][ T36] hid-corsair-void 0003:1B1C:1B25.0002: failed to request firmware (reason: -71) [ 43.290522][ T9] hid-corsair-void 0003:1B1C:1B25.0005: unknown main item tag 0x0 [ 43.307574][ T2958] hid-corsair-void 0003:1B1C:1B25.0002: failed to request battery (reason: -71) [ 43.316644][ T9] hid-corsair-void 0003:1B1C:1B25.0005: unknown main item tag 0x0 [ 43.324546][ T9] hid-corsair-void 0003:1B1C:1B25.0005: unknown main item tag 0x0 [ 43.332533][ T9] hid-corsair-void 0003:1B1C:1B25.0005: unknown main item tag 0x0 [ 43.340521][ T8] hid-corsair-void 0003:1B1C:1B25.0001: failed to request firmware (reason: -19) executing program executing program [ 43.348097][ T2958] usb 3-1: USB disconnect, device number 2 [ 43.350623][ T8] hid-corsair-void 0003:1B1C:1B25.0001: failed to request battery (reason: -19) [ 43.374095][ T968] hid-corsair-void 0003:1B1C:1B25.0004: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.0-1/input0 [ 43.388481][ T36] hid-corsair-void 0003:1B1C:1B25.0003: failed to request firmware (reason: -71) executing program [ 43.388659][ T9] hid-corsair-void 0003:1B1C:1B25.0005: hidraw3: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.3-1/input0 [ 43.411037][ T2962] usb 5-1: USB disconnect, device number 2 [ 43.425820][ T36] ================================================================== [ 43.429157][ T968] usb 1-1: USB disconnect, device number 2 [ 43.433903][ T36] BUG: KASAN: slab-use-after-free in corsair_void_status_work_handler+0xaa/0xb0 [ 43.448830][ T36] Read of size 8 at addr ffff8881187e6828 by task kworker/1:1/36 [ 43.456573][ T36] [ 43.458911][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted 6.14.0-rc1-syzkaller-g2014c95afece #0 [ 43.458940][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 43.458957][ T36] Workqueue: events corsair_void_status_work_handler [ 43.458997][ T36] Call Trace: [ 43.459005][ T36] [ 43.459016][ T36] dump_stack_lvl+0x116/0x1f0 [ 43.459054][ T36] print_report+0xc3/0x620 [ 43.459077][ T36] ? __virt_addr_valid+0x5e/0x590 [ 43.459099][ T36] ? __phys_addr+0xc6/0x150 [ 43.459122][ T36] kasan_report+0xd9/0x110 [ 43.459143][ T36] ? corsair_void_status_work_handler+0xaa/0xb0 [ 43.459175][ T36] ? corsair_void_status_work_handler+0xaa/0xb0 [ 43.459208][ T36] corsair_void_status_work_handler+0xaa/0xb0 [ 43.459239][ T36] process_one_work+0x9c5/0x1ba0 [ 43.459279][ T36] ? __pfx_corsair_void_firmware_work_handler+0x10/0x10 [ 43.459310][ T36] ? __pfx_process_one_work+0x10/0x10 [ 43.459350][ T36] ? assign_work+0x1a0/0x250 [ 43.459383][ T36] worker_thread+0x6c8/0xf00 [ 43.459422][ T36] ? __kthread_parkme+0x148/0x220 [ 43.459450][ T36] ? __pfx_worker_thread+0x10/0x10 [ 43.459486][ T36] kthread+0x3af/0x750 [ 43.459518][ T36] ? __pfx_kthread+0x10/0x10 [ 43.459550][ T36] ? lock_acquire+0x2f/0xb0 [ 43.459571][ T36] ? __pfx_kthread+0x10/0x10 [ 43.459604][ T36] ret_from_fork+0x45/0x80 [ 43.459637][ T36] ? __pfx_kthread+0x10/0x10 [ 43.459669][ T36] ret_from_fork_asm+0x1a/0x30 [ 43.459704][ T36] [ 43.459711][ T36] [ 43.536184][ T2969] hid-corsair-void 0003:1B1C:1B25.0004: failed to request firmware (reason: -19) [ 43.539118][ T36] Allocated by task 24: [ 43.546895][ T2969] hid-corsair-void 0003:1B1C:1B25.0004: failed to request battery (reason: -19) [ 43.551491][ T36] kasan_save_stack+0x33/0x60 [ 43.634678][ T36] kasan_save_track+0x14/0x30 [ 43.639428][ T36] __kasan_kmalloc+0x8f/0xa0 [ 43.644062][ T36] __kmalloc_node_track_caller_noprof+0x20b/0x4c0 [ 43.650532][ T36] devm_kmalloc+0xa5/0x260 [ 43.654982][ T36] corsair_void_probe+0x57/0xd70 [ 43.659969][ T36] hid_device_probe+0x349/0x700 [ 43.664878][ T36] really_probe+0x23e/0xa90 [ 43.669432][ T36] __driver_probe_device+0x1de/0x440 [ 43.674777][ T36] driver_probe_device+0x4c/0x1b0 [ 43.679894][ T36] __device_attach_driver+0x1df/0x310 [ 43.685320][ T36] bus_for_each_drv+0x157/0x1e0 [ 43.690225][ T36] __device_attach+0x1e8/0x4b0 [ 43.695044][ T36] bus_probe_device+0x17f/0x1c0 [ 43.699938][ T36] device_add+0x114b/0x1a70 [ 43.704476][ T36] hid_add_device+0x374/0xa60 [ 43.709201][ T36] usbhid_probe+0xd32/0x1400 [ 43.713929][ T36] usb_probe_interface+0x300/0x9c0 [ 43.719088][ T36] really_probe+0x23e/0xa90 [ 43.723625][ T36] __driver_probe_device+0x1de/0x440 [ 43.728961][ T36] driver_probe_device+0x4c/0x1b0 [ 43.734028][ T36] __device_attach_driver+0x1df/0x310 [ 43.739541][ T36] bus_for_each_drv+0x157/0x1e0 [ 43.744418][ T36] __device_attach+0x1e8/0x4b0 [ 43.749281][ T36] bus_probe_device+0x17f/0x1c0 [ 43.754294][ T36] device_add+0x114b/0x1a70 [ 43.758840][ T36] usb_set_configuration+0x10cb/0x1c50 [ 43.764327][ T36] usb_generic_driver_probe+0xb1/0x110 [ 43.769812][ T36] usb_probe_device+0xec/0x3e0 [ 43.774609][ T36] really_probe+0x23e/0xa90 [ 43.779143][ T36] __driver_probe_device+0x1de/0x440 [ 43.784477][ T36] driver_probe_device+0x4c/0x1b0 [ 43.789558][ T36] __device_attach_driver+0x1df/0x310 [ 43.794987][ T36] bus_for_each_drv+0x157/0x1e0 [ 43.799879][ T36] __device_attach+0x1e8/0x4b0 [ 43.804695][ T36] bus_probe_device+0x17f/0x1c0 [ 43.809586][ T36] device_add+0x114b/0x1a70 [ 43.814130][ T36] usb_new_device+0xd09/0x1a20 [ 43.818931][ T36] hub_event+0x2e58/0x4f40 [ 43.823404][ T36] process_one_work+0x9c5/0x1ba0 [ 43.828394][ T36] worker_thread+0x6c8/0xf00 [ 43.833022][ T36] kthread+0x3af/0x750 [ 43.837133][ T36] ret_from_fork+0x45/0x80 [ 43.841621][ T36] ret_from_fork_asm+0x1a/0x30 [ 43.846431][ T36] [ 43.848810][ T36] Freed by task 2962: [ 43.852901][ T36] kasan_save_stack+0x33/0x60 [ 43.857611][ T36] kasan_save_track+0x14/0x30 [ 43.862377][ T36] kasan_save_free_info+0x3b/0x60 [ 43.867432][ T36] __kasan_slab_free+0x37/0x50 [ 43.872318][ T36] kfree+0x294/0x480 [ 43.876251][ T36] release_nodes+0x11e/0x240 [ 43.880981][ T36] devres_release_group+0x1be/0x2a0 [ 43.886217][ T36] hid_device_remove+0x107/0x260 [ 43.891204][ T36] device_remove+0xc8/0x170 [ 43.895750][ T36] device_release_driver_internal+0x44a/0x610 [ 43.901851][ T36] bus_remove_device+0x22f/0x420 [ 43.906826][ T36] device_del+0x396/0x9f0 [ 43.911198][ T36] hid_destroy_device+0x19c/0x240 [ 43.916276][ T36] usbhid_disconnect+0xa0/0xe0 [ 43.921078][ T36] usb_unbind_interface+0x1e2/0x960 [ 43.926330][ T36] device_remove+0x122/0x170 [ 43.930964][ T36] device_release_driver_internal+0x44a/0x610 [ 43.937077][ T36] bus_remove_device+0x22f/0x420 [ 43.942093][ T36] device_del+0x396/0x9f0 [ 43.946479][ T36] usb_disable_device+0x36c/0x7f0 [ 43.951547][ T36] usb_disconnect+0x2e1/0x920 [ 43.956263][ T36] hub_event+0x1bed/0x4f40 [ 43.960710][ T36] process_one_work+0x9c5/0x1ba0 [ 43.965699][ T36] worker_thread+0x6c8/0xf00 [ 43.970341][ T36] kthread+0x3af/0x750 [ 43.974494][ T36] ret_from_fork+0x45/0x80 [ 43.978964][ T36] ret_from_fork_asm+0x1a/0x30 [ 43.983767][ T36] [ 43.986113][ T36] Last potentially related work creation: [ 43.991847][ T36] kasan_save_stack+0x33/0x60 [ 43.996576][ T36] kasan_record_aux_stack+0x9b/0xb0 [ 44.001815][ T36] insert_work+0x36/0x230 [ 44.006309][ T36] __queue_work+0x97e/0x1080 [ 44.010933][ T36] call_timer_fn+0x1a0/0x610 [ 44.015572][ T36] __run_timers+0x56a/0x930 [ 44.020112][ T36] run_timer_base+0x114/0x190 [ 44.024843][ T36] run_timer_softirq+0x1a/0x40 [ 44.029659][ T36] handle_softirqs+0x206/0x8d0 [ 44.034457][ T36] __irq_exit_rcu+0xfa/0x160 [ 44.039090][ T36] irq_exit_rcu+0x9/0x30 [ 44.043366][ T36] sysvec_apic_timer_interrupt+0x90/0xb0 [ 44.049050][ T36] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 44.055064][ T36] [ 44.057408][ T36] Second to last potentially related work creation: [ 44.064014][ T36] kasan_save_stack+0x33/0x60 [ 44.068739][ T36] kasan_record_aux_stack+0x9b/0xb0 [ 44.073985][ T36] insert_work+0x36/0x230 [ 44.078409][ T36] __queue_work+0x97e/0x1080 [ 44.083047][ T36] call_timer_fn+0x1a0/0x610 [ 44.087695][ T36] __run_timers+0x56a/0x930 [ 44.092229][ T36] run_timer_base+0x114/0x190 [ 44.096959][ T36] run_timer_softirq+0x1a/0x40 [ 44.101761][ T36] handle_softirqs+0x206/0x8d0 [ 44.106549][ T36] __irq_exit_rcu+0xfa/0x160 [ 44.111175][ T36] irq_exit_rcu+0x9/0x30 [ 44.115463][ T36] sysvec_apic_timer_interrupt+0x90/0xb0 [ 44.121145][ T36] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 44.127161][ T36] [ 44.129499][ T36] The buggy address belongs to the object at ffff8881187e6800 [ 44.129499][ T36] which belongs to the cache kmalloc-1k of size 1024 [ 44.143586][ T36] The buggy address is located 40 bytes inside of [ 44.143586][ T36] freed 1024-byte region [ffff8881187e6800, ffff8881187e6c00) [ 44.157423][ T36] [ 44.159764][ T36] The buggy address belongs to the physical page: [ 44.166213][ T36] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1187e0 [ 44.175096][ T36] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 44.183651][ T36] flags: 0x200000000000040(head|node=0|zone=2) [ 44.189853][ T36] page_type: f5(slab) [ 44.193874][ T36] raw: 0200000000000040 ffff888100041dc0 dead000000000122 0000000000000000 [ 44.202497][ T36] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 44.211122][ T36] head: 0200000000000040 ffff888100041dc0 dead000000000122 0000000000000000 [ 44.219831][ T36] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 44.228525][ T36] head: 0200000000000003 ffffea000461f801 ffffffffffffffff 0000000000000000 [ 44.237227][ T36] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 44.245908][ T36] page dumped because: kasan: bad access detected [ 44.252375][ T36] page_owner tracks the page as allocated [ 44.258110][ T36] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2941, tgid 2941 (sshd), ts 41778561862, free_ts 36310136499 [ 44.278829][ T36] post_alloc_hook+0x181/0x1b0 [ 44.283715][ T36] get_page_from_freelist+0xe76/0x2b90 [ 44.289265][ T36] __alloc_frozen_pages_noprof+0x21c/0x2290 [ 44.295328][ T36] alloc_pages_mpol+0xe7/0x410 [ 44.300133][ T36] new_slab+0x23d/0x330 [ 44.304325][ T36] ___slab_alloc+0xc41/0x1670 [ 44.309054][ T36] __slab_alloc.constprop.0+0x56/0xb0 [ 44.314459][ T36] __kmalloc_noprof+0x154/0x4d0 [ 44.319355][ T36] load_elf_phdrs+0x103/0x210 [ 44.324117][ T36] load_elf_binary+0x1f8/0x4f00 [ 44.329025][ T36] bprm_execve+0x8dd/0x1680 [ 44.333561][ T36] do_execveat_common.isra.0+0x4a2/0x610 [ 44.339227][ T36] __x64_sys_execve+0x8c/0xb0 [ 44.343939][ T36] do_syscall_64+0xcd/0x250 [ 44.348484][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.354410][ T36] page last free pid 2938 tgid 2938 stack trace: [ 44.360753][ T36] free_frozen_pages+0x653/0xde0 [ 44.365727][ T36] __put_partials+0x14c/0x170 [ 44.370526][ T36] qlist_free_all+0x4e/0x120 [ 44.375158][ T36] kasan_quarantine_reduce+0x195/0x1e0 [ 44.380667][ T36] __kasan_slab_alloc+0x4e/0x70 [ 44.385554][ T36] kmem_cache_alloc_noprof+0x154/0x3b0 [ 44.391067][ T36] __anon_vma_prepare+0xae/0x5e0 [ 44.396053][ T36] __vmf_anon_prepare+0x11c/0x240 [ 44.401149][ T36] __handle_mm_fault+0x16a5/0x3450 [ 44.406548][ T36] handle_mm_fault+0x3fa/0xaa0 [ 44.411348][ T36] do_user_addr_fault+0x613/0x12c0 [ 44.416499][ T36] exc_page_fault+0x5c/0xc0 [ 44.421033][ T36] asm_exc_page_fault+0x26/0x30 [ 44.425963][ T36] [ 44.428303][ T36] Memory state around the buggy address: [ 44.433989][ T36] ffff8881187e6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.442072][ T36] ffff8881187e6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.450185][ T36] >ffff8881187e6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.458278][ T36] ^ [ 44.463670][ T36] ffff8881187e6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.471757][ T36] ffff8881187e6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.479836][ T36] ================================================================== [ 44.488200][ T36] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 44.495432][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted 6.14.0-rc1-syzkaller-g2014c95afece #0 [ 44.505694][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.515769][ T36] Workqueue: events corsair_void_status_work_handler [ 44.522490][ T36] Call Trace: [ 44.525781][ T36] [ 44.528726][ T36] dump_stack_lvl+0x3d/0x1f0 [ 44.533353][ T36] panic+0x71d/0x800 [ 44.537281][ T36] ? mark_held_locks+0x9f/0xe0 [ 44.542080][ T36] ? __pfx_panic+0x10/0x10 [ 44.546532][ T36] ? irqentry_exit+0x3b/0x90 [ 44.551166][ T36] ? lockdep_hardirqs_on+0x7c/0x110 [ 44.556424][ T36] ? check_panic_on_warn+0x1f/0xb0 [ 44.561577][ T36] check_panic_on_warn+0xab/0xb0 [ 44.566555][ T36] end_report+0x117/0x180 [ 44.570931][ T36] kasan_report+0xe9/0x110 [ 44.575371][ T36] ? corsair_void_status_work_handler+0xaa/0xb0 [ 44.581648][ T36] ? corsair_void_status_work_handler+0xaa/0xb0 [ 44.587962][ T36] corsair_void_status_work_handler+0xaa/0xb0 [ 44.594078][ T36] process_one_work+0x9c5/0x1ba0 [ 44.599071][ T36] ? __pfx_corsair_void_firmware_work_handler+0x10/0x10 [ 44.606054][ T36] ? __pfx_process_one_work+0x10/0x10 [ 44.611473][ T36] ? assign_work+0x1a0/0x250 [ 44.616111][ T36] worker_thread+0x6c8/0xf00 [ 44.620833][ T36] ? __kthread_parkme+0x148/0x220 [ 44.625889][ T36] ? __pfx_worker_thread+0x10/0x10 [ 44.631039][ T36] kthread+0x3af/0x750 [ 44.635151][ T36] ? __pfx_kthread+0x10/0x10 [ 44.639954][ T36] ? lock_acquire+0x2f/0xb0 [ 44.644488][ T36] ? __pfx_kthread+0x10/0x10 [ 44.649200][ T36] ret_from_fork+0x45/0x80 [ 44.653915][ T36] ? __pfx_kthread+0x10/0x10 [ 44.658549][ T36] ret_from_fork_asm+0x1a/0x30 [ 44.663349][ T36] [ 44.666748][ T36] Kernel Offset: disabled [ 44.671091][ T36] Rebooting in 86400 seconds..