Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. 2026/01/29 19:13:52 parsed 1 programs [ 93.157847][ T29] audit: type=1400 audit(1769714034.149:103): avc: denied { unlink } for pid=3993 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.322534][ T3993] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.703172][ T29] audit: type=1401 audit(1769714036.689:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/01/29 19:14:07 executed programs: 0 2026/01/29 19:14:18 executed programs: 2 [ 117.268374][ T29] audit: type=1400 audit(1769714058.259:105): avc: denied { read write } for pid=4972 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.292826][ T29] audit: type=1400 audit(1769714058.259:106): avc: denied { open } for pid=4972 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.316769][ T29] audit: type=1400 audit(1769714058.259:107): avc: denied { ioctl } for pid=4972 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.556451][ T37] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.718308][ T37] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.729023][ T37] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 117.745221][ T37] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.755236][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.763912][ T37] usb 4-1: Product: syz [ 117.768503][ T37] usb 4-1: Manufacturer: syz [ 117.773706][ T37] usb 4-1: SerialNumber: syz [ 117.984345][ T4973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.993764][ T4973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.007621][ T37] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 118.021666][ T37] usb 4-1: USB disconnect, device number 2 [ 118.446303][ T1122] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.596250][ T1122] usb 4-1: Using ep0 maxpacket: 8 [ 118.603126][ T1122] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 118.611845][ T1122] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 118.622796][ T1122] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.633151][ T1122] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.643707][ T1122] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 118.655520][ T1122] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.667567][ T1122] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.681549][ T1122] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.691544][ T1122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.904400][ T1122] usb 4-1: usb_control_msg returned -32 [ 118.910473][ T1122] usbtmc 4-1:16.0: can't read capabilities [ 118.917301][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.924076][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.930604][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.937163][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.943920][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.950546][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.957348][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.963653][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.969859][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.976561][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.983302][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.989676][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 118.995890][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.002072][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.008461][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.015032][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.021146][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.027452][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.033753][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.040664][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.047305][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.053947][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.060391][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.066982][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.073471][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.079560][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.085653][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.092368][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.098837][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.105326][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.111925][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.118501][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.125265][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.131404][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.137718][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.144497][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.151858][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.158472][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.165499][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.172332][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.178821][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.185282][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.191573][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.198422][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.205429][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.212098][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.218563][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.225056][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.231189][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.237480][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.244145][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.250710][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.257337][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.263725][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.270288][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.276531][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.282614][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.288982][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.295260][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.301793][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.308264][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.314529][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.320753][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.327519][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.333769][ C0] usbtmc 4-1:16.0: invalid notification: 11 [ 119.340070][ C0] usbtmc 4-1:16.0: invalid notification: 1 [ 119.346751][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.353200][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 119.359491][ C0] usbtmc 4-1:16.0: invalid notification: 73 [ 119.365896][ C0] usbtmc 4-1:16.0: invalid notification: 33 [ 119.372453][ C0] usbtmc 4-1:16.0: invalid notification: 36 [ 119.379464][ C0] usbtmc 4-1:16.0: invalid notification: 8 [ 119.385756][ C0] ================================================================== [ 119.394348][ C0] BUG: KASAN: slab-out-of-bounds in usbtmc_interrupt+0x68d/0x6a0 [ 119.402258][ C0] Read of size 1 at addr ffff88810bacc221 by task kworker/0:2/1122 [ 119.410760][ C0] [ 119.413273][ C0] CPU: 0 UID: 0 PID: 1122 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.413302][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.413316][ C0] Workqueue: usb_hub_wq hub_event [ 119.413350][ C0] Call Trace: [ 119.413358][ C0] [ 119.413367][ C0] dump_stack_lvl+0x100/0x190 [ 119.413412][ C0] print_report+0x156/0x4c9 [ 119.413449][ C0] ? __virt_addr_valid+0x81/0x620 [ 119.413484][ C0] ? __phys_addr+0xe8/0x180 [ 119.413523][ C0] ? usbtmc_interrupt+0x68d/0x6a0 [ 119.413548][ C0] kasan_report+0xdf/0x1a0 [ 119.413571][ C0] ? usbtmc_interrupt+0x68d/0x6a0 [ 119.413593][ C0] usbtmc_interrupt+0x68d/0x6a0 [ 119.413615][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 119.413639][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 119.413665][ C0] dummy_timer+0xd85/0x3670 [ 119.413697][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 119.413719][ C0] ? mark_held_locks+0x40/0x70 [ 119.413734][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.413753][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 119.413776][ C0] __hrtimer_run_queues+0x516/0x990 [ 119.413796][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 119.413814][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 119.413832][ C0] hrtimer_run_softirq+0x17d/0x350 [ 119.413850][ C0] handle_softirqs+0x1dd/0x8f0 [ 119.413866][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 119.413882][ C0] __irq_exit_rcu+0xed/0x150 [ 119.413897][ C0] irq_exit_rcu+0x9/0x30 [ 119.413913][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0 [ 119.413934][ C0] [ 119.413939][ C0] [ 119.413944][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.413965][ C0] RIP: 0010:rcu_read_lock_held+0x19/0x50 [ 119.413989][ C0] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 97 d5 bd 05 ba 01 00 00 00 85 c0 75 07 89 d0 e9 47 af c0 05 12 f6 00 00 84 c0 74 1a e8 19 37 01 00 84 c0 74 11 be ff ff ff [ 119.414007][ C0] RSP: 0018:ffffc90001d4efa8 EFLAGS: 00000202 [ 119.414019][ C0] RAX: 0000000000000001 RBX: ffff88811356bf00 RCX: ffffffff8242eea6 [ 119.414029][ C0] RDX: 0000000000000001 RSI: ffffffff8242f029 RDI: ffff88810efa8000 [ 119.414038][ C0] RBP: ffff888112f3d780 R08: 0000000000000005 R09: 0000000000000000 [ 119.414047][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 119.414055][ C0] R13: ffff888112f3d780 R14: ffff88811356bf00 R15: dffffc0000000000 [ 119.414067][ C0] ? kernfs_root+0x86/0x2a0 [ 119.414089][ C0] ? kernfs_root+0x209/0x2a0 [ 119.414111][ C0] ? rcu_read_lock_held+0x9/0x50 [ 119.414135][ C0] kernfs_root+0x20e/0x2a0 [ 119.414215][ C0] kernfs_link_sibling+0x518/0x770 [ 119.414232][ C0] kernfs_add_one+0x1e7/0x850 [ 119.414248][ C0] __kernfs_create_file+0x295/0x350 [ 119.414267][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 119.414290][ C0] internal_create_group+0x593/0xf40 [ 119.414314][ C0] ? sysfs_create_file_ns+0x14c/0x1e0 [ 119.414334][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 119.414356][ C0] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 119.414378][ C0] ? acpi_device_notify+0x464/0x500 [ 119.414397][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 119.414414][ C0] internal_create_groups+0x9d/0x150 [ 119.414437][ C0] device_add+0x7c8/0x1950 [ 119.414452][ C0] ? __pfx_device_add+0x10/0x10 [ 119.414464][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 119.414480][ C0] ? __init_waitqueue_head+0xca/0x150 [ 119.414504][ C0] usb_create_ep_devs+0x160/0x2b0 [ 119.414527][ C0] create_intf_ep_devs.isra.0+0x161/0x200 [ 119.414553][ C0] usb_set_configuration+0xdb9/0x1c60 [ 119.414596][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 119.414627][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 119.414649][ C0] usb_probe_device+0xef/0x400 [ 119.414668][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 119.414688][ C0] really_probe+0x241/0xa60 [ 119.414709][ C0] __driver_probe_device+0x1de/0x400 [ 119.414731][ C0] ? usb_driver_applicable+0x1c7/0x220 [ 119.414753][ C0] driver_probe_device+0x4c/0x1b0 [ 119.414773][ C0] __device_attach_driver+0x1df/0x340 [ 119.414794][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 119.414813][ C0] bus_for_each_drv+0x159/0x1e0 [ 119.414830][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 119.414846][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 119.414867][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 119.414887][ C0] __device_attach+0x1e4/0x4d0 [ 119.414907][ C0] ? __pfx___device_attach+0x10/0x10 [ 119.414929][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 119.414948][ C0] device_initial_probe+0xaf/0xd0 [ 119.414969][ C0] bus_probe_device+0x64/0x160 [ 119.414987][ C0] device_add+0x11d9/0x1950 [ 119.415000][ C0] ? __pfx_device_add+0x10/0x10 [ 119.415012][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 119.415031][ C0] usb_new_device.cold+0x685/0x115c [ 119.415056][ C0] ? do_raw_spin_lock+0x128/0x260 [ 119.415073][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 119.415092][ C0] ? mark_held_locks+0x40/0x70 [ 119.415108][ C0] hub_event+0x314d/0x4af0 [ 119.415134][ C0] ? __pfx_hub_event+0x10/0x10 [ 119.415152][ C0] ? assoc_array_insert+0x70/0x32c0 [ 119.415179][ C0] ? process_one_work+0x80b/0x1840 [ 119.415199][ C0] ? rcu_is_watching+0x12/0xc0 [ 119.415220][ C0] process_one_work+0x9c2/0x1840 [ 119.415243][ C0] ? __pfx_process_one_work+0x10/0x10 [ 119.415265][ C0] ? assign_work+0x19c/0x250 [ 119.415284][ C0] worker_thread+0x5da/0xe40 [ 119.415305][ C0] ? __pfx_worker_thread+0x10/0x10 [ 119.415325][ C0] ? kthread+0x17d/0x730 [ 119.415343][ C0] ? __pfx_worker_thread+0x10/0x10 [ 119.415361][ C0] kthread+0x3b3/0x730 [ 119.415379][ C0] ? __pfx_kthread+0x10/0x10 [ 119.415396][ C0] ? ret_from_fork+0x79/0xa20 [ 119.415410][ C0] ? ret_from_fork+0x79/0xa20 [ 119.415424][ C0] ? rcu_is_watching+0x12/0xc0 [ 119.415443][ C0] ? __pfx_kthread+0x10/0x10 [ 119.415461][ C0] ret_from_fork+0x6c3/0xa20 [ 119.415476][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 119.415491][ C0] ? __switch_to+0x7af/0x10b0 [ 119.415509][ C0] ? __pfx_kthread+0x10/0x10 [ 119.415527][ C0] ret_from_fork_asm+0x1a/0x30 [ 119.415550][ C0] [ 119.415555][ C0] [ 120.051322][ C0] Allocated by task 1122: [ 120.055949][ C0] kasan_save_stack+0x30/0x50 [ 120.060734][ C0] kasan_save_track+0x14/0x30 [ 120.065845][ C0] __kasan_kmalloc+0x8f/0xa0 [ 120.071005][ C0] __kmalloc_noprof+0x33e/0x990 [ 120.076379][ C0] usbtmc_probe+0xa41/0x1bc0 [ 120.081253][ C0] usb_probe_interface+0x303/0x8f0 [ 120.086676][ C0] really_probe+0x241/0xa60 [ 120.091618][ C0] __driver_probe_device+0x1de/0x400 [ 120.097505][ C0] driver_probe_device+0x4c/0x1b0 [ 120.102845][ C0] __device_attach_driver+0x1df/0x340 [ 120.108481][ C0] bus_for_each_drv+0x159/0x1e0 [ 120.113602][ C0] __device_attach+0x1e4/0x4d0 [ 120.118672][ C0] device_initial_probe+0xaf/0xd0 [ 120.123978][ C0] bus_probe_device+0x64/0x160 [ 120.129111][ C0] device_add+0x11d9/0x1950 [ 120.133910][ C0] usb_set_configuration+0xd97/0x1c60 [ 120.139622][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 120.146225][ C0] usb_probe_device+0xef/0x400 [ 120.151531][ C0] really_probe+0x241/0xa60 [ 120.156306][ C0] __driver_probe_device+0x1de/0x400 [ 120.161962][ C0] driver_probe_device+0x4c/0x1b0 [ 120.167491][ C0] __device_attach_driver+0x1df/0x340 [ 120.173340][ C0] bus_for_each_drv+0x159/0x1e0 [ 120.178919][ C0] __device_attach+0x1e4/0x4d0 [ 120.184049][ C0] device_initial_probe+0xaf/0xd0 [ 120.189346][ C0] bus_probe_device+0x64/0x160 [ 120.195351][ C0] device_add+0x11d9/0x1950 [ 120.200204][ C0] usb_new_device.cold+0x685/0x115c [ 120.205990][ C0] hub_event+0x314d/0x4af0 [ 120.210594][ C0] process_one_work+0x9c2/0x1840 [ 120.215624][ C0] worker_thread+0x5da/0xe40 [ 120.220386][ C0] kthread+0x3b3/0x730 [ 120.224492][ C0] ret_from_fork+0x6c3/0xa20 [ 120.229308][ C0] ret_from_fork_asm+0x1a/0x30 [ 120.234257][ C0] [ 120.236828][ C0] The buggy address belongs to the object at ffff88810bacc220 [ 120.236828][ C0] which belongs to the cache kmalloc-8 of size 8 [ 120.251539][ C0] The buggy address is located 0 bytes to the right of [ 120.251539][ C0] allocated 1-byte region [ffff88810bacc220, ffff88810bacc221) [ 120.267007][ C0] [ 120.269333][ C0] The buggy address belongs to the physical page: [ 120.275948][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bacc [ 120.285244][ C0] anon flags: 0x200000000000000(node=0|zone=2) [ 120.291662][ C0] page_type: f5(slab) [ 120.295974][ C0] raw: 0200000000000000 ffff888100041500 0000000000000000 dead000000000001 [ 120.305261][ C0] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 120.314451][ C0] page dumped because: kasan: bad access detected [ 120.321397][ C0] page_owner tracks the page as allocated [ 120.327459][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 5952480830, free_ts 5709334261 [ 120.348213][ C0] post_alloc_hook+0x1e1/0x250 [ 120.353444][ C0] get_page_from_freelist+0xd57/0x3b20 [ 120.359186][ C0] __alloc_frozen_pages_noprof+0x269/0x2230 [ 120.365113][ C0] alloc_pages_mpol+0xe8/0x410 [ 120.370239][ C0] new_slab+0x2c4/0x440 [ 120.374574][ C0] ___slab_alloc+0xda3/0x1ca0 [ 120.379435][ C0] __slab_alloc.isra.0+0x63/0x110 [ 120.384641][ C0] __kmalloc_node_noprof+0x5d6/0x9a0 [ 120.390111][ C0] __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 120.395764][ C0] blk_mq_init_allocated_queue+0x308/0x1400 [ 120.401918][ C0] blk_mq_alloc_queue+0x1bd/0x290 [ 120.407230][ C0] __blk_mq_alloc_disk+0x29/0x120 [ 120.412434][ C0] loop_add+0x498/0xb60 [ 120.416975][ C0] loop_init+0x1d3/0x200 [ 120.421243][ C0] do_one_initcall+0x11d/0x690 [ 120.426273][ C0] kernel_init_freeable+0x6e5/0x790 [ 120.431653][ C0] page last free pid 9 tgid 9 stack trace: [ 120.437622][ C0] __free_frozen_pages+0x7d1/0x1010 [ 120.443359][ C0] vfree.part.0+0x12b/0x9d0 [ 120.448316][ C0] delayed_vfree_work+0x8e/0xd0 [ 120.453342][ C0] process_one_work+0x9c2/0x1840 [ 120.458987][ C0] worker_thread+0x5da/0xe40 [ 120.463680][ C0] kthread+0x3b3/0x730 [ 120.467941][ C0] ret_from_fork+0x6c3/0xa20 [ 120.472547][ C0] ret_from_fork_asm+0x1a/0x30 [ 120.477764][ C0] [ 120.480280][ C0] Memory state around the buggy address: [ 120.486076][ C0] ffff88810bacc100: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 120.494764][ C0] ffff88810bacc180: 05 fc fc fc 05 fc fc fc 05 fc fc fc 00 fc fc fc [ 120.503648][ C0] >ffff88810bacc200: 00 fc fc fc 01 fc fc fc 00 fc fc fc 00 fc fc fc [ 120.513101][ C0] ^ [ 120.518555][ C0] ffff88810bacc280: 07 fc fc fc 07 fc fc fc 07 fc fc fc 05 fc fc fc [ 120.526982][ C0] ffff88810bacc300: 07 fc fc fc 02 fc fc fc 02 fc fc fc 05 fc fc fc [ 120.536007][ C0] ================================================================== [ 120.544085][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.551809][ C0] CPU: 0 UID: 0 PID: 1122 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.562502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.573117][ C0] Workqueue: usb_hub_wq hub_event [ 120.578542][ C0] Call Trace: [ 120.582003][ C0] [ 120.585028][ C0] dump_stack_lvl+0x100/0x190 [ 120.590186][ C0] vpanic+0x20d/0x630 [ 120.594214][ C0] panic+0xd1/0xd1 [ 120.597981][ C0] ? __pfx_panic+0x10/0x10 [ 120.602685][ C0] ? end_report.part.0+0x23/0x90 [ 120.607962][ C0] ? rcu_is_watching+0x12/0xc0 [ 120.612829][ C0] ? end_report.part.0+0x23/0x90 [ 120.617798][ C0] ? check_panic_on_warn+0x1f/0x90 [ 120.623114][ C0] check_panic_on_warn.cold+0x19/0x34 [ 120.628851][ C0] end_report.part.0+0x3a/0x90 [ 120.633631][ C0] kasan_report.cold+0xe/0x18 [ 120.638316][ C0] ? usbtmc_interrupt+0x68d/0x6a0 [ 120.643638][ C0] usbtmc_interrupt+0x68d/0x6a0 [ 120.648941][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 120.654680][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 120.660339][ C0] dummy_timer+0xd85/0x3670 [ 120.665146][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 120.670368][ C0] ? mark_held_locks+0x40/0x70 [ 120.675663][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 120.681923][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 120.687226][ C0] __hrtimer_run_queues+0x516/0x990 [ 120.692802][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 120.698798][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 120.705375][ C0] hrtimer_run_softirq+0x17d/0x350 [ 120.711137][ C0] handle_softirqs+0x1dd/0x8f0 [ 120.716478][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 120.721970][ C0] __irq_exit_rcu+0xed/0x150 [ 120.727144][ C0] irq_exit_rcu+0x9/0x30 [ 120.731734][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0 [ 120.737643][ C0] [ 120.740659][ C0] [ 120.743672][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.750312][ C0] RIP: 0010:rcu_read_lock_held+0x19/0x50 [ 120.756654][ C0] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 97 d5 bd 05 ba 01 00 00 00 85 c0 75 07 89 d0 e9 47 af c0 05 12 f6 00 00 84 c0 74 1a e8 19 37 01 00 84 c0 74 11 be ff ff ff [ 120.778361][ C0] RSP: 0018:ffffc90001d4efa8 EFLAGS: 00000202 [ 120.785053][ C0] RAX: 0000000000000001 RBX: ffff88811356bf00 RCX: ffffffff8242eea6 [ 120.793553][ C0] RDX: 0000000000000001 RSI: ffffffff8242f029 RDI: ffff88810efa8000 [ 120.803407][ C0] RBP: ffff888112f3d780 R08: 0000000000000005 R09: 0000000000000000 [ 120.812000][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 120.820236][ C0] R13: ffff888112f3d780 R14: ffff88811356bf00 R15: dffffc0000000000 [ 120.828576][ C0] ? kernfs_root+0x86/0x2a0 [ 120.833206][ C0] ? kernfs_root+0x209/0x2a0 [ 120.837921][ C0] ? rcu_read_lock_held+0x9/0x50 [ 120.843174][ C0] kernfs_root+0x20e/0x2a0 [ 120.848061][ C0] kernfs_link_sibling+0x518/0x770 [ 120.853441][ C0] kernfs_add_one+0x1e7/0x850 [ 120.858396][ C0] __kernfs_create_file+0x295/0x350 [ 120.864090][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 120.869609][ C0] internal_create_group+0x593/0xf40 [ 120.875231][ C0] ? sysfs_create_file_ns+0x14c/0x1e0 [ 120.881015][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 120.887120][ C0] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 120.893291][ C0] ? acpi_device_notify+0x464/0x500 [ 120.899628][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 120.905193][ C0] internal_create_groups+0x9d/0x150 [ 120.910677][ C0] device_add+0x7c8/0x1950 [ 120.915444][ C0] ? __pfx_device_add+0x10/0x10 [ 120.920391][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 120.926226][ C0] ? __init_waitqueue_head+0xca/0x150 [ 120.932089][ C0] usb_create_ep_devs+0x160/0x2b0 [ 120.937134][ C0] create_intf_ep_devs.isra.0+0x161/0x200 [ 120.942963][ C0] usb_set_configuration+0xdb9/0x1c60 [ 120.948718][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 120.955429][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 120.961259][ C0] usb_probe_device+0xef/0x400 [ 120.966481][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 120.972471][ C0] really_probe+0x241/0xa60 [ 120.977595][ C0] __driver_probe_device+0x1de/0x400 [ 120.983327][ C0] ? usb_driver_applicable+0x1c7/0x220 [ 120.989419][ C0] driver_probe_device+0x4c/0x1b0 [ 120.995097][ C0] __device_attach_driver+0x1df/0x340 [ 121.000946][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 121.007303][ C0] bus_for_each_drv+0x159/0x1e0 [ 121.012928][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 121.018666][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 121.023970][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 121.030219][ C0] __device_attach+0x1e4/0x4d0 [ 121.035168][ C0] ? __pfx___device_attach+0x10/0x10 [ 121.040717][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 121.047084][ C0] device_initial_probe+0xaf/0xd0 [ 121.056321][ C0] bus_probe_device+0x64/0x160 [ 121.062697][ C0] device_add+0x11d9/0x1950 [ 121.068136][ C0] ? __pfx_device_add+0x10/0x10 [ 121.074269][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 121.080500][ C0] usb_new_device.cold+0x685/0x115c [ 121.086476][ C0] ? do_raw_spin_lock+0x128/0x260 [ 121.092760][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 121.099341][ C0] ? mark_held_locks+0x40/0x70 [ 121.104825][ C0] hub_event+0x314d/0x4af0 [ 121.110331][ C0] ? __pfx_hub_event+0x10/0x10 [ 121.115915][ C0] ? assoc_array_insert+0x70/0x32c0 [ 121.121516][ C0] ? process_one_work+0x80b/0x1840 [ 121.126943][ C0] ? rcu_is_watching+0x12/0xc0 [ 121.132172][ C0] process_one_work+0x9c2/0x1840 [ 121.137485][ C0] ? __pfx_process_one_work+0x10/0x10 [ 121.143309][ C0] ? assign_work+0x19c/0x250 [ 121.148649][ C0] worker_thread+0x5da/0xe40 [ 121.153715][ C0] ? __pfx_worker_thread+0x10/0x10 [ 121.159202][ C0] ? kthread+0x17d/0x730 [ 121.163898][ C0] ? __pfx_worker_thread+0x10/0x10 [ 121.169126][ C0] kthread+0x3b3/0x730 [ 121.179564][ C0] ? __pfx_kthread+0x10/0x10 [ 121.184490][ C0] ? ret_from_fork+0x79/0xa20 [ 121.189754][ C0] ? ret_from_fork+0x79/0xa20 [ 121.194967][ C0] ? rcu_is_watching+0x12/0xc0 [ 121.199918][ C0] ? __pfx_kthread+0x10/0x10 [ 121.205217][ C0] ret_from_fork+0x6c3/0xa20 [ 121.210026][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 121.215894][ C0] ? __switch_to+0x7af/0x10b0 [ 121.221559][ C0] ? __pfx_kthread+0x10/0x10 [ 121.226772][ C0] ret_from_fork_asm+0x1a/0x30 [ 121.231958][ C0] [ 121.235443][ C0] Kernel Offset: disabled [ 121.239765][ C0] Rebooting in 86400 seconds..