_u:object_r:tmpfs_t tclass=dir permissive=1
[ 26.898807][ T29] audit: type=1400 audit(1783929662.358:70): avc: denied { write } for pid=2937 comm="rm" name="hook-state" dev="tmpfs" ino=479 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 26.976827][ T29] audit: type=1400 audit(1783929662.438:71): avc: denied { search } for pid=2921 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 27.131528][ T29] audit: type=1400 audit(1783929662.588:72): avc: denied { transition } for pid=2942 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 27.154203][ T29] audit: type=1400 audit(1783929662.588:73): avc: denied { noatsecure } for pid=2942 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 27.174367][ T29] audit: type=1400 audit(1783929662.588:74): avc: denied { write } for pid=2942 comm="sh" path="pipe:[1312]" dev="pipefs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 27.196775][ T29] audit: type=1400 audit(1783929662.588:75): avc: denied { rlimitinh } for pid=2942 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts.
2026/07/13 08:01:17 parsed 1 programs
2026/07/13 08:01:17 serving rpc on tcp://38021
[ 41.612891][ T29] kauditd_printk_skb: 1 callbacks suppressed
[ 41.612908][ T29] audit: type=1400 audit(1783929677.068:77): avc: denied { node_bind } for pid=2974 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 41.640093][ T29] audit: type=1400 audit(1783929677.068:78): avc: denied { module_request } for pid=2974 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 43.531755][ T29] audit: type=1400 audit(1783929678.988:79): avc: denied { mounton } for pid=2985 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 43.555395][ T29] audit: type=1400 audit(1783929679.008:80): avc: denied { mount } for pid=2985 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 43.558577][ T2985] cgroup: Unknown subsys name 'net'
[ 43.584361][ T29] audit: type=1400 audit(1783929679.038:81): avc: denied { unmount } for pid=2985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 43.689129][ T2985] cgroup: Unknown subsys name 'cpuset'
[ 43.697153][ T2985] cgroup: Unknown subsys name 'rlimit'
[ 43.856797][ T29] audit: type=1400 audit(1783929679.318:82): avc: denied { setattr } for pid=2985 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 43.880180][ T29] audit: type=1400 audit(1783929679.318:83): avc: denied { create } for pid=2985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 43.908297][ T29] audit: type=1400 audit(1783929679.318:84): avc: denied { write } for pid=2985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 43.936376][ T29] audit: type=1400 audit(1783929679.318:85): avc: denied { read } for pid=2985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 43.956947][ T29] audit: type=1400 audit(1783929679.348:86): avc: denied { sys_module } for pid=2985 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 44.009008][ T2990] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 44.068644][ T2985] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 45.943534][ T3000] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
2026/07/13 08:01:33 executed programs: 0
[ 57.860960][ T3047] syz-executor (3047) used greatest stack depth: 22072 bytes left
2026/07/13 08:02:18 executed programs: 10
[ 103.449848][ T29] kauditd_printk_skb: 34 callbacks suppressed
[ 103.449870][ T29] audit: type=1400 audit(1783929738.908:121): avc: denied { read write } for pid=5756 comm="syz.3.20" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 103.546848][ T29] audit: type=1400 audit(1783929738.908:122): avc: denied { open } for pid=5756 comm="syz.3.20" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 103.625911][ T29] audit: type=1400 audit(1783929738.938:123): avc: denied { ioctl } for pid=5756 comm="syz.3.20" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 103.736462][ T713] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 103.907772][ T713] usb 4-1: Using ep0 maxpacket: 8
[ 103.915785][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 103.934218][ T713] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 103.950414][ T713] usb 4-1: config 140 has an invalid interface number: 182 but max is 1
[ 103.966176][ T713] usb 4-1: config 140 has no interface number 1
[ 103.973029][ T713] usb 4-1: config 140 interface 182 has no altsetting 0
[ 103.984028][ T713] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81
[ 103.998564][ T713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 104.007326][ T713] usb 4-1: Product: syz
[ 104.011596][ T713] usb 4-1: Manufacturer: syz
[ 104.016748][ T713] usb 4-1: SerialNumber: syz
[ 104.087102][ T9] usb 8-1: Using ep0 maxpacket: 8
[ 104.096015][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 104.105122][ T9] usb 8-1: config 140 has an invalid interface number: 182 but max is 1
[ 104.116440][ T9] usb 8-1: config 140 has no interface number 1
[ 104.122809][ T9] usb 8-1: config 140 interface 182 has no altsetting 0
[ 104.139101][ T9] usb 8-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81
[ 104.148311][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 104.156990][ T9] usb 8-1: Product: syz
[ 104.161291][ T9] usb 8-1: Manufacturer: syz
[ 104.169195][ T9] usb 8-1: SerialNumber: syz
[ 104.175916][ T5770] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 104.255895][ T28] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 104.345759][ T5770] usb 6-1: Using ep0 maxpacket: 8
[ 104.352410][ T5770] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 104.361053][ T5770] usb 6-1: config 140 has an invalid interface number: 182 but max is 1
[ 104.369479][ T5770] usb 6-1: config 140 has no interface number 1
[ 104.375843][ T5770] usb 6-1: config 140 interface 182 has no altsetting 0
[ 104.385774][ T5770] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81
[ 104.394857][ T5770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 104.404237][ T5770] usb 6-1: Product: syz
[ 104.409038][ T5770] usb 6-1: Manufacturer: syz
[ 104.414137][ T5770] usb 6-1: SerialNumber: syz
[ 104.415725][ T28] usb 7-1: Using ep0 maxpacket: 8
[ 104.429902][ T28] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 104.438923][ T28] usb 7-1: config 140 has an invalid interface number: 182 but max is 1
[ 104.447409][ T3005] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 104.454938][ T28] usb 7-1: config 140 has no interface number 1
[ 104.461273][ T28] usb 7-1: config 140 interface 182 has no altsetting 0
[ 104.470280][ T28] usb 7-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81
[ 104.479588][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 104.487634][ T28] usb 7-1: Product: syz
[ 104.491798][ T28] usb 7-1: Manufacturer: syz
[ 104.496448][ T28] usb 7-1: SerialNumber: syz
[ 104.615758][ T3005] usb 3-1: Using ep0 maxpacket: 8
[ 104.622771][ T3005] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 104.631713][ T3005] usb 3-1: config 140 has an invalid interface number: 182 but max is 1
[ 104.641800][ T3005] usb 3-1: config 140 has no interface number 1
[ 104.649286][ T3005] usb 3-1: config 140 interface 182 has no altsetting 0
[ 104.658351][ T3005] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81
[ 104.667637][ T3005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 104.675753][ T3005] usb 3-1: Product: syz
[ 104.679966][ T3005] usb 3-1: Manufacturer: syz
[ 104.684565][ T3005] usb 3-1: SerialNumber: syz
[ 105.076598][ T713] usb 4-1: reset high-speed USB device number 2 using dummy_hcd
[ 105.258504][ T713] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 105.267129][ T9] usb 8-1: reset high-speed USB device number 2 using dummy_hcd
[ 105.427884][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 105.455794][ T5770] usb 6-1: reset high-speed USB device number 2 using dummy_hcd
[ 105.480261][ T713] usb 4-1: failed to restore interface 182 altsetting 8 (error=-71)
[ 105.489206][ T713] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 105.497579][ T713] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 105.509819][ T713] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 105.518168][ T713] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 105.530479][ T5780] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[ 105.540089][ T5780] usb 4-1: [UEAGLE-ATM] firmware is not available
[ 105.545775][ T28] usb 7-1: reset high-speed USB device number 2 using dummy_hcd
[ 105.546825][ T11] usb 4-1: [UEAGLE-ATM] firmware is not available
[ 105.561491][ T713] usb 4-1: USB disconnect, device number 2
[ 105.574590][ T713] ==================================================================
[ 105.582682][ T713] BUG: KASAN: slab-out-of-bounds in __mutex_lock+0x15ca/0x1bd0
[ 105.590324][ T713] Read of size 8 at addr ffff888109b751e0 by task kworker/0:2/713
[ 105.598138][ T713]
[ 105.600473][ T713] CPU: 0 UID: 0 PID: 713 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(lazy)
[ 105.600491][ T713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 105.600505][ T713] Workqueue: usb_hub_wq hub_event
[ 105.600532][ T713] Call Trace:
[ 105.600541][ T713]
[ 105.600547][ T713] dump_stack_lvl+0x100/0x190
[ 105.600571][ T713] print_report+0x13d/0x4b0
[ 105.600592][ T713] ? __virt_addr_valid+0x239/0x430
[ 105.600613][ T713] ? __mutex_lock+0x15ca/0x1bd0
[ 105.600634][ T713] kasan_report+0xdf/0x1c0
[ 105.600652][ T713] ? __mutex_lock+0x15ca/0x1bd0
[ 105.600674][ T713] __mutex_lock+0x15ca/0x1bd0
[ 105.600694][ T713] ? usbatm_usb_disconnect+0x70/0x7e0
[ 105.600711][ T713] ? rcu_is_watching+0x12/0xc0
[ 105.600725][ T713] ? trace_contention_end+0x126/0x160
[ 105.600746][ T713] ? __pfx___mutex_lock+0x10/0x10
[ 105.600765][ T713] ? trace_rpm_return_int+0x78/0x220
[ 105.600782][ T713] ? rpm_resume+0x7eb/0x1320
[ 105.600799][ T713] ? do_raw_spin_lock+0x128/0x260
[ 105.600821][ T713] ? usbatm_usb_disconnect+0x70/0x7e0
[ 105.600837][ T713] ? mark_held_locks+0x40/0x70
[ 105.600855][ T713] usbatm_usb_disconnect+0x70/0x7e0
[ 105.600873][ T713] uea_disconnect+0x279/0x2b0
[ 105.600886][ T713] usb_unbind_interface+0x1dd/0x9e0
[ 105.600907][ T713] ? kernfs_put+0x3f/0x60
[ 105.600926][ T713] ? __pfx_usb_unbind_interface+0x10/0x10
[ 105.600946][ T713] device_remove+0x12a/0x180
[ 105.600961][ T713] device_release_driver_internal+0x44e/0x620
[ 105.600981][ T713] bus_remove_device+0x2bc/0x560
[ 105.600995][ T713] ? __pfx_bus_remove_device+0x10/0x10
[ 105.601008][ T713] ? __pfx_device_remove_attrs+0x10/0x10
[ 105.601025][ T713] device_del+0x376/0x9b0
[ 105.601040][ T713] ? __pfx_device_del+0x10/0x10
[ 105.601054][ T713] ? __pfx___pm_runtime_barrier+0x10/0x10
[ 105.601072][ T713] usb_disable_device+0x367/0x810
[ 105.601089][ T713] ? mark_held_locks+0x40/0x70
[ 105.601109][ T713] usb_disconnect+0x2e2/0x9a0
[ 105.601128][ T713] hub_event+0x1d0c/0x4af0
[ 105.601151][ T713] ? __lock_acquire+0x49f/0x1a40
[ 105.601168][ T713] ? do_raw_spin_unlock+0x145/0x1e0
[ 105.601190][ T713] ? __pfx_hub_event+0x10/0x10
[ 105.601207][ T713] ? debug_object_deactivate+0x2e4/0x3b0
[ 105.601229][ T713] ? rcu_is_watching+0x12/0xc0
[ 105.601242][ T713] process_one_work+0xa23/0x1940
[ 105.601264][ T713] ? __pfx_process_one_work+0x10/0x10
[ 105.601284][ T713] ? __pfx_hub_event+0x10/0x10
[ 105.601302][ T713] worker_thread+0x5ef/0xe50
[ 105.601357][ T713] ? __pfx_worker_thread+0x10/0x10
[ 105.601374][ T713] ? kthread+0x13a/0x450
[ 105.601390][ T713] ? __pfx_worker_thread+0x10/0x10
[ 105.601407][ T713] kthread+0x370/0x450
[ 105.601422][ T713] ? __pfx_kthread+0x10/0x10
[ 105.601438][ T713] ret_from_fork+0x69a/0xc80
[ 105.601459][ T713] ? __pfx_ret_from_fork+0x10/0x10
[ 105.601480][ T713] ? __switch_to+0x7f6/0x10e0
[ 105.601494][ T713] ? __switch_to_asm+0x39/0x70
[ 105.601507][ T713] ? __pfx_kthread+0x10/0x10
[ 105.601523][ T713] ret_from_fork_asm+0x1a/0x30
[ 105.601539][ T713]
[ 105.601544][ T713]
[ 105.775815][ T3005] usb 3-1: reset high-speed USB device number 2 using dummy_hcd
[ 105.776418][ T713] Allocated by task 45:
[ 105.784915][ T28] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 105.786184][ T713] kasan_save_stack+0x30/0x50
[ 105.786218][ T713] kasan_save_track+0x14/0x30
[ 105.925291][ T713] __kasan_kmalloc+0x8f/0xa0
[ 105.929891][ T713] __kmalloc_cache_node_noprof+0x2e0/0x670
[ 105.935702][ T713] __get_vm_area_node+0x101/0x330
[ 105.940731][ T713] __vmalloc_node_range_noprof+0x228/0x1630
[ 105.946621][ T713] __vmalloc_node_noprof+0xad/0xf0
[ 105.951740][ T713] copy_process+0x7fb/0x7dd0
[ 105.956335][ T713] kernel_clone+0x176/0x9d0
[ 105.960846][ T713] user_mode_thread+0xcc/0x110
[ 105.965610][ T713] call_usermodehelper_exec_work+0xcb/0x180
[ 105.971516][ T713] process_one_work+0xa23/0x1940
[ 105.976463][ T713] worker_thread+0x5ef/0xe50
[ 105.981072][ T713] kthread+0x370/0x450
[ 105.985140][ T713] ret_from_fork+0x69a/0xc80
[ 105.989752][ T713] ret_from_fork_asm+0x1a/0x30
[ 105.994525][ T713]
[ 105.996843][ T713] Freed by task 11:
[ 106.000640][ T713] kasan_save_stack+0x30/0x50
[ 106.005335][ T713] kasan_save_track+0x14/0x30
[ 106.010013][ T713] kasan_save_free_info+0x3b/0x70
[ 106.015041][ T713] __kasan_slab_free+0x43/0x70
[ 106.019803][ T713] kfree+0x20c/0x650
[ 106.023701][ T713] vfree+0x136/0x750
[ 106.027589][ T713] delayed_vfree_work+0x56/0x80
[ 106.032437][ T713] process_one_work+0xa23/0x1940
[ 106.037378][ T713] worker_thread+0x5ef/0xe50
[ 106.041976][ T713] kthread+0x370/0x450
[ 106.046039][ T713] ret_from_fork+0x69a/0xc80
[ 106.050633][ T713] ret_from_fork_asm+0x1a/0x30
[ 106.055393][ T713]
[ 106.057703][ T713] The buggy address belongs to the object at ffff888109b75180
[ 106.057703][ T713] which belongs to the cache kmalloc-96 of size 96
[ 106.071576][ T713] The buggy address is located 0 bytes to the right of
[ 106.071576][ T713] allocated 96-byte region [ffff888109b75180, ffff888109b751e0)
[ 106.085977][ T713]
[ 106.088295][ T713] The buggy address belongs to the physical page:
[ 106.094712][ T713] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109b75
[ 106.103559][ T713] flags: 0x200000000000000(node=0|zone=2)
[ 106.109274][ T713] page_type: f5(slab)
[ 106.113261][ T713] raw: 0200000000000000 ffff888100041280 dead000000000100 dead000000000122
[ 106.121846][ T713] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
[ 106.130415][ T713] page dumped because: kasan: bad access detected
[ 106.136822][ T713] page_owner tracks the page as allocated
[ 106.142520][ T713] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 45, tgid 45 (kworker/u8:3), ts 6642580895, free_ts 0
[ 106.161969][ T713] post_alloc_hook+0xfd/0x120
[ 106.166651][ T713] get_page_from_freelist+0xf25/0x3400
[ 106.172110][ T713] __alloc_frozen_pages_noprof+0x28f/0x2b90
[ 106.178006][ T713] new_slab+0xa2/0x670
[ 106.182075][ T713] refill_objects+0xe3/0x410
[ 106.186667][ T713] __pcs_replace_empty_main+0x376/0x680
[ 106.192215][ T713] __kmalloc_cache_node_noprof+0x4b3/0x670
[ 106.198032][ T713] __get_vm_area_node+0x101/0x330
[ 106.203049][ T713] __vmalloc_node_range_noprof+0x228/0x1630
[ 106.208938][ T713] __vmalloc_node_noprof+0xad/0xf0
[ 106.214054][ T713] copy_process+0x7fb/0x7dd0
[ 106.218639][ T713] kernel_clone+0x176/0x9d0
[ 106.223133][ T713] user_mode_thread+0xcc/0x110
[ 106.227892][ T713] call_usermodehelper_exec_work+0xcb/0x180
[ 106.233787][ T713] process_one_work+0xa23/0x1940
[ 106.238727][ T713] worker_thread+0x5ef/0xe50
[ 106.243315][ T713] page_owner free stack trace missing
[ 106.248669][ T713]
[ 106.250982][ T713] Memory state around the buggy address:
[ 106.256598][ T713] ffff888109b75080: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 106.264653][ T713] ffff888109b75100: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 106.272704][ T713] >ffff888109b75180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 106.280749][ T713] ^
[ 106.287932][ T713] ffff888109b75200: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 106.295982][ T713] ffff888109b75280: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 106.304029][ T713] ==================================================================
[ 106.314909][ T9] usb 8-1: failed to restore interface 182 altsetting 8 (error=-71)
[ 106.315203][ T3005] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 106.331415][ T9] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 106.333082][ T28] usb 7-1: failed to restore interface 182 altsetting 8 (error=-71)
[ 106.340990][ T713] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 106.341012][ T713] CPU: 0 UID: 0 PID: 713 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(lazy)
[ 106.341043][ T713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 106.341061][ T713] Workqueue: usb_hub_wq hub_event
[ 106.341096][ T713] Call Trace:
[ 106.341105][ T713]
[ 106.341114][ T713] dump_stack_lvl+0x100/0x190
[ 106.341149][ T713] vpanic+0x552/0x970
[ 106.341178][ T713] ? __pfx_vpanic+0x10/0x10
[ 106.341210][ T713] ? __mutex_lock+0x15ca/0x1bd0
[ 106.341245][ T713] panic+0xd1/0xe0
[ 106.341272][ T713] ? __pfx_panic+0x10/0x10
[ 106.341308][ T713] ? __mutex_lock+0x15ca/0x1bd0
[ 106.341342][ T713] ? preempt_schedule_common+0x42/0xc0
[ 106.341377][ T713] ? check_panic_on_warn+0x1f/0x90
[ 106.341410][ T713] check_panic_on_warn.cold+0x19/0x34
[ 106.341441][ T713] end_report.part.0+0x3a/0x90
[ 106.341477][ T713] kasan_report.cold+0xe/0x18
[ 106.341514][ T713] ? __mutex_lock+0x15ca/0x1bd0
[ 106.341552][ T713] __mutex_lock+0x15ca/0x1bd0
[ 106.341588][ T713] ? usbatm_usb_disconnect+0x70/0x7e0
[ 106.341619][ T713] ? rcu_is_watching+0x12/0xc0
[ 106.341647][ T713] ? trace_contention_end+0x126/0x160
[ 106.341684][ T713] ? __pfx___mutex_lock+0x10/0x10
[ 106.341719][ T713] ? trace_rpm_return_int+0x78/0x220
[ 106.341749][ T713] ? rpm_resume+0x7eb/0x1320
[ 106.341781][ T713] ? do_raw_spin_lock+0x128/0x260
[ 106.341820][ T713] ? usbatm_usb_disconnect+0x70/0x7e0
[ 106.341850][ T713] ? mark_held_locks+0x40/0x70
[ 106.341881][ T713] usbatm_usb_disconnect+0x70/0x7e0
[ 106.341915][ T713] uea_disconnect+0x279/0x2b0
[ 106.341940][ T713] usb_unbind_interface+0x1dd/0x9e0
[ 106.341975][ T713] ? kernfs_put+0x3f/0x60
[ 106.342008][ T713] ? __pfx_usb_unbind_interface+0x10/0x10
[ 106.342047][ T713] device_remove+0x12a/0x180
[ 106.342074][ T713] device_release_driver_internal+0x44e/0x620
[ 106.342110][ T713] bus_remove_device+0x2bc/0x560
[ 106.342136][ T713] ? __pfx_bus_remove_device+0x10/0x10
[ 106.342161][ T713] ? __pfx_device_remove_attrs+0x10/0x10
[ 106.342191][ T713] device_del+0x376/0x9b0
[ 106.342219][ T713] ? __pfx_device_del+0x10/0x10
[ 106.342245][ T713] ? __pfx___pm_runtime_barrier+0x10/0x10
[ 106.342278][ T713] usb_disable_device+0x367/0x810
[ 106.342314][ T713] ? mark_held_locks+0x40/0x70
[ 106.342349][ T713] usb_disconnect+0x2e2/0x9a0
[ 106.342383][ T713] hub_event+0x1d0c/0x4af0
[ 106.342425][ T713] ? __lock_acquire+0x49f/0x1a40
[ 106.342457][ T713] ? do_raw_spin_unlock+0x145/0x1e0
[ 106.342495][ T713] ? __pfx_hub_event+0x10/0x10
[ 106.342525][ T713] ? debug_object_deactivate+0x2e4/0x3b0
[ 106.342565][ T713] ? rcu_is_watching+0x12/0xc0
[ 106.342591][ T713] process_one_work+0xa23/0x1940
[ 106.342630][ T713] ? __pfx_process_one_work+0x10/0x10
[ 106.342666][ T713] ? __pfx_hub_event+0x10/0x10
[ 106.342699][ T713] worker_thread+0x5ef/0xe50
[ 106.342734][ T713] ? __pfx_worker_thread+0x10/0x10
[ 106.342765][ T713] ? kthread+0x13a/0x450
[ 106.342793][ T713] ? __pfx_worker_thread+0x10/0x10
[ 106.342823][ T713] kthread+0x370/0x450
[ 106.342851][ T713] ? __pfx_kthread+0x10/0x10
[ 106.342880][ T713] ret_from_fork+0x69a/0xc80
[ 106.342916][ T713] ? __pfx_ret_from_fork+0x10/0x10
[ 106.342952][ T713] ? __switch_to+0x7f6/0x10e0
[ 106.342978][ T713] ? __switch_to_asm+0x39/0x70
[ 106.343004][ T713] ? __pfx_kthread+0x10/0x10
[ 106.343033][ T713] ret_from_fork_asm+0x1a/0x30
[ 106.343064][ T713]
[ 106.347308][ T713] Kernel Offset: disabled