Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. 2025/08/30 10:37:29 parsed 1 programs [ 95.000267][ T29] audit: type=1400 audit(1756550251.214:101): avc: denied { unlink } for pid=3976 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.081794][ T3976] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.446685][ T29] audit: type=1400 audit(1756550252.654:102): avc: denied { read } for pid=3983 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.468225][ T29] audit: type=1400 audit(1756550252.654:103): avc: denied { open } for pid=3983 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.502546][ T29] audit: type=1400 audit(1756550252.714:104): avc: denied { unmount } for pid=3983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.139541][ T29] audit: type=1401 audit(1756550253.354:105): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/08/30 10:37:45 executed programs: 0 2025/08/30 10:37:56 executed programs: 2 [ 120.305979][ T29] audit: type=1400 audit(1756550276.514:106): avc: denied { read write } for pid=4960 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.329359][ T29] audit: type=1400 audit(1756550276.514:107): avc: denied { open } for pid=4960 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.352803][ T29] audit: type=1400 audit(1756550276.514:108): avc: denied { ioctl } for pid=4960 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.548427][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.700139][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.710482][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 120.725773][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.734896][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.743095][ T10] usb 4-1: Product: syz [ 120.747271][ T10] usb 4-1: Manufacturer: syz [ 120.751933][ T10] usb 4-1: SerialNumber: syz [ 120.963181][ T4961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.972159][ T4961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.985270][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 120.997951][ T10] usb 4-1: USB disconnect, device number 2 [ 121.418245][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.568282][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 121.574745][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 121.582973][ T10] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 121.593202][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.602952][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.612795][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 121.622884][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.633866][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.646848][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.655911][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.867425][ T10] usb 4-1: usb_control_msg returned -32 [ 121.873106][ T10] usbtmc 4-1:16.0: can't read capabilities [ 121.879301][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.885371][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.891408][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.897485][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.903565][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.909598][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.915608][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.921661][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.927698][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.933712][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.939763][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.945775][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.951801][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.957848][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.963976][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.970003][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.976039][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.982061][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.988369][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 121.994494][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.000539][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.006558][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.012806][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.018866][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.024957][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.031213][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.037248][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.043267][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.049567][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.055624][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.061732][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.067991][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.074000][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.080069][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.086136][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.092196][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.098233][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.104342][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.110358][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.116500][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.122734][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.128859][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.134854][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.140859][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.146916][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.152948][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.158990][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.164982][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.171023][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.177086][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.183145][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.189218][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.195267][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.201307][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.207410][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.213419][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.219501][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.225611][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.231641][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.237658][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.243658][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.249670][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.255658][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.261682][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.267698][ C0] usbtmc 4-1:16.0: invalid notification: 11 [ 122.273787][ C0] usbtmc 4-1:16.0: invalid notification: 1 [ 122.279835][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.285865][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 122.291881][ C0] usbtmc 4-1:16.0: invalid notification: 73 [ 122.297993][ C0] usbtmc 4-1:16.0: invalid notification: 33 [ 122.304260][ C0] usbtmc 4-1:16.0: invalid notification: 36 [ 122.310346][ C0] usbtmc 4-1:16.0: invalid notification: 8 [ 122.316536][ C0] ================================================================== [ 122.324612][ C0] BUG: KASAN: slab-out-of-bounds in usbtmc_interrupt+0x4e1/0x6e0 [ 122.332360][ C0] Read of size 1 at addr ffff888104eb3ba1 by task kworker/0:1/10 [ 122.340069][ C0] [ 122.342417][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.342439][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.342451][ C0] Workqueue: usb_hub_wq hub_event [ 122.342499][ C0] Call Trace: [ 122.342507][ C0] [ 122.342514][ C0] dump_stack_lvl+0x116/0x1f0 [ 122.342543][ C0] print_report+0xcd/0x630 [ 122.342564][ C0] ? __virt_addr_valid+0x81/0x610 [ 122.342596][ C0] ? __phys_addr+0xe8/0x180 [ 122.342633][ C0] ? usbtmc_interrupt+0x4e1/0x6e0 [ 122.342673][ C0] kasan_report+0xe0/0x110 [ 122.342696][ C0] ? usbtmc_interrupt+0x4e1/0x6e0 [ 122.342719][ C0] usbtmc_interrupt+0x4e1/0x6e0 [ 122.342744][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 122.342787][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 122.342831][ C0] dummy_timer+0x1814/0x3a30 [ 122.342868][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 122.342883][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 122.342898][ C0] ? mark_held_locks+0x49/0x80 [ 122.342912][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.342933][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 122.342947][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 122.342969][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 122.342986][ C0] ? read_tsc+0x9/0x20 [ 122.343008][ C0] hrtimer_run_softirq+0x17d/0x350 [ 122.343026][ C0] handle_softirqs+0x208/0x8d0 [ 122.343051][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 122.343076][ C0] __irq_exit_rcu+0xfa/0x160 [ 122.343098][ C0] irq_exit_rcu+0x9/0x30 [ 122.343119][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 122.343141][ C0] [ 122.343145][ C0] [ 122.343151][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.343169][ C0] RIP: 0010:unwind_next_frame+0x21/0x20a0 [ 122.343191][ C0] Code: 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 48 89 fa 41 56 48 c1 ea 03 41 55 49 89 fd 41 54 55 <53> 48 83 ec 38 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 02 0b 00 00 41 [ 122.343210][ C0] RSP: 0018:ffffc900000af068 EFLAGS: 00000a06 [ 122.343223][ C0] RAX: dffffc0000000000 RBX: ffffc900000af178 RCX: ffffc900000af180 [ 122.343234][ C0] RDX: 1ffff92000015e1d RSI: ffff8881016f9d00 RDI: ffffc900000af0e8 [ 122.343245][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 122.343255][ C0] R10: ffffc900000af0e8 R11: 0000000000000000 R12: fffff52000015e1f [ 122.343265][ C0] R13: ffffc900000af0e8 R14: ffffc900000af0e8 R15: ffffc900000af0f0 [ 122.343282][ C0] __unwind_start+0x45f/0x7f0 [ 122.343302][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 122.343324][ C0] arch_stack_walk+0x73/0x100 [ 122.343343][ C0] ? __unwind_start+0x574/0x7f0 [ 122.343363][ C0] stack_trace_save+0x8e/0xc0 [ 122.343383][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 122.343404][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 122.343423][ C0] ? kmem_cache_alloc_noprof+0x14f/0x3b0 [ 122.343448][ C0] ? stack_depot_save_flags+0x29/0x9c0 [ 122.343465][ C0] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 122.343494][ C0] ? internal_create_group+0x578/0xf30 [ 122.343509][ C0] kasan_save_stack+0x33/0x60 [ 122.343540][ C0] kasan_save_track+0x14/0x30 [ 122.343557][ C0] __kasan_slab_alloc+0x6e/0x70 [ 122.343577][ C0] kmem_cache_alloc_noprof+0x14f/0x3b0 [ 122.343601][ C0] ? __kernfs_new_node+0xd2/0x8e0 [ 122.343617][ C0] __kernfs_new_node+0xd2/0x8e0 [ 122.343632][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 122.343648][ C0] ? find_held_lock+0x2b/0x80 [ 122.343668][ C0] ? kernfs_root+0xee/0x2a0 [ 122.343683][ C0] kernfs_new_node+0x13c/0x1e0 [ 122.343712][ C0] __kernfs_create_file+0x53/0x350 [ 122.343754][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 122.343798][ C0] sysfs_merge_group+0x1aa/0x340 [ 122.343813][ C0] ? __pfx_sysfs_merge_group+0x10/0x10 [ 122.343830][ C0] ? __pfx_dev_add_physical_location+0x10/0x10 [ 122.343849][ C0] ? bus_to_subsys+0x131/0x160 [ 122.343866][ C0] dpm_sysfs_add+0x237/0x280 [ 122.343890][ C0] device_add+0x9a6/0x1aa0 [ 122.343914][ C0] ? __pfx_device_add+0x10/0x10 [ 122.343936][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 122.343951][ C0] ? __init_waitqueue_head+0xca/0x150 [ 122.343976][ C0] usb_create_ep_devs+0x160/0x2b0 [ 122.343999][ C0] usb_new_device+0xfc1/0x1a60 [ 122.344019][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 122.344036][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 122.344055][ C0] ? mark_held_locks+0x49/0x80 [ 122.344069][ C0] hub_event+0x2fce/0x5060 [ 122.344096][ C0] ? __pfx_hub_event+0x10/0x10 [ 122.344124][ C0] ? assoc_array_apply_edit+0x420/0x6c0 [ 122.344146][ C0] ? rcu_is_watching+0x12/0xc0 [ 122.344168][ C0] process_one_work+0x9cc/0x1b70 [ 122.344190][ C0] ? __pfx_hcd_resume_work+0x10/0x10 [ 122.344212][ C0] ? __pfx_process_one_work+0x10/0x10 [ 122.344233][ C0] ? assign_work+0x1a0/0x250 [ 122.344251][ C0] worker_thread+0x6c8/0xf10 [ 122.344273][ C0] ? __kthread_parkme+0x19e/0x250 [ 122.344287][ C0] ? __pfx_worker_thread+0x10/0x10 [ 122.344307][ C0] kthread+0x3c5/0x780 [ 122.344324][ C0] ? __pfx_kthread+0x10/0x10 [ 122.344342][ C0] ? rcu_is_watching+0x12/0xc0 [ 122.344361][ C0] ? __pfx_kthread+0x10/0x10 [ 122.344378][ C0] ret_from_fork+0x5b6/0x6c0 [ 122.344392][ C0] ? __pfx_kthread+0x10/0x10 [ 122.344409][ C0] ret_from_fork_asm+0x1a/0x30 [ 122.344433][ C0] [ 122.344439][ C0] [ 122.861767][ C0] Allocated by task 10: [ 122.865941][ C0] kasan_save_stack+0x33/0x60 [ 122.870667][ C0] kasan_save_track+0x14/0x30 [ 122.875374][ C0] __kasan_kmalloc+0x8f/0xa0 [ 122.879959][ C0] __kmalloc_noprof+0x213/0x4d0 [ 122.884899][ C0] usbtmc_probe+0xa54/0x1b90 [ 122.889541][ C0] usb_probe_interface+0x300/0xa40 [ 122.894656][ C0] really_probe+0x241/0xa90 [ 122.899159][ C0] __driver_probe_device+0x1de/0x440 [ 122.904454][ C0] driver_probe_device+0x4c/0x1b0 [ 122.909474][ C0] __device_attach_driver+0x1df/0x310 [ 122.914840][ C0] bus_for_each_drv+0x159/0x1e0 [ 122.919682][ C0] __device_attach+0x1e4/0x4b0 [ 122.924465][ C0] bus_probe_device+0x17f/0x1c0 [ 122.929333][ C0] device_add+0x1148/0x1aa0 [ 122.933872][ C0] usb_set_configuration+0x1187/0x1e20 [ 122.939328][ C0] usb_generic_driver_probe+0xb1/0x110 [ 122.944780][ C0] usb_probe_device+0xef/0x3e0 [ 122.949547][ C0] really_probe+0x241/0xa90 [ 122.954072][ C0] __driver_probe_device+0x1de/0x440 [ 122.959362][ C0] driver_probe_device+0x4c/0x1b0 [ 122.964436][ C0] __device_attach_driver+0x1df/0x310 [ 122.969843][ C0] bus_for_each_drv+0x159/0x1e0 [ 122.974782][ C0] __device_attach+0x1e4/0x4b0 [ 122.979634][ C0] bus_probe_device+0x17f/0x1c0 [ 122.984492][ C0] device_add+0x1148/0x1aa0 [ 122.989002][ C0] usb_new_device+0xd07/0x1a60 [ 122.993791][ C0] hub_event+0x2fce/0x5060 [ 122.998365][ C0] process_one_work+0x9cc/0x1b70 [ 123.003327][ C0] worker_thread+0x6c8/0xf10 [ 123.007916][ C0] kthread+0x3c5/0x780 [ 123.011985][ C0] ret_from_fork+0x5b6/0x6c0 [ 123.016590][ C0] ret_from_fork_asm+0x1a/0x30 [ 123.021365][ C0] [ 123.023769][ C0] The buggy address belongs to the object at ffff888104eb3ba0 [ 123.023769][ C0] which belongs to the cache kmalloc-8 of size 8 [ 123.037718][ C0] The buggy address is located 0 bytes to the right of [ 123.037718][ C0] allocated 1-byte region [ffff888104eb3ba0, ffff888104eb3ba1) [ 123.052169][ C0] [ 123.054482][ C0] The buggy address belongs to the physical page: [ 123.060890][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x104eb3 [ 123.069724][ C0] flags: 0x200000000000000(node=0|zone=2) [ 123.075443][ C0] page_type: f5(slab) [ 123.079416][ C0] raw: 0200000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 123.087994][ C0] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 123.096741][ C0] page dumped because: kasan: bad access detected [ 123.103142][ C0] page_owner tracks the page as allocated [ 123.108844][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2742349725, free_ts 2700768373 [ 123.127252][ C0] post_alloc_hook+0x1c0/0x230 [ 123.132157][ C0] get_page_from_freelist+0xf98/0x2ce0 [ 123.137630][ C0] __alloc_frozen_pages_noprof+0x259/0x21e0 [ 123.143528][ C0] alloc_pages_mpol+0xe4/0x410 [ 123.148291][ C0] new_slab+0x247/0x330 [ 123.152442][ C0] ___slab_alloc+0xc78/0x1680 [ 123.157138][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 123.162523][ C0] __kmalloc_noprof+0x15b/0x4d0 [ 123.167376][ C0] acpi_ns_internalize_name+0x144/0x220 [ 123.172944][ C0] acpi_ns_get_node_unlocked+0x163/0x310 [ 123.178568][ C0] acpi_ns_get_node+0x4c/0x70 [ 123.183270][ C0] acpi_get_handle+0x105/0x270 [ 123.188290][ C0] acpi_has_method+0x7a/0xc0 [ 123.192890][ C0] acpi_add_single_object+0x17c/0x1b80 [ 123.198345][ C0] acpi_bus_check_add+0x23f/0x910 [ 123.203476][ C0] acpi_ns_walk_namespace+0x408/0x5b0 [ 123.208839][ C0] page last free pid 1 tgid 1 stack trace: [ 123.214645][ C0] __free_frozen_pages+0x78a/0xfd0 [ 123.219750][ C0] __put_partials+0x165/0x1c0 [ 123.224424][ C0] qlist_free_all+0x4d/0x120 [ 123.229017][ C0] kasan_quarantine_remove_cache+0x167/0x180 [ 123.234995][ C0] kmem_cache_shrink+0xd/0x20 [ 123.239680][ C0] acpi_os_purge_cache+0x15/0x20 [ 123.244648][ C0] acpi_purge_cached_objects+0xad/0x100 [ 123.250289][ C0] acpi_initialize_objects+0x47/0xa0 [ 123.255602][ C0] acpi_init+0x168/0xb60 [ 123.259928][ C0] do_one_initcall+0x120/0x6e0 [ 123.264784][ C0] kernel_init_freeable+0x5c2/0x910 [ 123.270151][ C0] kernel_init+0x1c/0x2b0 [ 123.274504][ C0] ret_from_fork+0x5b6/0x6c0 [ 123.279115][ C0] ret_from_fork_asm+0x1a/0x30 [ 123.283881][ C0] [ 123.286199][ C0] Memory state around the buggy address: [ 123.291817][ C0] ffff888104eb3a80: 06 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc [ 123.299884][ C0] ffff888104eb3b00: 06 fc fc fc 06 fc fc fc 00 fc fc fc 00 fc fc fc [ 123.308054][ C0] >ffff888104eb3b80: 00 fc fc fc 01 fc fc fc fa fc fc fc fa fc fc fc [ 123.316127][ C0] ^ [ 123.321232][ C0] ffff888104eb3c00: fa fc fc fc 04 fc fc fc 00 fc fc fc 04 fc fc fc [ 123.329287][ C0] ffff888104eb3c80: 04 fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc [ 123.337365][ C0] ================================================================== [ 123.345442][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 123.352629][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.362259][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.372320][ C0] Workqueue: usb_hub_wq hub_event [ 123.377376][ C0] Call Trace: [ 123.380652][ C0] [ 123.383489][ C0] dump_stack_lvl+0x3d/0x1f0 [ 123.388095][ C0] vpanic+0x6e8/0x7a0 [ 123.392082][ C0] ? __pfx_vpanic+0x10/0x10 [ 123.396586][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 123.401631][ C0] ? usbtmc_interrupt+0x4e1/0x6e0 [ 123.406663][ C0] panic+0xca/0xd0 [ 123.410392][ C0] ? __pfx_panic+0x10/0x10 [ 123.415070][ C0] ? end_report+0x4c/0x170 [ 123.419490][ C0] ? rcu_is_watching+0x12/0xc0 [ 123.424360][ C0] ? lock_release+0x201/0x2f0 [ 123.429038][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 123.434154][ C0] check_panic_on_warn+0xab/0xb0 [ 123.439096][ C0] end_report+0x107/0x170 [ 123.443431][ C0] kasan_report+0xee/0x110 [ 123.447953][ C0] ? usbtmc_interrupt+0x4e1/0x6e0 [ 123.452991][ C0] usbtmc_interrupt+0x4e1/0x6e0 [ 123.457853][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 123.463242][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 123.468457][ C0] dummy_timer+0x1814/0x3a30 [ 123.473059][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 123.477993][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 123.482927][ C0] ? mark_held_locks+0x49/0x80 [ 123.487774][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 123.493623][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 123.498563][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 123.503769][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 123.509490][ C0] ? read_tsc+0x9/0x20 [ 123.513597][ C0] hrtimer_run_softirq+0x17d/0x350 [ 123.518712][ C0] handle_softirqs+0x208/0x8d0 [ 123.523513][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 123.528899][ C0] __irq_exit_rcu+0xfa/0x160 [ 123.533498][ C0] irq_exit_rcu+0x9/0x30 [ 123.537752][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 123.543492][ C0] [ 123.546414][ C0] [ 123.549336][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 123.555340][ C0] RIP: 0010:unwind_next_frame+0x21/0x20a0 [ 123.561247][ C0] Code: 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 48 89 fa 41 56 48 c1 ea 03 41 55 49 89 fd 41 54 55 <53> 48 83 ec 38 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 02 0b 00 00 41 [ 123.580861][ C0] RSP: 0018:ffffc900000af068 EFLAGS: 00000a06 [ 123.586925][ C0] RAX: dffffc0000000000 RBX: ffffc900000af178 RCX: ffffc900000af180 [ 123.594889][ C0] RDX: 1ffff92000015e1d RSI: ffff8881016f9d00 RDI: ffffc900000af0e8 [ 123.602858][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 123.611426][ C0] R10: ffffc900000af0e8 R11: 0000000000000000 R12: fffff52000015e1f [ 123.619402][ C0] R13: ffffc900000af0e8 R14: ffffc900000af0e8 R15: ffffc900000af0f0 [ 123.627469][ C0] __unwind_start+0x45f/0x7f0 [ 123.632156][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 123.638326][ C0] arch_stack_walk+0x73/0x100 [ 123.643011][ C0] ? __unwind_start+0x574/0x7f0 [ 123.647870][ C0] stack_trace_save+0x8e/0xc0 [ 123.652678][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 123.658056][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 123.663437][ C0] ? kmem_cache_alloc_noprof+0x14f/0x3b0 [ 123.669085][ C0] ? stack_depot_save_flags+0x29/0x9c0 [ 123.674644][ C0] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 123.680211][ C0] ? internal_create_group+0x578/0xf30 [ 123.685670][ C0] kasan_save_stack+0x33/0x60 [ 123.690378][ C0] kasan_save_track+0x14/0x30 [ 123.695142][ C0] __kasan_slab_alloc+0x6e/0x70 [ 123.699996][ C0] kmem_cache_alloc_noprof+0x14f/0x3b0 [ 123.705470][ C0] ? __kernfs_new_node+0xd2/0x8e0 [ 123.710505][ C0] __kernfs_new_node+0xd2/0x8e0 [ 123.715440][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 123.720915][ C0] ? find_held_lock+0x2b/0x80 [ 123.725595][ C0] ? kernfs_root+0xee/0x2a0 [ 123.730227][ C0] kernfs_new_node+0x13c/0x1e0 [ 123.735042][ C0] __kernfs_create_file+0x53/0x350 [ 123.740181][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 123.745601][ C0] sysfs_merge_group+0x1aa/0x340 [ 123.750563][ C0] ? __pfx_sysfs_merge_group+0x10/0x10 [ 123.756025][ C0] ? __pfx_dev_add_physical_location+0x10/0x10 [ 123.762191][ C0] ? bus_to_subsys+0x131/0x160 [ 123.767082][ C0] dpm_sysfs_add+0x237/0x280 [ 123.771738][ C0] device_add+0x9a6/0x1aa0 [ 123.776196][ C0] ? __pfx_device_add+0x10/0x10 [ 123.781101][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 123.786481][ C0] ? __init_waitqueue_head+0xca/0x150 [ 123.791873][ C0] usb_create_ep_devs+0x160/0x2b0 [ 123.797085][ C0] usb_new_device+0xfc1/0x1a60 [ 123.801878][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 123.806994][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 123.812212][ C0] ? mark_held_locks+0x49/0x80 [ 123.816993][ C0] hub_event+0x2fce/0x5060 [ 123.821448][ C0] ? __pfx_hub_event+0x10/0x10 [ 123.826327][ C0] ? assoc_array_apply_edit+0x420/0x6c0 [ 123.831891][ C0] ? rcu_is_watching+0x12/0xc0 [ 123.836671][ C0] process_one_work+0x9cc/0x1b70 [ 123.841644][ C0] ? __pfx_hcd_resume_work+0x10/0x10 [ 123.846945][ C0] ? __pfx_process_one_work+0x10/0x10 [ 123.852327][ C0] ? assign_work+0x1a0/0x250 [ 123.856926][ C0] worker_thread+0x6c8/0xf10 [ 123.861613][ C0] ? __kthread_parkme+0x19e/0x250 [ 123.866638][ C0] ? __pfx_worker_thread+0x10/0x10 [ 123.871858][ C0] kthread+0x3c5/0x780 [ 123.875985][ C0] ? __pfx_kthread+0x10/0x10 [ 123.880628][ C0] ? rcu_is_watching+0x12/0xc0 [ 123.885414][ C0] ? __pfx_kthread+0x10/0x10 [ 123.890014][ C0] ret_from_fork+0x5b6/0x6c0 [ 123.894608][ C0] ? __pfx_kthread+0x10/0x10 [ 123.899223][ C0] ret_from_fork_asm+0x1a/0x30 [ 123.904015][ C0] [ 123.907271][ C0] Kernel Offset: disabled [ 123.911598][ C0] Rebooting in 86400 seconds..