Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. 2026/04/09 19:53:27 parsed 1 programs [ 106.137448][ T29] audit: type=1400 audit(1775764409.793:103): avc: denied { unlink } for pid=3986 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 106.252884][ T3986] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 122.052119][ T29] audit: type=1401 audit(1775764425.703:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/04/09 19:53:46 executed programs: 0 2026/04/09 19:53:58 executed programs: 2 [ 134.452629][ T29] audit: type=1400 audit(1775764438.103:105): avc: denied { read write } for pid=4969 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.476628][ T29] audit: type=1400 audit(1775764438.103:106): avc: denied { open } for pid=4969 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.501091][ T29] audit: type=1400 audit(1775764438.103:107): avc: denied { ioctl } for pid=4969 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.696301][ T1121] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.868222][ T1121] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.879064][ T1121] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 134.897543][ T1121] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.907712][ T1121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.916766][ T1121] usb 4-1: Product: syz [ 134.921236][ T1121] usb 4-1: Manufacturer: syz [ 134.926434][ T1121] usb 4-1: SerialNumber: syz [ 135.141664][ T4970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.150939][ T4970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.166126][ T1121] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 135.179781][ T1121] usb 4-1: USB disconnect, device number 2 [ 135.596078][ T1121] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.746051][ T1121] usb 4-1: Using ep0 maxpacket: 8 [ 135.752876][ T1121] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 135.761820][ T1121] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 135.772466][ T1121] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.783283][ T1121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.794248][ T1121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.806434][ T1121] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.818601][ T1121] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.832716][ T1121] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.842368][ T1121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.054778][ T1121] usb 4-1: usb_control_msg returned -32 [ 136.060818][ T1121] usbtmc 4-1:16.0: can't read capabilities [ 136.067887][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.074844][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.081320][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.087899][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.094585][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.101205][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.107559][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.114247][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.120903][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.127323][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.133734][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.140697][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.147279][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.153493][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.159819][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.166340][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.172935][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.179746][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.186674][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.193430][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.200246][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.207640][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.214308][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.220750][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.227864][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.234472][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.240602][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.246770][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.253175][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.259573][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.266392][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.272776][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.281097][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.287611][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.294468][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.301209][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.307692][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.314306][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.321162][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.327455][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.334414][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.341000][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.347527][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.354160][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.360684][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.367153][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.373888][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.380577][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.386854][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.394039][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.400658][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.407259][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.413866][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.420573][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.426802][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.433404][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.440154][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.446661][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.453063][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.459309][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.465511][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.471870][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.478194][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.484546][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.491680][ C0] usbtmc 4-1:16.0: invalid notification: 11 [ 136.498190][ C0] usbtmc 4-1:16.0: invalid notification: 1 [ 136.504421][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.511046][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 136.517326][ C0] usbtmc 4-1:16.0: invalid notification: 73 [ 136.524078][ C0] usbtmc 4-1:16.0: invalid notification: 33 [ 136.530933][ C0] usbtmc 4-1:16.0: invalid notification: 36 [ 136.537618][ C0] usbtmc 4-1:16.0: invalid notification: 8 [ 136.544420][ C0] ================================================================== [ 136.553305][ C0] BUG: KASAN: slab-out-of-bounds in usbtmc_interrupt+0x68d/0x6a0 [ 136.562266][ C0] Read of size 1 at addr ffff88810b79c301 by task kworker/0:2/1121 [ 136.571749][ C0] [ 136.574631][ C0] CPU: 0 UID: 0 PID: 1121 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 136.574657][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.574669][ C0] Workqueue: usb_hub_wq hub_event [ 136.574693][ C0] Call Trace: [ 136.574701][ C0] [ 136.574709][ C0] dump_stack_lvl+0x100/0x190 [ 136.574732][ C0] print_report+0x156/0x4c9 [ 136.574757][ C0] ? __virt_addr_valid+0x239/0x430 [ 136.574780][ C0] ? usbtmc_interrupt+0x68d/0x6a0 [ 136.574798][ C0] kasan_report+0xdf/0x1e0 [ 136.574825][ C0] ? usbtmc_interrupt+0x68d/0x6a0 [ 136.574846][ C0] usbtmc_interrupt+0x68d/0x6a0 [ 136.574867][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 136.574890][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 136.574913][ C0] dummy_timer+0xda1/0x36c0 [ 136.574940][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.574980][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 136.575002][ C0] ? mark_held_locks+0x40/0x70 [ 136.575028][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.575054][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 136.575076][ C0] __hrtimer_run_queues+0x50e/0xa70 [ 136.575096][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 136.575114][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 136.575143][ C0] hrtimer_run_softirq+0x17d/0x350 [ 136.575161][ C0] handle_softirqs+0x1de/0x9d0 [ 136.575188][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 136.575217][ C0] __irq_exit_rcu+0xed/0x150 [ 136.575242][ C0] irq_exit_rcu+0x9/0x30 [ 136.575266][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0 [ 136.575295][ C0] [ 136.575301][ C0] [ 136.575307][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.575328][ C0] RIP: 0010:__rcu_read_unlock+0x9f/0x5e0 [ 136.575357][ C0] Code: 38 d0 7c 08 84 d2 0f 85 da 01 00 00 8b 83 40 04 00 00 85 c0 75 51 48 8d bb 3c 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa <48> c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 [ 136.575374][ C0] RSP: 0018:ffffc90002caeb60 EFLAGS: 00000246 [ 136.575388][ C0] RAX: dffffc0000000000 RBX: ffff88810f335880 RCX: ffffc90002caeb5c [ 136.575400][ C0] RDX: ffff88810f335cbc RSI: ffffffff89003676 RDI: ffff88810f335cbc [ 136.575411][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 136.575422][ C0] R10: 0000000000000200 R11: 000000000003e8e2 R12: ffffc90002caec58 [ 136.575433][ C0] R13: ffffc90002caec08 R14: ffffc90002caf558 R15: ffffc90002caec3c [ 136.575451][ C0] unwind_next_frame+0x3c8/0x1ea0 [ 136.575472][ C0] ? usb_set_configuration+0xdb9/0x1c60 [ 136.575490][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 136.575518][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 136.575552][ C0] arch_stack_walk+0x94/0xf0 [ 136.575593][ C0] ? usb_generic_driver_probe+0xa1/0xe0 [ 136.575634][ C0] stack_trace_save+0x8e/0xc0 [ 136.575656][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 136.575677][ C0] ? __kasan_slab_alloc+0x6e/0x70 [ 136.575703][ C0] ? __kernfs_create_file+0x53/0x350 [ 136.575720][ C0] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 136.575740][ C0] ? internal_create_group+0x593/0xf40 [ 136.575762][ C0] ? internal_create_groups+0x9d/0x150 [ 136.575784][ C0] ? device_add+0x7c8/0x1950 [ 136.575800][ C0] ? usb_create_ep_devs+0x160/0x2b0 [ 136.575819][ C0] ? create_intf_ep_devs.isra.0+0x161/0x200 [ 136.575846][ C0] ? usb_set_configuration+0xdb9/0x1c60 [ 136.575868][ C0] kasan_save_stack+0x30/0x50 [ 136.575903][ C0] ? kasan_save_stack+0x30/0x50 [ 136.575938][ C0] ? kasan_save_track+0x14/0x30 [ 136.576055][ C0] ? __kasan_slab_alloc+0x6e/0x70 [ 136.576081][ C0] ? kmem_cache_alloc_noprof+0x2e7/0x6a0 [ 136.576102][ C0] ? __kernfs_new_node+0xd2/0x960 [ 136.576122][ C0] ? kernfs_new_node+0x11b/0x1a0 [ 136.576145][ C0] ? kernfs_create_dir_ns+0x4c/0x1a0 [ 136.576170][ C0] ? internal_create_group+0x36f/0xf40 [ 136.576192][ C0] ? dpm_sysfs_add+0x80/0x280 [ 136.576208][ C0] ? device_add+0x9ef/0x1950 [ 136.576225][ C0] ? usb_create_ep_devs+0x160/0x2b0 [ 136.576245][ C0] ? create_intf_ep_devs.isra.0+0x161/0x200 [ 136.576272][ C0] ? usb_set_configuration+0xdb9/0x1c60 [ 136.576300][ C0] kasan_save_track+0x14/0x30 [ 136.576324][ C0] __kasan_slab_alloc+0x6e/0x70 [ 136.576351][ C0] kmem_cache_alloc_noprof+0x2e7/0x6a0 [ 136.576371][ C0] ? __kernfs_new_node+0xd2/0x960 [ 136.576395][ C0] __kernfs_new_node+0xd2/0x960 [ 136.576416][ C0] ? kernfs_add_one+0x583/0x850 [ 136.576440][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 136.576465][ C0] ? find_held_lock+0x2b/0x80 [ 136.576486][ C0] ? kernfs_root+0xee/0x2a0 [ 136.576507][ C0] ? kernfs_root+0xee/0x2a0 [ 136.576530][ C0] kernfs_new_node+0x11b/0x1a0 [ 136.576556][ C0] kernfs_create_dir_ns+0x4c/0x1a0 [ 136.576583][ C0] internal_create_group+0x36f/0xf40 [ 136.576607][ C0] ? sysfs_create_file_ns+0x14c/0x1e0 [ 136.576627][ C0] ? bus_to_subsys+0x114/0x150 [ 136.576646][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 136.576677][ C0] ? bus_add_device+0x368/0x6b0 [ 136.576711][ C0] ? __pfx_bus_add_device+0x10/0x10 [ 136.576744][ C0] ? __pfx_dev_add_physical_location+0x10/0x10 [ 136.576773][ C0] dpm_sysfs_add+0x80/0x280 [ 136.576789][ C0] device_add+0x9ef/0x1950 [ 136.576807][ C0] ? __pfx_device_add+0x10/0x10 [ 136.576823][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 136.576840][ C0] ? __init_waitqueue_head+0xca/0x150 [ 136.576867][ C0] usb_create_ep_devs+0x160/0x2b0 [ 136.576888][ C0] create_intf_ep_devs.isra.0+0x161/0x200 [ 136.576919][ C0] usb_set_configuration+0xdb9/0x1c60 [ 136.576943][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 136.576982][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 136.577008][ C0] usb_probe_device+0xef/0x400 [ 136.577027][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 136.577046][ C0] really_probe+0x241/0xa60 [ 136.577071][ C0] __driver_probe_device+0x1de/0x400 [ 136.577097][ C0] ? usb_driver_applicable+0x1c7/0x220 [ 136.577118][ C0] driver_probe_device+0x4c/0x1b0 [ 136.577144][ C0] __device_attach_driver+0x1df/0x340 [ 136.577171][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 136.577197][ C0] bus_for_each_drv+0x159/0x1e0 [ 136.577221][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 136.577243][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 136.577261][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.577288][ C0] __device_attach+0x1e4/0x4d0 [ 136.577314][ C0] ? __pfx___device_attach+0x10/0x10 [ 136.577340][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.577361][ C0] device_initial_probe+0xaf/0xd0 [ 136.577387][ C0] bus_probe_device+0x64/0x160 [ 136.577411][ C0] device_add+0x11d9/0x1950 [ 136.577428][ C0] ? __pfx_device_add+0x10/0x10 [ 136.577444][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 136.577474][ C0] usb_new_device.cold+0x685/0x115c [ 136.577495][ C0] ? do_raw_spin_lock+0x128/0x260 [ 136.577514][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 136.577532][ C0] ? mark_held_locks+0x40/0x70 [ 136.577560][ C0] hub_event+0x314d/0x4af0 [ 136.577585][ C0] ? __pfx_hub_event+0x10/0x10 [ 136.577602][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 136.577628][ C0] ? rcu_is_watching+0x12/0xc0 [ 136.577649][ C0] process_one_work+0xa23/0x19a0 [ 136.577674][ C0] ? __pfx_process_one_work+0x10/0x10 [ 136.577698][ C0] ? __pfx_hub_event+0x10/0x10 [ 136.577716][ C0] worker_thread+0x5ef/0xe50 [ 136.577738][ C0] ? __pfx_worker_thread+0x10/0x10 [ 136.577759][ C0] ? kthread+0x13a/0x450 [ 136.577780][ C0] ? __pfx_worker_thread+0x10/0x10 [ 136.577808][ C0] kthread+0x370/0x450 [ 136.577834][ C0] ? __pfx_kthread+0x10/0x10 [ 136.577863][ C0] ret_from_fork+0x6c3/0xcb0 [ 136.577893][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 136.577919][ C0] ? __switch_to+0x7aa/0x1120 [ 136.577937][ C0] ? __pfx_kthread+0x10/0x10 [ 136.577956][ C0] ret_from_fork_asm+0x1a/0x30 [ 136.577995][ C0] [ 136.578002][ C0] [ 137.400136][ C0] Allocated by task 1121: [ 137.404642][ C0] kasan_save_stack+0x30/0x50 [ 137.409781][ C0] kasan_save_track+0x14/0x30 [ 137.414594][ C0] __kasan_kmalloc+0x8f/0xa0 [ 137.419289][ C0] __kmalloc_noprof+0x302/0x810 [ 137.424599][ C0] usbtmc_probe+0xa41/0x1bc0 [ 137.429382][ C0] usb_probe_interface+0x303/0x8f0 [ 137.434701][ C0] really_probe+0x241/0xa60 [ 137.439237][ C0] __driver_probe_device+0x1de/0x400 [ 137.444890][ C0] driver_probe_device+0x4c/0x1b0 [ 137.450023][ C0] __device_attach_driver+0x1df/0x340 [ 137.455614][ C0] bus_for_each_drv+0x159/0x1e0 [ 137.460587][ C0] __device_attach+0x1e4/0x4d0 [ 137.465494][ C0] device_initial_probe+0xaf/0xd0 [ 137.470917][ C0] bus_probe_device+0x64/0x160 [ 137.475793][ C0] device_add+0x11d9/0x1950 [ 137.480480][ C0] usb_set_configuration+0xd97/0x1c60 [ 137.486250][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 137.492106][ C0] usb_probe_device+0xef/0x400 [ 137.497181][ C0] really_probe+0x241/0xa60 [ 137.501714][ C0] __driver_probe_device+0x1de/0x400 [ 137.507561][ C0] driver_probe_device+0x4c/0x1b0 [ 137.512706][ C0] __device_attach_driver+0x1df/0x340 [ 137.518116][ C0] bus_for_each_drv+0x159/0x1e0 [ 137.523142][ C0] __device_attach+0x1e4/0x4d0 [ 137.528218][ C0] device_initial_probe+0xaf/0xd0 [ 137.533668][ C0] bus_probe_device+0x64/0x160 [ 137.539331][ C0] device_add+0x11d9/0x1950 [ 137.543947][ C0] usb_new_device.cold+0x685/0x115c [ 137.549636][ C0] hub_event+0x314d/0x4af0 [ 137.554462][ C0] process_one_work+0xa23/0x19a0 [ 137.560047][ C0] worker_thread+0x5ef/0xe50 [ 137.565217][ C0] kthread+0x370/0x450 [ 137.569590][ C0] ret_from_fork+0x6c3/0xcb0 [ 137.574650][ C0] ret_from_fork_asm+0x1a/0x30 [ 137.579617][ C0] [ 137.582173][ C0] The buggy address belongs to the object at ffff88810b79c300 [ 137.582173][ C0] which belongs to the cache kmalloc-8 of size 8 [ 137.597026][ C0] The buggy address is located 0 bytes to the right of [ 137.597026][ C0] allocated 1-byte region [ffff88810b79c300, ffff88810b79c301) [ 137.612491][ C0] [ 137.615298][ C0] The buggy address belongs to the physical page: [ 137.622189][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810b79c780 pfn:0x10b79c [ 137.633329][ C0] flags: 0x200000000000200(workingset|node=0|zone=2) [ 137.640721][ C0] page_type: f5(slab) [ 137.645512][ C0] raw: 0200000000000200 ffff888100041500 ffff888100040348 ffffea00042eccd0 [ 137.654385][ C0] raw: ffff88810b79c780 000000080080007a 00000000f5000000 0000000000000000 [ 137.663283][ C0] page dumped because: kasan: bad access detected [ 137.670010][ C0] page_owner tracks the page as allocated [ 137.675823][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9288155230, free_ts 9018523954 [ 137.697726][ C0] post_alloc_hook+0x153/0x170 [ 137.702724][ C0] get_page_from_freelist+0xf10/0x39f0 [ 137.708733][ C0] __alloc_frozen_pages_noprof+0x273/0x2860 [ 137.714817][ C0] new_slab+0xa6/0x6c0 [ 137.719031][ C0] refill_objects+0x26b/0x400 [ 137.723808][ C0] __pcs_replace_empty_main+0x1ab/0x660 [ 137.730277][ C0] __kmalloc_node_track_caller_noprof+0x651/0x800 [ 137.736888][ C0] kvasprintf+0xbc/0x150 [ 137.741241][ C0] kvasprintf_const+0x66/0x1a0 [ 137.746110][ C0] kobject_set_name_vargs+0x5a/0x140 [ 137.751513][ C0] dev_set_name+0xc7/0x100 [ 137.755946][ C0] usb_create_ep_devs+0x158/0x2b0 [ 137.761345][ C0] create_intf_ep_devs.isra.0+0x161/0x200 [ 137.767350][ C0] usb_set_configuration+0xdb9/0x1c60 [ 137.772747][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 137.778238][ C0] usb_probe_device+0xef/0x400 [ 137.783230][ C0] page last free pid 10 tgid 10 stack trace: [ 137.789608][ C0] __free_frozen_pages+0x7b1/0xfb0 [ 137.795010][ C0] vfree.part.0+0x12b/0x9d0 [ 137.799634][ C0] delayed_vfree_work+0x8e/0xd0 [ 137.804872][ C0] process_one_work+0xa23/0x19a0 [ 137.809833][ C0] worker_thread+0x5ef/0xe50 [ 137.814701][ C0] kthread+0x370/0x450 [ 137.818963][ C0] ret_from_fork+0x6c3/0xcb0 [ 137.823664][ C0] ret_from_fork_asm+0x1a/0x30 [ 137.828636][ C0] [ 137.831017][ C0] Memory state around the buggy address: [ 137.836757][ C0] ffff88810b79c200: 06 fc fc fc 06 fc fc fc 00 fc fc fc 00 fc fc fc [ 137.845718][ C0] ffff88810b79c280: 00 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc [ 137.854140][ C0] >ffff88810b79c300: 01 fc fc fc fa fc fc fc 06 fc fc fc 06 fc fc fc [ 137.862212][ C0] ^ [ 137.866289][ C0] ffff88810b79c380: 06 fc fc fc fa fc fc fc fa fc fc fc 04 fc fc fc [ 137.874533][ C0] ffff88810b79c400: 00 fc fc fc 04 fc fc fc 04 fc fc fc 00 fc fc fc [ 137.882599][ C0] ================================================================== [ 137.891026][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.899079][ C0] CPU: 0 UID: 0 PID: 1121 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 137.908684][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.919722][ C0] Workqueue: usb_hub_wq hub_event [ 137.924786][ C0] Call Trace: [ 137.928177][ C0] [ 137.931187][ C0] dump_stack_lvl+0x100/0x190 [ 137.936183][ C0] vpanic+0x552/0x970 [ 137.940832][ C0] ? __pfx_vpanic+0x10/0x10 [ 137.945703][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 137.950860][ C0] ? usbtmc_interrupt+0x68d/0x6a0 [ 137.956254][ C0] panic+0xd1/0xe0 [ 137.960258][ C0] ? __pfx_panic+0x10/0x10 [ 137.964788][ C0] ? end_report.part.0+0x23/0x90 [ 137.969853][ C0] ? rcu_is_watching+0x12/0xc0 [ 137.975356][ C0] ? end_report.part.0+0x23/0x90 [ 137.980674][ C0] ? check_panic_on_warn+0x1f/0x90 [ 137.986154][ C0] check_panic_on_warn.cold+0x19/0x34 [ 137.991808][ C0] end_report.part.0+0x3a/0x90 [ 137.996729][ C0] kasan_report.cold+0xe/0x18 [ 138.001835][ C0] ? usbtmc_interrupt+0x68d/0x6a0 [ 138.006982][ C0] usbtmc_interrupt+0x68d/0x6a0 [ 138.012074][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 138.017566][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 138.023005][ C0] dummy_timer+0xda1/0x36c0 [ 138.028455][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 138.034856][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 138.040732][ C0] ? mark_held_locks+0x40/0x70 [ 138.045736][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 138.051881][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 138.057177][ C0] __hrtimer_run_queues+0x50e/0xa70 [ 138.062411][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 138.068594][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 138.075683][ C0] hrtimer_run_softirq+0x17d/0x350 [ 138.081046][ C0] handle_softirqs+0x1de/0x9d0 [ 138.086239][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 138.091924][ C0] __irq_exit_rcu+0xed/0x150 [ 138.096743][ C0] irq_exit_rcu+0x9/0x30 [ 138.101291][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0 [ 138.107321][ C0] [ 138.110469][ C0] [ 138.113427][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 138.119720][ C0] RIP: 0010:__rcu_read_unlock+0x9f/0x5e0 [ 138.126192][ C0] Code: 38 d0 7c 08 84 d2 0f 85 da 01 00 00 8b 83 40 04 00 00 85 c0 75 51 48 8d bb 3c 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa <48> c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 [ 138.146794][ C0] RSP: 0018:ffffc90002caeb60 EFLAGS: 00000246 [ 138.153097][ C0] RAX: dffffc0000000000 RBX: ffff88810f335880 RCX: ffffc90002caeb5c [ 138.161134][ C0] RDX: ffff88810f335cbc RSI: ffffffff89003676 RDI: ffff88810f335cbc [ 138.169644][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 138.178510][ C0] R10: 0000000000000200 R11: 000000000003e8e2 R12: ffffc90002caec58 [ 138.186876][ C0] R13: ffffc90002caec08 R14: ffffc90002caf558 R15: ffffc90002caec3c [ 138.195351][ C0] unwind_next_frame+0x3c8/0x1ea0 [ 138.201203][ C0] ? usb_set_configuration+0xdb9/0x1c60 [ 138.207658][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 138.213143][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 138.219867][ C0] arch_stack_walk+0x94/0xf0 [ 138.224758][ C0] ? usb_generic_driver_probe+0xa1/0xe0 [ 138.230343][ C0] stack_trace_save+0x8e/0xc0 [ 138.235215][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 138.240961][ C0] ? __kasan_slab_alloc+0x6e/0x70 [ 138.246279][ C0] ? __kernfs_create_file+0x53/0x350 [ 138.251586][ C0] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 138.257404][ C0] ? internal_create_group+0x593/0xf40 [ 138.262995][ C0] ? internal_create_groups+0x9d/0x150 [ 138.268482][ C0] ? device_add+0x7c8/0x1950 [ 138.273174][ C0] ? usb_create_ep_devs+0x160/0x2b0 [ 138.278826][ C0] ? create_intf_ep_devs.isra.0+0x161/0x200 [ 138.284835][ C0] ? usb_set_configuration+0xdb9/0x1c60 [ 138.290481][ C0] kasan_save_stack+0x30/0x50 [ 138.295200][ C0] ? kasan_save_stack+0x30/0x50 [ 138.300526][ C0] ? kasan_save_track+0x14/0x30 [ 138.306014][ C0] ? __kasan_slab_alloc+0x6e/0x70 [ 138.311367][ C0] ? kmem_cache_alloc_noprof+0x2e7/0x6a0 [ 138.317289][ C0] ? __kernfs_new_node+0xd2/0x960 [ 138.322602][ C0] ? kernfs_new_node+0x11b/0x1a0 [ 138.328170][ C0] ? kernfs_create_dir_ns+0x4c/0x1a0 [ 138.333845][ C0] ? internal_create_group+0x36f/0xf40 [ 138.339777][ C0] ? dpm_sysfs_add+0x80/0x280 [ 138.344552][ C0] ? device_add+0x9ef/0x1950 [ 138.349781][ C0] ? usb_create_ep_devs+0x160/0x2b0 [ 138.355171][ C0] ? create_intf_ep_devs.isra.0+0x161/0x200 [ 138.361188][ C0] ? usb_set_configuration+0xdb9/0x1c60 [ 138.366945][ C0] kasan_save_track+0x14/0x30 [ 138.371851][ C0] __kasan_slab_alloc+0x6e/0x70 [ 138.377537][ C0] kmem_cache_alloc_noprof+0x2e7/0x6a0 [ 138.383377][ C0] ? __kernfs_new_node+0xd2/0x960 [ 138.388525][ C0] __kernfs_new_node+0xd2/0x960 [ 138.393573][ C0] ? kernfs_add_one+0x583/0x850 [ 138.398453][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 138.404037][ C0] ? find_held_lock+0x2b/0x80 [ 138.408860][ C0] ? kernfs_root+0xee/0x2a0 [ 138.413592][ C0] ? kernfs_root+0xee/0x2a0 [ 138.418475][ C0] kernfs_new_node+0x11b/0x1a0 [ 138.423485][ C0] kernfs_create_dir_ns+0x4c/0x1a0 [ 138.428884][ C0] internal_create_group+0x36f/0xf40 [ 138.434373][ C0] ? sysfs_create_file_ns+0x14c/0x1e0 [ 138.440173][ C0] ? bus_to_subsys+0x114/0x150 [ 138.445307][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 138.451310][ C0] ? bus_add_device+0x368/0x6b0 [ 138.456443][ C0] ? __pfx_bus_add_device+0x10/0x10 [ 138.461838][ C0] ? __pfx_dev_add_physical_location+0x10/0x10 [ 138.468365][ C0] dpm_sysfs_add+0x80/0x280 [ 138.472984][ C0] device_add+0x9ef/0x1950 [ 138.477509][ C0] ? __pfx_device_add+0x10/0x10 [ 138.482415][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 138.488067][ C0] ? __init_waitqueue_head+0xca/0x150 [ 138.493890][ C0] usb_create_ep_devs+0x160/0x2b0 [ 138.499238][ C0] create_intf_ep_devs.isra.0+0x161/0x200 [ 138.505180][ C0] usb_set_configuration+0xdb9/0x1c60 [ 138.511020][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 138.517397][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 138.523493][ C0] usb_probe_device+0xef/0x400 [ 138.528653][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 138.534354][ C0] really_probe+0x241/0xa60 [ 138.539606][ C0] __driver_probe_device+0x1de/0x400 [ 138.545095][ C0] ? usb_driver_applicable+0x1c7/0x220 [ 138.550669][ C0] driver_probe_device+0x4c/0x1b0 [ 138.556078][ C0] __device_attach_driver+0x1df/0x340 [ 138.562002][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 138.568616][ C0] bus_for_each_drv+0x159/0x1e0 [ 138.574007][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 138.579758][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 138.585412][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 138.591771][ C0] __device_attach+0x1e4/0x4d0 [ 138.596840][ C0] ? __pfx___device_attach+0x10/0x10 [ 138.602499][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 138.607729][ C0] device_initial_probe+0xaf/0xd0 [ 138.612972][ C0] bus_probe_device+0x64/0x160 [ 138.617938][ C0] device_add+0x11d9/0x1950 [ 138.622754][ C0] ? __pfx_device_add+0x10/0x10 [ 138.627896][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 138.633744][ C0] usb_new_device.cold+0x685/0x115c [ 138.639146][ C0] ? do_raw_spin_lock+0x128/0x260 [ 138.644571][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 138.649960][ C0] ? mark_held_locks+0x40/0x70 [ 138.655128][ C0] hub_event+0x314d/0x4af0 [ 138.659758][ C0] ? __pfx_hub_event+0x10/0x10 [ 138.664743][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 138.670675][ C0] ? rcu_is_watching+0x12/0xc0 [ 138.675491][ C0] process_one_work+0xa23/0x19a0 [ 138.680812][ C0] ? __pfx_process_one_work+0x10/0x10 [ 138.686472][ C0] ? __pfx_hub_event+0x10/0x10 [ 138.692046][ C0] worker_thread+0x5ef/0xe50 [ 138.697024][ C0] ? __pfx_worker_thread+0x10/0x10 [ 138.702290][ C0] ? kthread+0x13a/0x450 [ 138.706644][ C0] ? __pfx_worker_thread+0x10/0x10 [ 138.712036][ C0] kthread+0x370/0x450 [ 138.716220][ C0] ? __pfx_kthread+0x10/0x10 [ 138.721157][ C0] ret_from_fork+0x6c3/0xcb0 [ 138.726231][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 138.731643][ C0] ? __switch_to+0x7aa/0x1120 [ 138.736596][ C0] ? __pfx_kthread+0x10/0x10 [ 138.741493][ C0] ret_from_fork_asm+0x1a/0x30 [ 138.746642][ C0] [ 138.750708][ C0] Kernel Offset: disabled [ 138.755176][ C0] Rebooting in 86400 seconds..