Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts.
2026/04/09 19:58:39 parsed 1 programs
[ 91.082908][ T29] audit: type=1400 audit(1775764721.219:103): avc: denied { unlink } for pid=3980 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 91.213444][ T3980] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 104.010068][ T29] audit: type=1401 audit(1775764734.149:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2026/04/09 19:58:54 executed programs: 0
2026/04/09 19:59:04 executed programs: 2
[ 114.517115][ T29] audit: type=1400 audit(1775764744.649:105): avc: denied { read write } for pid=4963 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 114.550957][ T29] audit: type=1400 audit(1775764744.649:106): avc: denied { open } for pid=4963 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 114.593599][ T29] audit: type=1400 audit(1775764744.649:107): avc: denied { ioctl } for pid=4963 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 114.759847][ T2801] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 114.911759][ T2801] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 114.922403][ T2801] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 114.937951][ T2801] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 114.947234][ T2801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 114.955352][ T2801] usb 4-1: Product: syz
[ 114.959585][ T2801] usb 4-1: Manufacturer: syz
[ 114.964201][ T2801] usb 4-1: SerialNumber: syz
[ 115.176813][ T4964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 115.185840][ T4964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 115.197972][ T2801] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 115.211725][ T2801] usb 4-1: USB disconnect, device number 2
[ 115.649738][ T2801] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 115.799677][ T2801] usb 4-1: Using ep0 maxpacket: 8
[ 115.806398][ T2801] usb 4-1: config index 0 descriptor too short (expected 301, got 72)
[ 115.814732][ T2801] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 115.824990][ T2801] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 115.834824][ T2801] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 115.844678][ T2801] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 115.854884][ T2801] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 115.866239][ T2801] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 115.879279][ T2801] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 115.888545][ T2801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 116.100605][ T2801] usb 4-1: usb_control_msg returned -32
[ 116.106571][ T2801] usbtmc 4-1:16.0: can't read capabilities
[ 116.112954][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.119114][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.125400][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.131562][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.137593][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.143991][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.150417][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.156533][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.163005][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.169029][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.175373][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.181856][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.188150][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.195416][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.201741][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.207818][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.214180][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.220242][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.226764][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.232871][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.239499][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.245572][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.251660][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.257941][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.264133][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.270192][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.276304][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.282941][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.288986][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.295118][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.301247][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.307443][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.313549][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.319614][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.325690][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.331825][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.337844][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.343935][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.350193][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.356288][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.362294][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.368298][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.374306][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.380349][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.386436][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.392462][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.398513][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.404626][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.410741][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.416842][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.422949][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.429050][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.435086][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.441202][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.447210][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.453217][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.459421][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.465635][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.471751][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.477778][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.483784][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.490175][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.496208][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.502514][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.508574][ C1] usbtmc 4-1:16.0: invalid notification: 11
[ 116.514691][ C1] usbtmc 4-1:16.0: invalid notification: 1
[ 116.520750][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.526765][ C1] usbtmc 4-1:16.0: invalid notification: 0
[ 116.532771][ C1] usbtmc 4-1:16.0: invalid notification: 73
[ 116.538894][ C1] usbtmc 4-1:16.0: invalid notification: 33
[ 116.545002][ C1] usbtmc 4-1:16.0: invalid notification: 36
[ 116.551369][ C1] usbtmc 4-1:16.0: invalid notification: 8
[ 116.557467][ C1] ==================================================================
[ 116.565891][ C1] BUG: KASAN: slab-out-of-bounds in usbtmc_interrupt+0x68d/0x6a0
[ 116.573720][ C1] Read of size 1 at addr ffff888104fc46a1 by task kworker/1:2/2801
[ 116.581716][ C1]
[ 116.584161][ C1] CPU: 1 UID: 0 PID: 2801 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full)
[ 116.584195][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 116.584216][ C1] Workqueue: usb_hub_wq hub_event
[ 116.584252][ C1] Call Trace:
[ 116.584260][ C1]
[ 116.584267][ C1] dump_stack_lvl+0x100/0x190
[ 116.584290][ C1] print_report+0x156/0x4c9
[ 116.584311][ C1] ? __virt_addr_valid+0x239/0x430
[ 116.584331][ C1] ? usbtmc_interrupt+0x68d/0x6a0
[ 116.584346][ C1] kasan_report+0xdf/0x1e0
[ 116.584369][ C1] ? usbtmc_interrupt+0x68d/0x6a0
[ 116.584386][ C1] usbtmc_interrupt+0x68d/0x6a0
[ 116.584403][ C1] __usb_hcd_giveback_urb+0x38d/0x610
[ 116.584422][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0
[ 116.584440][ C1] dummy_timer+0xda1/0x36c0
[ 116.584470][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 116.584496][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 116.584513][ C1] ? mark_held_locks+0x40/0x70
[ 116.584536][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 116.584558][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 116.584575][ C1] __hrtimer_run_queues+0x50e/0xa70
[ 116.584592][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 116.584607][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0
[ 116.584630][ C1] hrtimer_run_softirq+0x17d/0x350
[ 116.584645][ C1] handle_softirqs+0x1de/0x9d0
[ 116.584668][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 116.584689][ C1] __irq_exit_rcu+0xed/0x150
[ 116.584716][ C1] irq_exit_rcu+0x9/0x30
[ 116.584742][ C1] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 116.584767][ C1]
[ 116.584771][ C1]
[ 116.584776][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 116.584793][ C1] RIP: 0010:lock_acquire+0x5e/0x380
[ 116.584816][ C1] Code: 05 3b 98 66 0b 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 c6 47 61 09 0f 82 c2 02 00 00 8b 35 6e 57 61 09 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 97 66 0b 0f 85 02 03 00 00 48 83 c4
[ 116.584831][ C1] RSP: 0018:ffffc90005d3efa0 EFLAGS: 00000206
[ 116.584847][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000003
[ 116.584856][ C1] RDX: 0000000000000000 RSI: ffffffff89003676 RDI: ffffffff87afd320
[ 116.584866][ C1] RBP: ffffffff896de760 R08: 00000000244039f7 R09: 0000000000000007
[ 116.584875][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002
[ 116.584884][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 116.584897][ C1] ? unwind_next_frame+0x3be/0x1ea0
[ 116.584914][ C1] ? unwind_next_frame+0x3be/0x1ea0
[ 116.584931][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 116.584950][ C1] unwind_next_frame+0xd1/0x1ea0
[ 116.584966][ C1] ? unwind_next_frame+0xbd/0x1ea0
[ 116.584983][ C1] ? kasan_save_track+0x14/0x30
[ 116.585004][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 116.585022][ C1] arch_stack_walk+0x94/0xf0
[ 116.585046][ C1] ? kasan_save_track+0x14/0x30
[ 116.585067][ C1] stack_trace_save+0x8e/0xc0
[ 116.585084][ C1] ? __pfx_stack_trace_save+0x10/0x10
[ 116.585107][ C1] ? __bfs+0x150/0x2a0
[ 116.585126][ C1] kasan_save_stack+0x30/0x50
[ 116.585146][ C1] ? kasan_save_stack+0x30/0x50
[ 116.585169][ C1] ? kasan_save_track+0x14/0x30
[ 116.585203][ C1] kasan_save_track+0x14/0x30
[ 116.585223][ C1] __kasan_slab_alloc+0x6e/0x70
[ 116.585246][ C1] kmem_cache_alloc_noprof+0x2e7/0x6a0
[ 116.585263][ C1] ? __kernfs_new_node+0xd2/0x960
[ 116.585295][ C1] __kernfs_new_node+0xd2/0x960
[ 116.585329][ C1] ? __pfx___kernfs_new_node+0x10/0x10
[ 116.585358][ C1] ? find_held_lock+0x2b/0x80
[ 116.585375][ C1] ? kernfs_root+0xee/0x2a0
[ 116.585392][ C1] ? kernfs_root+0xee/0x2a0
[ 116.585410][ C1] kernfs_new_node+0x11b/0x1a0
[ 116.585432][ C1] __kernfs_create_file+0x53/0x350
[ 116.585506][ C1] sysfs_add_file_mode_ns+0x207/0x3c0
[ 116.585525][ C1] internal_create_group+0x593/0xf40
[ 116.585546][ C1] ? sysfs_create_file_ns+0x14c/0x1e0
[ 116.585561][ C1] ? __pfx_internal_create_group+0x10/0x10
[ 116.585580][ C1] ? __pfx_sysfs_create_file_ns+0x10/0x10
[ 116.585597][ C1] ? acpi_device_notify+0x464/0x500
[ 116.585617][ C1] ? lockdep_init_map_type+0x5c/0x250
[ 116.585632][ C1] internal_create_groups+0x9d/0x150
[ 116.585651][ C1] device_add+0x7c8/0x1950
[ 116.585666][ C1] ? __pfx_device_add+0x10/0x10
[ 116.585679][ C1] ? lockdep_init_map_type+0x5c/0x250
[ 116.585693][ C1] ? __init_waitqueue_head+0xca/0x150
[ 116.585717][ C1] usb_create_ep_devs+0x160/0x2b0
[ 116.585735][ C1] usb_new_device.cold+0xcf3/0x115c
[ 116.585753][ C1] ? do_raw_spin_lock+0x128/0x260
[ 116.585769][ C1] ? __pfx_usb_new_device+0x10/0x10
[ 116.585783][ C1] ? mark_held_locks+0x40/0x70
[ 116.585806][ C1] hub_event+0x314d/0x4af0
[ 116.585828][ C1] ? __pfx_hub_event+0x10/0x10
[ 116.585844][ C1] ? debug_object_deactivate+0x2e4/0x3b0
[ 116.585867][ C1] ? rcu_is_watching+0x12/0xc0
[ 116.585885][ C1] process_one_work+0xa23/0x19a0
[ 116.585906][ C1] ? __pfx_process_one_work+0x10/0x10
[ 116.585925][ C1] ? __pfx_hub_event+0x10/0x10
[ 116.585940][ C1] worker_thread+0x5ef/0xe50
[ 116.585958][ C1] ? __pfx_worker_thread+0x10/0x10
[ 116.585975][ C1] ? kthread+0x13a/0x450
[ 116.585989][ C1] ? __pfx_worker_thread+0x10/0x10
[ 116.586005][ C1] kthread+0x370/0x450
[ 116.586019][ C1] ? __pfx_kthread+0x10/0x10
[ 116.586034][ C1] ret_from_fork+0x6c3/0xcb0
[ 116.586055][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 116.586075][ C1] ? __switch_to+0x7aa/0x1120
[ 116.586088][ C1] ? __pfx_kthread+0x10/0x10
[ 116.586103][ C1] ret_from_fork_asm+0x1a/0x30
[ 116.586130][ C1]
[ 116.586135][ C1]
[ 117.137218][ C1] Allocated by task 2801:
[ 117.141541][ C1] kasan_save_stack+0x30/0x50
[ 117.146318][ C1] kasan_save_track+0x14/0x30
[ 117.151082][ C1] __kasan_kmalloc+0x8f/0xa0
[ 117.155670][ C1] __kmalloc_noprof+0x302/0x810
[ 117.160687][ C1] usbtmc_probe+0xa41/0x1bc0
[ 117.165448][ C1] usb_probe_interface+0x303/0x8f0
[ 117.170658][ C1] really_probe+0x241/0xa60
[ 117.175251][ C1] __driver_probe_device+0x1de/0x400
[ 117.180582][ C1] driver_probe_device+0x4c/0x1b0
[ 117.185690][ C1] __device_attach_driver+0x1df/0x340
[ 117.191243][ C1] bus_for_each_drv+0x159/0x1e0
[ 117.196102][ C1] __device_attach+0x1e4/0x4d0
[ 117.200869][ C1] device_initial_probe+0xaf/0xd0
[ 117.205909][ C1] bus_probe_device+0x64/0x160
[ 117.210678][ C1] device_add+0x11d9/0x1950
[ 117.215318][ C1] usb_set_configuration+0xd97/0x1c60
[ 117.220696][ C1] usb_generic_driver_probe+0xa1/0xe0
[ 117.226085][ C1] usb_probe_device+0xef/0x400
[ 117.231058][ C1] really_probe+0x241/0xa60
[ 117.235759][ C1] __driver_probe_device+0x1de/0x400
[ 117.241058][ C1] driver_probe_device+0x4c/0x1b0
[ 117.246440][ C1] __device_attach_driver+0x1df/0x340
[ 117.251925][ C1] bus_for_each_drv+0x159/0x1e0
[ 117.257478][ C1] __device_attach+0x1e4/0x4d0
[ 117.262281][ C1] device_initial_probe+0xaf/0xd0
[ 117.267650][ C1] bus_probe_device+0x64/0x160
[ 117.272428][ C1] device_add+0x11d9/0x1950
[ 117.276931][ C1] usb_new_device.cold+0x685/0x115c
[ 117.282297][ C1] hub_event+0x314d/0x4af0
[ 117.286709][ C1] process_one_work+0xa23/0x19a0
[ 117.291821][ C1] worker_thread+0x5ef/0xe50
[ 117.296422][ C1] kthread+0x370/0x450
[ 117.300521][ C1] ret_from_fork+0x6c3/0xcb0
[ 117.305122][ C1] ret_from_fork_asm+0x1a/0x30
[ 117.310023][ C1]
[ 117.312503][ C1] The buggy address belongs to the object at ffff888104fc46a0
[ 117.312503][ C1] which belongs to the cache kmalloc-8 of size 8
[ 117.326220][ C1] The buggy address is located 0 bytes to the right of
[ 117.326220][ C1] allocated 1-byte region [ffff888104fc46a0, ffff888104fc46a1)
[ 117.340776][ C1]
[ 117.343104][ C1] The buggy address belongs to the physical page:
[ 117.349598][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888104fc4100 pfn:0x104fc4
[ 117.360024][ C1] flags: 0x200000000000200(workingset|node=0|zone=2)
[ 117.366903][ C1] page_type: f5(slab)
[ 117.370933][ C1] raw: 0200000000000200 ffff888100041500 ffff888100040348 ffffea00043ca690
[ 117.379896][ C1] raw: ffff888104fc4100 000000080080007e 00000000f5000000 0000000000000000
[ 117.388682][ C1] page dumped because: kasan: bad access detected
[ 117.395120][ C1] page_owner tracks the page as allocated
[ 117.400866][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7864886702, free_ts 0
[ 117.420568][ C1] post_alloc_hook+0x153/0x170
[ 117.425395][ C1] get_page_from_freelist+0xf10/0x39f0
[ 117.431024][ C1] __alloc_frozen_pages_noprof+0x273/0x2860
[ 117.436912][ C1] new_slab+0xa6/0x6c0
[ 117.441071][ C1] refill_objects+0x26b/0x400
[ 117.445833][ C1] __pcs_replace_empty_main+0x1ab/0x660
[ 117.451563][ C1] __kmalloc_node_track_caller_noprof+0x651/0x800
[ 117.457985][ C1] kvasprintf+0xbc/0x150
[ 117.462309][ C1] kvasprintf_const+0x66/0x1a0
[ 117.467071][ C1] kobject_set_name_vargs+0x5a/0x140
[ 117.472729][ C1] device_create_groups_vargs+0x1b1/0x270
[ 117.478554][ C1] device_create+0xed/0x130
[ 117.483070][ C1] mon_bin_add+0xba/0x160
[ 117.487503][ C1] mon_bus_init+0x18e/0x320
[ 117.492352][ C1] mon_notify+0x31c/0x480
[ 117.496791][ C1] notifier_call_chain+0x99/0x420
[ 117.501905][ C1] page_owner free stack trace missing
[ 117.507379][ C1]
[ 117.509802][ C1] Memory state around the buggy address:
[ 117.515525][ C1] ffff888104fc4580: 00 fc fc fc 06 fc fc fc 00 fc fc fc 00 fc fc fc
[ 117.523687][ C1] ffff888104fc4600: 05 fc fc fc 05 fc fc fc 05 fc fc fc 00 fc fc fc
[ 117.531753][ C1] >ffff888104fc4680: 00 fc fc fc 01 fc fc fc fa fc fc fc fa fc fc fc
[ 117.539979][ C1] ^
[ 117.545079][ C1] ffff888104fc4700: fa fc fc fc 00 fc fc fc 04 fc fc fc 05 fc fc fc
[ 117.553221][ C1] ffff888104fc4780: 06 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc
[ 117.561539][ C1] ==================================================================
[ 117.569779][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 117.576970][ C1] CPU: 1 UID: 0 PID: 2801 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full)
[ 117.586512][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 117.596918][ C1] Workqueue: usb_hub_wq hub_event
[ 117.602072][ C1] Call Trace:
[ 117.605882][ C1]
[ 117.608735][ C1] dump_stack_lvl+0x100/0x190
[ 117.613521][ C1] vpanic+0x552/0x970
[ 117.617869][ C1] ? __pfx_vpanic+0x10/0x10
[ 117.622606][ C1] ? __pfx_vprintk_emit+0x10/0x10
[ 117.627647][ C1] ? usbtmc_interrupt+0x68d/0x6a0
[ 117.632688][ C1] panic+0xd1/0xe0
[ 117.636683][ C1] ? __pfx_panic+0x10/0x10
[ 117.641989][ C1] ? end_report.part.0+0x23/0x90
[ 117.647732][ C1] ? rcu_is_watching+0x12/0xc0
[ 117.652850][ C1] ? end_report.part.0+0x23/0x90
[ 117.657888][ C1] ? check_panic_on_warn+0x1f/0x90
[ 117.663112][ C1] check_panic_on_warn.cold+0x19/0x34
[ 117.668672][ C1] end_report.part.0+0x3a/0x90
[ 117.673646][ C1] kasan_report.cold+0xe/0x18
[ 117.678430][ C1] ? usbtmc_interrupt+0x68d/0x6a0
[ 117.683743][ C1] usbtmc_interrupt+0x68d/0x6a0
[ 117.688643][ C1] __usb_hcd_giveback_urb+0x38d/0x610
[ 117.694161][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0
[ 117.699564][ C1] dummy_timer+0xda1/0x36c0
[ 117.704415][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 117.710473][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 117.715535][ C1] ? mark_held_locks+0x40/0x70
[ 117.720584][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 117.726588][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 117.731799][ C1] __hrtimer_run_queues+0x50e/0xa70
[ 117.737112][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 117.743401][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0
[ 117.749596][ C1] hrtimer_run_softirq+0x17d/0x350
[ 117.754822][ C1] handle_softirqs+0x1de/0x9d0
[ 117.759717][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 117.765020][ C1] __irq_exit_rcu+0xed/0x150
[ 117.769932][ C1] irq_exit_rcu+0x9/0x30
[ 117.774394][ C1] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 117.780309][ C1]
[ 117.783239][ C1]
[ 117.786335][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 117.792434][ C1] RIP: 0010:lock_acquire+0x5e/0x380
[ 117.798179][ C1] Code: 05 3b 98 66 0b 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 c6 47 61 09 0f 82 c2 02 00 00 8b 35 6e 57 61 09 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 97 66 0b 0f 85 02 03 00 00 48 83 c4
[ 117.818233][ C1] RSP: 0018:ffffc90005d3efa0 EFLAGS: 00000206
[ 117.824405][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000003
[ 117.832460][ C1] RDX: 0000000000000000 RSI: ffffffff89003676 RDI: ffffffff87afd320
[ 117.840437][ C1] RBP: ffffffff896de760 R08: 00000000244039f7 R09: 0000000000000007
[ 117.848932][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002
[ 117.856901][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 117.864884][ C1] ? unwind_next_frame+0x3be/0x1ea0
[ 117.870094][ C1] ? unwind_next_frame+0x3be/0x1ea0
[ 117.875362][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 117.881613][ C1] unwind_next_frame+0xd1/0x1ea0
[ 117.886565][ C1] ? unwind_next_frame+0xbd/0x1ea0
[ 117.891697][ C1] ? kasan_save_track+0x14/0x30
[ 117.896565][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 117.902826][ C1] arch_stack_walk+0x94/0xf0
[ 117.907519][ C1] ? kasan_save_track+0x14/0x30
[ 117.912578][ C1] stack_trace_save+0x8e/0xc0
[ 117.917564][ C1] ? __pfx_stack_trace_save+0x10/0x10
[ 117.923143][ C1] ? __bfs+0x150/0x2a0
[ 117.927305][ C1] kasan_save_stack+0x30/0x50
[ 117.932185][ C1] ? kasan_save_stack+0x30/0x50
[ 117.937054][ C1] ? kasan_save_track+0x14/0x30
[ 117.942045][ C1] kasan_save_track+0x14/0x30
[ 117.946756][ C1] __kasan_slab_alloc+0x6e/0x70
[ 117.951998][ C1] kmem_cache_alloc_noprof+0x2e7/0x6a0
[ 117.957745][ C1] ? __kernfs_new_node+0xd2/0x960
[ 117.962814][ C1] __kernfs_new_node+0xd2/0x960
[ 117.967721][ C1] ? __pfx___kernfs_new_node+0x10/0x10
[ 117.973378][ C1] ? find_held_lock+0x2b/0x80
[ 117.978248][ C1] ? kernfs_root+0xee/0x2a0
[ 117.983019][ C1] ? kernfs_root+0xee/0x2a0
[ 117.987793][ C1] kernfs_new_node+0x11b/0x1a0
[ 117.992579][ C1] __kernfs_create_file+0x53/0x350
[ 117.997695][ C1] sysfs_add_file_mode_ns+0x207/0x3c0
[ 118.003201][ C1] internal_create_group+0x593/0xf40
[ 118.008674][ C1] ? sysfs_create_file_ns+0x14c/0x1e0
[ 118.014067][ C1] ? __pfx_internal_create_group+0x10/0x10
[ 118.020111][ C1] ? __pfx_sysfs_create_file_ns+0x10/0x10
[ 118.026016][ C1] ? acpi_device_notify+0x464/0x500
[ 118.031277][ C1] ? lockdep_init_map_type+0x5c/0x250
[ 118.036679][ C1] internal_create_groups+0x9d/0x150
[ 118.042168][ C1] device_add+0x7c8/0x1950
[ 118.046617][ C1] ? __pfx_device_add+0x10/0x10
[ 118.051476][ C1] ? lockdep_init_map_type+0x5c/0x250
[ 118.056858][ C1] ? __init_waitqueue_head+0xca/0x150
[ 118.062258][ C1] usb_create_ep_devs+0x160/0x2b0
[ 118.067347][ C1] usb_new_device.cold+0xcf3/0x115c
[ 118.072680][ C1] ? do_raw_spin_lock+0x128/0x260
[ 118.077896][ C1] ? __pfx_usb_new_device+0x10/0x10
[ 118.083447][ C1] ? mark_held_locks+0x40/0x70
[ 118.088321][ C1] hub_event+0x314d/0x4af0
[ 118.092752][ C1] ? __pfx_hub_event+0x10/0x10
[ 118.097690][ C1] ? debug_object_deactivate+0x2e4/0x3b0
[ 118.103384][ C1] ? rcu_is_watching+0x12/0xc0
[ 118.108342][ C1] process_one_work+0xa23/0x19a0
[ 118.113392][ C1] ? __pfx_process_one_work+0x10/0x10
[ 118.118870][ C1] ? __pfx_hub_event+0x10/0x10
[ 118.123825][ C1] worker_thread+0x5ef/0xe50
[ 118.128603][ C1] ? __pfx_worker_thread+0x10/0x10
[ 118.133812][ C1] ? kthread+0x13a/0x450
[ 118.138059][ C1] ? __pfx_worker_thread+0x10/0x10
[ 118.143523][ C1] kthread+0x370/0x450
[ 118.147766][ C1] ? __pfx_kthread+0x10/0x10
[ 118.152458][ C1] ret_from_fork+0x6c3/0xcb0
[ 118.157154][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 118.162277][ C1] ? __switch_to+0x7aa/0x1120
[ 118.167047][ C1] ? __pfx_kthread+0x10/0x10
[ 118.171703][ C1] ret_from_fork_asm+0x1a/0x30
[ 118.176621][ C1]
[ 118.180064][ C1] Kernel Offset: disabled
[ 118.184409][ C1] Rebooting in 86400 seconds..