last executing test programs:
222.947175ms ago: executing program 0 (id=1):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000000000009050a", @ANYRES16], 0x0)
syz_usb_disconnect(r0) (async)
syz_usb_disconnect(r0)
174.107516ms ago: executing program 3 (id=4):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) (async, rerun: 64)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (rerun: 64)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) (async)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0x20, 0x7}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])
165.096106ms ago: executing program 4 (id=5):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x1e, 0x3, &(0x7f0000000080)="3ccc9f")
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect_ath9k(0x3, 0xfdf9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x31, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x82, &(0x7f0000000080)=ANY=[])
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700"], 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/95)
44.464119ms ago: executing program 2 (id=3):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_disconnect(r0) (async)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r2, 0x5b15, 0x0)
r3 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000280)=ANY=[@ANYRES8], 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[])
0s ago: executing program 1 (id=2):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000000140)=""/204) (async)
r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x17, 0x7a, 0x5, 0x10, 0xc72, 0x13, 0x4ef5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x8, 0x9, 0x40, 0xa, "", [{{0x9, 0x4, 0xc, 0x3, 0x0, 0xfe, 0x42, 0x0, 0x80}}, {{0x9, 0x4, 0xfe, 0xe7, 0x1, 0x60, 0x27, 0x47, 0x80, [], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0x3d, 0xc4}}]}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, &(0x7f0000002400)={0x14, 0x0, &(0x7f00000022c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
syz_usb_control_io$uac3(r3, &(0x7f0000002780)={0x14, 0x0, &(0x7f0000002740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}}, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000004f00)={0x1c, &(0x7f0000004dc0)={0x20, 0x17}, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000006c0)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="362182"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x2, "a56f"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000180)={0x0, 0x10, 0xd2, {0xd2, 0xa, "1ffdb93e94a54fd677f97761e716dee644fb04f377cd755bf85492ddfd70a8eab88013ad9366a3f1ed8e25a15b86585de1eb9d5b5688dd0257b6a014362d0e30a007d64b7d327debd8094220ef1058cd1b350a3fd1d87fc96ce6faeef83897b14ec818077084fba4e624c51554aa794215a56f3a32e451b139bcbeab943e5f26498aa8c48c967f975eea4e0479fbd17f2620c34ec03d3feab43df16c760d34d5fa9b8583f5325b27f6a88f223492ff85caa4570e7ba33353d240a6e9c5bcb9fef40f785b5fdca7fe18f2e4dd76a7d708"}}, &(0x7f0000000280)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "3b12eade320a005491dbd1eb56722d8136f7f68bd6db8961df1d836c4f9461e72d329c0a7fd679ec1f9dd46db0a832ca7e57f514d6daa401610450921ce8400ed71a06a94f73c6c4748e5e3c331e74f2dc916cf925b8319a8bf56b61fb7a99d0b3f25c5a59c82dc6323282bca92bbfc9717ea02f7f7e0d6a4c7ce1a55190432da85d1bc8fbb531cc6167379ebe1bb17a1f54b19de67339334a30bb1de79e18627b521b0f68d8d484d6da63587dea9f89487ce410f806a847f5b83a775ca8"}}, &(0x7f0000000380)=ANY=[@ANYBLOB="0022853d5dedb1a744c207892647fc012894a4ca"], &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27af, 0xfd, 0x1, {0x22, 0xe44}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000440)={0x0, 0xb, 0xdd, "342928138418aa338640c0552c9c524c0570d6da2efc903362064f1218abc059baed7ed21f3e5fbedcd2f4f9aecccaf0db48bbc11adb83f1937f06ac81facf17c73d6ebb76f52e485f10413d5ddf65caa1ee4e64335f5ab3f1b8616803e99cb034f7ec91e88551e82b4ef0a368c5eefb9bdf5e8f24e87c7fd515405d9d48ab47ac33a3b2927ef07a4d052fc470aadc34e93c3195327e056c40aa3409345bdc33bc4ff5d94127664bd49bb10c3cd6562658424da8256820066c3b9630bd65766ac3217f291eb913a506755bfb2d9212c4fdb2316b69f6032e2a5caee4bb"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x1, 0x51, "29f5756e201d6c430d48517a118668b01a4c2e3e046169d89c005edf3d493d153bd88e5551d0aeac08b674d2292ecfe28abf9bd717aac8e456d22fe405a3ac39d7d565bf4eca65d932fce65ed6cfb7d170"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x4}})
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000740)={0x3, 0x3, 0x1, 0x3, 0x3, 0x7})
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts.
[ 47.535627][ T29] kauditd_printk_skb: 1 callbacks suppressed
[ 47.535651][ T29] audit: type=1400 audit(1786594719.589:77): avc: denied { mounton } for pid=2962 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 47.566122][ T29] audit: type=1400 audit(1786594719.619:78): avc: denied { mount } for pid=2962 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 47.580798][ T2962] cgroup: Unknown subsys name 'net'
[ 47.596164][ T29] audit: type=1400 audit(1786594719.649:79): avc: denied { unmount } for pid=2962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 47.718008][ T2962] cgroup: Unknown subsys name 'cpuset'
[ 47.727415][ T2962] cgroup: Unknown subsys name 'rlimit'
[ 47.892884][ T29] audit: type=1400 audit(1786594719.939:80): avc: denied { setattr } for pid=2962 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 47.916693][ T29] audit: type=1400 audit(1786594719.939:81): avc: denied { mounton } for pid=2962 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 47.942151][ T29] audit: type=1400 audit(1786594719.949:82): avc: denied { mount } for pid=2962 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 48.032948][ T2965] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 48.042431][ T29] audit: type=1400 audit(1786594720.099:83): avc: denied { relabelto } for pid=2965 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 48.068246][ T29] audit: type=1400 audit(1786594720.099:84): avc: denied { write } for pid=2965 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 48.130067][ T29] audit: type=1400 audit(1786594720.179:85): avc: denied { read } for pid=2962 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 48.155994][ T29] audit: type=1400 audit(1786594720.179:86): avc: denied { open } for pid=2962 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 48.158610][ T2962] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 62.267119][ T29] kauditd_printk_skb: 6 callbacks suppressed
[ 62.267146][ T29] audit: type=1400 audit(1786594734.319:93): avc: denied { create } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 62.337645][ T29] audit: type=1400 audit(1786594734.349:94): avc: denied { write } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 62.471016][ T29] audit: type=1400 audit(1786594734.509:95): avc: denied { read } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 87.839985][ T4595] modprobe (4595) used greatest stack depth: 23272 bytes left
[ 102.137666][ T29] audit: type=1400 audit(1786594774.189:96): avc: denied { mounton } for pid=2977 comm="syz-executor" path="/root/syzkaller.gwx1eU/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 102.204342][ T29] audit: type=1400 audit(1786594774.189:97): avc: denied { mount } for pid=2977 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 102.245015][ T29] audit: type=1400 audit(1786594774.189:98): avc: denied { mounton } for pid=2977 comm="syz-executor" path="/root/syzkaller.gwx1eU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 102.324999][ T29] audit: type=1400 audit(1786594774.229:99): avc: denied { mount } for pid=2977 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 102.387406][ T29] audit: type=1400 audit(1786594774.229:100): avc: denied { mounton } for pid=2977 comm="syz-executor" path="/root/syzkaller.gwx1eU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 102.479454][ T29] audit: type=1400 audit(1786594774.239:101): avc: denied { mounton } for pid=2977 comm="syz-executor" path="/root/syzkaller.gwx1eU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 102.556595][ T29] audit: type=1400 audit(1786594774.239:102): avc: denied { unmount } for pid=2977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 102.577805][ T29] audit: type=1400 audit(1786594774.249:103): avc: denied { mounton } for pid=2971 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 102.625822][ T2977] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 102.676206][ T29] audit: type=1400 audit(1786594774.719:104): avc: denied { read write } for pid=2971 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 102.770654][ T29] audit: type=1400 audit(1786594774.749:105): avc: denied { open } for pid=2971 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 103.103239][ T119] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 103.105245][ T767] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 103.112778][ T5223] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 103.185053][ T11] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 103.235037][ T5229] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 103.275130][ T5223] usb 4-1: Using ep0 maxpacket: 8
[ 103.284203][ T5223] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 103.288911][ T767] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 103.292993][ T5223] usb 4-1: config 179 has no interface number 0
[ 103.293126][ T5223] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 103.307108][ T767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 103.317570][ T119] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 103.323815][ T767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 103.337032][ T5223] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 103.344212][ T767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 103.352481][ T11] usb 3-1: Using ep0 maxpacket: 16
[ 103.372735][ T767] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 103.374504][ T119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 103.381382][ T767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 103.389883][ T5223] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 103.398839][ T767] usb 1-1: Product: syz
[ 103.405043][ T119] usb 5-1: Product: syz
[ 103.418016][ T767] usb 1-1: Manufacturer: syz
[ 103.420354][ T5229] usb 2-1: Using ep0 maxpacket: 16
[ 103.424514][ T767] usb 1-1: SerialNumber: syz
[ 103.430436][ T5223] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 103.451433][ T119] usb 5-1: Manufacturer: syz
[ 103.456834][ T119] usb 5-1: SerialNumber: syz
[ 103.462295][ T5223] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 103.475973][ T11] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 103.487843][ T5229] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 103.496081][ T767] usb 1-1: config 0 descriptor??
[ 103.501541][ T11] usb 3-1: config 0 interface 0 has no altsetting 0
[ 103.510912][ T5229] usb 2-1: config 0 has no interface number 0
[ 103.520744][ T767] iguanair 1-1:0.0: failed to submit urb: -90
[ 103.529190][ T767] iguanair 1-1:0.0: probe with driver iguanair failed with error -90
[ 103.530834][ T5229] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 103.550201][ T5223] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 103.561000][ T11] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 103.576589][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 103.584730][ T5229] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 103.596074][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 103.613506][ T11] usb 3-1: Product: syz
[ 103.618091][ T5222] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 103.618334][ T5229] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 103.636766][ T11] usb 3-1: Manufacturer: syz
[ 103.645725][ T11] usb 3-1: SerialNumber: syz
[ 103.667442][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 103.683778][ T5232] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 103.699918][ T11] usb 3-1: config 0 descriptor??
[ 103.714552][ T767] usb 1-1: USB disconnect, device number 2
[ 103.795738][ T5229] usb 2-1: config 0 descriptor??
[ 103.862551][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 103.877094][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 103.888805][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 103.900446][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 103.911818][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 103.927637][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 103.951965][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 103.971225][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 103.988999][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 104.013550][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 104.027023][ T767] usb 5-1: USB disconnect, device number 2
[ 104.041950][ T5231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 104.052967][ T5231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 104.061308][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 104.089312][ T28] usb 4-1: USB disconnect, device number 2
[ 104.089349][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 104.103695][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 104.112647][ C0] ==================================================================
[ 104.120785][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260
[ 104.128695][ C0] Read of size 4 at addr ffff88811926685c by task kworker/0:1/11
[ 104.136552][ C0]
[ 104.138944][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(lazy)
[ 104.138982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 104.139006][ C0] Workqueue: usb_hub_wq hub_event
[ 104.139064][ C0] Call Trace:
[ 104.139079][ C0]
[ 104.139092][ C0] dump_stack_lvl+0x100/0x190
[ 104.139150][ C0] print_report+0x13d/0x4b0
[ 104.139202][ C0] ? __virt_addr_valid+0x239/0x430
[ 104.139251][ C0] ? do_raw_spin_lock+0x23b/0x260
[ 104.139303][ C0] kasan_report+0xdf/0x1c0
[ 104.139358][ C0] ? do_raw_spin_lock+0x23b/0x260
[ 104.139415][ C0] do_raw_spin_lock+0x23b/0x260
[ 104.139469][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 104.139520][ C0] ? kcov_remote_stop+0x18d/0x540
[ 104.139557][ C0] ? kcov_remote_stop+0x18d/0x540
[ 104.139595][ C0] _raw_spin_lock_irqsave+0x42/0x60
[ 104.139642][ C0] ? __wake_up+0x1c/0x60
[ 104.139683][ C0] __wake_up+0x1c/0x60
[ 104.139724][ C0] usb_anchor_resume_wakeups+0xc7/0xf0
[ 104.139763][ C0] __usb_hcd_giveback_urb+0x3d6/0x610
[ 104.139818][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0
[ 104.139877][ C0] dummy_timer+0xdb2/0x36f0
[ 104.139940][ C0] ? find_held_lock+0x2b/0x80
[ 104.139974][ C0] ? debug_object_deactivate+0x2e4/0x3b0
[ 104.140023][ C0] ? debug_object_deactivate+0x2e4/0x3b0
[ 104.140073][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 104.140122][ C0] ? debug_object_deactivate+0x2e4/0x3b0
[ 104.140169][ C0] ? __pfx_debug_object_deactivate+0x10/0x10
[ 104.140218][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 104.140272][ C0] ? mark_held_locks+0x40/0x70
[ 104.140322][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 104.140369][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 104.140419][ C0] __hrtimer_run_queues+0x462/0x9c0
[ 104.140480][ C0] hrtimer_run_softirq+0x17d/0x2c0
[ 104.140536][ C0] handle_softirqs+0x1dd/0x990
[ 104.140594][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 104.140647][ C0] ? _raw_spin_unlock+0x28/0x50
[ 104.140692][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720
[ 104.140725][ C0] __irq_exit_rcu+0x160/0x210
[ 104.140776][ C0] irq_exit_rcu+0x9/0x30
[ 104.140802][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 104.140854][ C0]
[ 104.140865][ C0]
[ 104.140877][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 104.140915][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[ 104.140967][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 72 11 fa 48 89 df e8 7e c2 11 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 50 04 fa 65 8b 05 ce e2 7f 05 85 c0 74 16 5b
[ 104.141010][ C0] RSP: 0018:ffffc900000beaf8 EFLAGS: 00000246
[ 104.141037][ C0] RAX: 0000000000000006 RBX: ffff888100aff930 RCX: 0000000000000040
[ 104.141060][ C0] RDX: 0000000000000000 RSI: ffffffff890f2c7f RDI: ffffffff87b15480
[ 104.141082][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
[ 104.141102][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000246
[ 104.141121][ C0] R13: ffffc900000beb30 R14: ffff888100aff930 R15: dffffc0000000000
[ 104.141154][ C0] rwsem_wake.isra.0+0xb0/0x100
[ 104.141207][ C0] ? __pfx_rwsem_wake.isra.0+0x10/0x10
[ 104.141257][ C0] ? find_held_lock+0x2b/0x80
[ 104.141291][ C0] ? kernfs_add_one+0x611/0xaa0
[ 104.141357][ C0] up_write+0x49c/0x5c0
[ 104.141408][ C0] kernfs_add_one+0x611/0xaa0
[ 104.141456][ C0] __kernfs_create_file+0x295/0x350
[ 104.141488][ C0] sysfs_add_file_mode_ns+0x207/0x3c0
[ 104.141526][ C0] internal_create_group+0x593/0xfb0
[ 104.141568][ C0] ? __pfx_internal_create_group+0x10/0x10
[ 104.141613][ C0] ? kernfs_create_link+0x1bd/0x240
[ 104.141648][ C0] internal_create_groups+0x9d/0x150
[ 104.141694][ C0] device_add+0x77a/0x1970
[ 104.141742][ C0] ? kasan_quarantine_put+0x104/0x240
[ 104.141782][ C0] ? __pfx_device_add+0x10/0x10
[ 104.141829][ C0] ? input_register_device+0x9a9/0xe00
[ 104.141882][ C0] ? kfree+0x20c/0x650
[ 104.141928][ C0] input_register_device+0x7d2/0xe00
[ 104.141992][ C0] imon_probe+0x15ea/0x30a0
[ 104.142030][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 104.142046][ C0] usb_probe_interface+0x386/0x9b0
[ 104.142191][ C0] ? __pfx_usb_probe_interface+0x10/0x10
[ 104.142360][ C0] ? kernfs_put+0x3f/0x60
[ 104.142470][ C0] ? sysfs_create_link+0x68/0xc0
[ 104.142581][ C0] ? __pfx_usb_probe_interface+0x10/0x10
[ 104.142714][ C0] really_probe+0x241/0xa60
[ 104.142813][ C0] __driver_probe_device+0x20e/0x450
[ 104.142906][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 104.142996][ C0] driver_probe_device+0x4a/0x140
[ 104.143103][ C0] __device_attach_driver+0x1df/0x320
[ 104.143211][ C0] ? __pfx___device_attach_driver+0x10/0x10
[ 104.143327][ C0] bus_for_each_drv+0x159/0x1e0
[ 104.143465][ C0] ? __pfx_bus_for_each_drv+0x10/0x10
[ 104.143619][ C0] ? lockdep_hardirqs_on+0x78/0x100
[ 104.143779][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 104.143903][ C0] __device_attach+0x1e4/0x4d0
[ 104.144003][ C0] ? __pfx___device_attach+0x10/0x10
[ 104.144111][ C0] ? do_raw_spin_unlock+0x145/0x1e0
[ 104.144281][ C0] device_initial_probe+0xaf/0xd0
[ 104.144401][ C0] bus_probe_device+0x64/0x160
[ 104.144496][ C0] device_add+0x121d/0x1970
[ 104.144621][ C0] ? __pfx_device_add+0x10/0x10
[ 104.144729][ C0] ? usb_cache_string+0xd6/0x100
[ 104.144822][ C0] ? kfree+0x20c/0x650
[ 104.144940][ C0] usb_set_configuration+0xd97/0x1c60
[ 104.145126][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 104.145224][ C0] usb_generic_driver_probe+0xa1/0xe0
[ 104.145332][ C0] usb_probe_device+0xef/0x400
[ 104.145451][ C0] ? __pfx_usb_probe_device+0x10/0x10
[ 104.145579][ C0] really_probe+0x241/0xa60
[ 104.145690][ C0] __driver_probe_device+0x20e/0x450
[ 104.145788][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 104.145882][ C0] driver_probe_device+0x4a/0x140
[ 104.145986][ C0] __device_attach_driver+0x1df/0x320
[ 104.146093][ C0] ? __pfx___device_attach_driver+0x10/0x10
[ 104.146199][ C0] bus_for_each_drv+0x159/0x1e0
[ 104.146361][ C0] ? __pfx_bus_for_each_drv+0x10/0x10
[ 104.146521][ C0] ? lockdep_hardirqs_on+0x78/0x100
[ 104.146659][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 104.146788][ C0] __device_attach+0x1e4/0x4d0
[ 104.146891][ C0] ? __pfx___device_attach+0x10/0x10
[ 104.147003][ C0] ? do_raw_spin_unlock+0x145/0x1e0
[ 104.147143][ C0] device_initial_probe+0xaf/0xd0
[ 104.147250][ C0] bus_probe_device+0x64/0x160
[ 104.147354][ C0] device_add+0x121d/0x1970
[ 104.147479][ C0] ? __pfx_device_add+0x10/0x10
[ 104.147595][ C0] ? add_device_randomness+0xc9/0x110
[ 104.147758][ C0] usb_new_device.cold+0x685/0x115c
[ 104.147911][ C0] ? _mutex_trylock_nest_lock+0x2b1/0x310
[ 104.148057][ C0] ? do_raw_spin_lock+0x128/0x260
[ 104.148185][ C0] ? __pfx_usb_new_device+0x10/0x10
[ 104.148301][ C0] ? mark_held_locks+0x40/0x70
[ 104.148420][ C0] hub_event+0x314d/0x4af0
[ 104.148587][ C0] ? __pfx_hub_event+0x10/0x10
[ 104.148696][ C0] ? debug_object_deactivate+0x2e4/0x3b0
[ 104.148822][ C0] ? rcu_is_watching+0x12/0xc0
[ 104.148917][ C0] process_one_work+0xa23/0x1940
[ 104.149045][ C0] ? __pfx_process_one_work+0x10/0x10
[ 104.149201][ C0] ? __pfx_hub_event+0x10/0x10
[ 104.149332][ C0] worker_thread+0x5ef/0xe50
[ 104.149453][ C0] ? __pfx_worker_thread+0x10/0x10
[ 104.149555][ C0] ? kthread+0x13a/0x450
[ 104.149649][ C0] ? __pfx_worker_thread+0x10/0x10
[ 104.149756][ C0] kthread+0x370/0x450
[ 104.149846][ C0] ? __pfx_kthread+0x10/0x10
[ 104.149944][ C0] ret_from_fork+0x69a/0xc80
[ 104.150082][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 104.150211][ C0] ? __switch_to+0x7f6/0x10e0
[ 104.150304][ C0] ? __switch_to_asm+0x39/0x70
[ 104.150390][ C0] ? __pfx_kthread+0x10/0x10
[ 104.150502][ C0] ret_from_fork_asm+0x1a/0x30
[ 104.150666][ C0]
[ 104.150698][ C0]
[ 104.154546][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 104.161353][ C0] Allocated by task 5223:
[ 104.921635][ C0] kasan_save_stack+0x30/0x50
[ 104.926479][ C0] kasan_save_track+0x14/0x30
[ 104.931206][ C0] __kasan_kmalloc+0x8f/0xa0
[ 104.936029][ C0] __kmalloc_cache_noprof+0x35e/0x670
[ 104.941453][ C0] xpad_probe+0x28e/0x1f60
[ 104.945908][ C0] usb_probe_interface+0x386/0x9b0
[ 104.951071][ C0] really_probe+0x241/0xa60
[ 104.955612][ C0] __driver_probe_device+0x20e/0x450
[ 104.960969][ C0] driver_probe_device+0x4a/0x140
[ 104.966034][ C0] __device_attach_driver+0x1df/0x320
[ 104.971484][ C0] bus_for_each_drv+0x159/0x1e0
[ 104.976406][ C0] __device_attach+0x1e4/0x4d0
[ 104.981212][ C0] device_initial_probe+0xaf/0xd0
[ 104.986282][ C0] bus_probe_device+0x64/0x160
[ 104.991078][ C0] device_add+0x121d/0x1970
[ 104.995742][ C0] usb_set_configuration+0xd97/0x1c60
[ 105.001181][ C0] usb_generic_driver_probe+0xa1/0xe0
[ 105.006598][ C0] usb_probe_device+0xef/0x400
[ 105.011443][ C0] really_probe+0x241/0xa60
[ 105.015997][ C0] __driver_probe_device+0x20e/0x450
[ 105.021340][ C0] driver_probe_device+0x4a/0x140
[ 105.026678][ C0] __device_attach_driver+0x1df/0x320
[ 105.032104][ C0] bus_for_each_drv+0x159/0x1e0
[ 105.037378][ C0] __device_attach+0x1e4/0x4d0
[ 105.042221][ C0] device_initial_probe+0xaf/0xd0
[ 105.047483][ C0] bus_probe_device+0x64/0x160
[ 105.052297][ C0] device_add+0x121d/0x1970
[ 105.057118][ C0] usb_new_device.cold+0x685/0x115c
[ 105.062373][ C0] hub_event+0x314d/0x4af0
[ 105.066856][ C0] process_one_work+0xa23/0x1940
[ 105.071870][ C0] worker_thread+0x5ef/0xe50
[ 105.076507][ C0] kthread+0x370/0x450
[ 105.080618][ C0] ret_from_fork+0x69a/0xc80
[ 105.085267][ C0] ret_from_fork_asm+0x1a/0x30
[ 105.090161][ C0]
[ 105.092514][ C0] Freed by task 28:
[ 105.096353][ C0] kasan_save_stack+0x30/0x50
[ 105.101075][ C0] kasan_save_track+0x14/0x30
[ 105.105799][ C0] kasan_save_free_info+0x3b/0x70
[ 105.110889][ C0] __kasan_slab_free+0x43/0x70
[ 105.115734][ C0] kfree+0x20c/0x650
[ 105.119680][ C0] xpad_disconnect+0x1cf/0x530
[ 105.124489][ C0] usb_unbind_interface+0x1dd/0x9e0
[ 105.129736][ C0] device_remove+0x12a/0x180
[ 105.134367][ C0] device_release_driver_internal+0x44e/0x620
[ 105.140479][ C0] bus_remove_device+0x2bc/0x560
[ 105.145537][ C0] device_del+0x376/0x9b0
[ 105.149943][ C0] usb_disable_device+0x367/0x810
[ 105.155011][ C0] usb_disconnect+0x2e2/0x9a0
[ 105.159732][ C0] hub_event+0x1d0c/0x4af0
[ 105.164190][ C0] process_one_work+0xa23/0x1940
[ 105.169188][ C0] worker_thread+0x5ef/0xe50
[ 105.173815][ C0] kthread+0x370/0x450
[ 105.177920][ C0] ret_from_fork+0x69a/0xc80
[ 105.182650][ C0] ret_from_fork_asm+0x1a/0x30
[ 105.187466][ C0]
[ 105.189887][ C0] The buggy address belongs to the object at ffff888119266800
[ 105.189887][ C0] which belongs to the cache kmalloc-1k of size 1024
[ 105.203985][ C0] The buggy address is located 92 bytes inside of
[ 105.203985][ C0] freed 1024-byte region [ffff888119266800, ffff888119266c00)
[ 105.217823][ C0]
[ 105.220194][ C0] The buggy address belongs to the physical page:
[ 105.226646][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119260
[ 105.235536][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 105.244064][ C0] flags: 0x200000000000040(head|node=0|zone=2)
[ 105.250257][ C0] page_type: f5(slab)
[ 105.254441][ C0] raw: 0200000000000040 ffff888100041dc0 dead000000000100 dead000000000122
[ 105.263070][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 105.271688][ C0] head: 0200000000000040 ffff888100041dc0 dead000000000100 dead000000000122
[ 105.280411][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 105.289286][ C0] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 105.298001][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 105.306812][ C0] page dumped because: kasan: bad access detected
[ 105.313380][ C0] page_owner tracks the page as allocated
[ 105.319144][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3736, tgid 3736 (kworker/u8:2), ts 67311069283, free_ts 67188642956
[ 105.340549][ C0] post_alloc_hook+0xfd/0x120
[ 105.345288][ C0] get_page_from_freelist+0xf25/0x3400
[ 105.350795][ C0] __alloc_frozen_pages_noprof+0x28f/0x2b90
[ 105.356759][ C0] new_slab+0xa2/0x670
[ 105.360868][ C0] refill_objects+0xe3/0x410
[ 105.365530][ C0] __pcs_replace_empty_main+0x376/0x680
[ 105.371380][ C0] __kmalloc_noprof+0x60d/0x7c0
[ 105.376283][ C0] load_elf_phdrs+0x102/0x210
[ 105.381018][ C0] load_elf_binary+0x29e/0x50e0
[ 105.385903][ C0] bprm_execve+0x8ef/0x16c0
[ 105.390546][ C0] kernel_execve+0x31e/0x3a0
[ 105.395178][ C0] call_usermodehelper_exec_async+0x239/0x4b0
[ 105.401376][ C0] ret_from_fork+0x69a/0xc80
[ 105.406015][ C0] ret_from_fork_asm+0x1a/0x30
[ 105.410835][ C0] page last free pid 3729 tgid 3729 stack trace:
[ 105.417205][ C0] __free_frozen_pages+0x716/0xf50
[ 105.422358][ C0] qlist_free_all+0x47/0xf0
[ 105.426890][ C0] kasan_quarantine_reduce+0x1a0/0x1f0
[ 105.432385][ C0] __kasan_slab_alloc+0x4e/0x70
[ 105.437278][ C0] kmem_cache_alloc_noprof+0x2e2/0x640
[ 105.442809][ C0] vm_area_dup+0x25/0x6e0
[ 105.447179][ C0] __split_vma+0x18c/0xd70
[ 105.451635][ C0] vms_gather_munmap_vmas+0x3a5/0x1670
[ 105.457217][ C0] __mmap_region+0x4ae/0x2a70
[ 105.461938][ C0] mmap_region+0x35d/0x620
[ 105.466409][ C0] do_mmap+0xc53/0x12d0
[ 105.470611][ C0] vm_mmap_pgoff+0x201/0x390
[ 105.475235][ C0] ksys_mmap_pgoff+0x3cb/0x610
[ 105.480402][ C0] __x64_sys_mmap+0x125/0x190
[ 105.485123][ C0] do_syscall_64+0x10b/0x7f0
[ 105.489754][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.496114][ C0]
[ 105.498674][ C0] Memory state around the buggy address:
[ 105.504498][ C0] ffff888119266700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.513022][ C0] ffff888119266780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.524066][ C0] >ffff888119266800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.532156][ C0] ^
[ 105.539122][ C0] ffff888119266880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.547228][ C0] ffff888119266900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.555337][ C0] ==================================================================
[ 105.563450][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 105.570687][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(lazy)
[ 105.579955][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 105.590049][ C0] Workqueue: usb_hub_wq hub_event
[ 105.595131][ C0] Call Trace:
[ 105.598439][ C0]
[ 105.601308][ C0] dump_stack_lvl+0x100/0x190
[ 105.606043][ C0] vpanic+0x552/0x970
[ 105.610063][ C0] ? __pfx_vpanic+0x10/0x10
[ 105.614633][ C0] ? __pfx_vprintk_emit+0x10/0x10
[ 105.619704][ C0] ? do_raw_spin_lock+0x23b/0x260
[ 105.624811][ C0] panic+0xd1/0xe0
[ 105.628575][ C0] ? __pfx_panic+0x10/0x10
[ 105.633029][ C0] ? end_report.part.0+0x23/0x90
[ 105.638017][ C0] ? rcu_is_watching+0x12/0xc0
[ 105.642824][ C0] ? end_report.part.0+0x23/0x90
[ 105.647810][ C0] ? check_panic_on_warn+0x1f/0x90
[ 105.652967][ C0] check_panic_on_warn.cold+0x19/0x34
[ 105.658384][ C0] end_report.part.0+0x3a/0x90
[ 105.663216][ C0] kasan_report.cold+0xe/0x18
[ 105.667948][ C0] ? do_raw_spin_lock+0x23b/0x260
[ 105.673028][ C0] do_raw_spin_lock+0x23b/0x260
[ 105.677935][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 105.683351][ C0] ? kcov_remote_stop+0x18d/0x540
[ 105.688406][ C0] ? kcov_remote_stop+0x18d/0x540
[ 105.693461][ C0] _raw_spin_lock_irqsave+0x42/0x60
[ 105.698817][ C0] ? __wake_up+0x1c/0x60
[ 105.703103][ C0] __wake_up+0x1c/0x60
[ 105.707215][ C0] usb_anchor_resume_wakeups+0xc7/0xf0
[ 105.712713][ C0] __usb_hcd_giveback_urb+0x3d6/0x610
[ 105.718137][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0
[ 105.723386][ C0] dummy_timer+0xdb2/0x36f0
[ 105.727949][ C0] ? find_held_lock+0x2b/0x80
[ 105.732658][ C0] ? debug_object_deactivate+0x2e4/0x3b0
[ 105.738520][ C0] ? debug_object_deactivate+0x2e4/0x3b0
[ 105.744200][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 105.750052][ C0] ? debug_object_deactivate+0x2e4/0x3b0
[ 105.755769][ C0] ? __pfx_debug_object_deactivate+0x10/0x10
[ 105.761809][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 105.766810][ C0] ? mark_held_locks+0x40/0x70
[ 105.771712][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 105.777573][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 105.782571][ C0] __hrtimer_run_queues+0x462/0x9c0
[ 105.787834][ C0] hrtimer_run_softirq+0x17d/0x2c0
[ 105.793024][ C0] handle_softirqs+0x1dd/0x990
[ 105.797922][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 105.803285][ C0] ? _raw_spin_unlock+0x28/0x50
[ 105.808199][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720
[ 105.813911][ C0] __irq_exit_rcu+0x160/0x210
[ 105.818642][ C0] irq_exit_rcu+0x9/0x30
[ 105.823009][ C0] sysvec_apic_timer_interrupt+0x8f/0xb0
[ 105.828704][ C0]
[ 105.831697][ C0]
[ 105.834654][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 105.840688][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[ 105.847160][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 72 11 fa 48 89 df e8 7e c2 11 fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 50 04 fa 65 8b 05 ce e2 7f 05 85 c0 74 16 5b
[ 105.866811][ C0] RSP: 0018:ffffc900000beaf8 EFLAGS: 00000246
[ 105.872914][ C0] RAX: 0000000000000006 RBX: ffff888100aff930 RCX: 0000000000000040
[ 105.880913][ C0] RDX: 0000000000000000 RSI: ffffffff890f2c7f RDI: ffffffff87b15480
[ 105.888958][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000
[ 105.896978][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000246
[ 105.904988][ C0] R13: ffffc900000beb30 R14: ffff888100aff930 R15: dffffc0000000000
[ 105.913001][ C0] rwsem_wake.isra.0+0xb0/0x100
[ 105.917917][ C0] ? __pfx_rwsem_wake.isra.0+0x10/0x10
[ 105.923420][ C0] ? find_held_lock+0x2b/0x80
[ 105.928126][ C0] ? kernfs_add_one+0x611/0xaa0
[ 105.933027][ C0] up_write+0x49c/0x5c0
[ 105.937232][ C0] kernfs_add_one+0x611/0xaa0
[ 105.941952][ C0] __kernfs_create_file+0x295/0x350
[ 105.947183][ C0] sysfs_add_file_mode_ns+0x207/0x3c0
[ 105.952593][ C0] internal_create_group+0x593/0xfb0
[ 105.957927][ C0] ? __pfx_internal_create_group+0x10/0x10
[ 105.963784][ C0] ? kernfs_create_link+0x1bd/0x240
[ 105.969011][ C0] internal_create_groups+0x9d/0x150
[ 105.974344][ C0] device_add+0x77a/0x1970
[ 105.978809][ C0] ? kasan_quarantine_put+0x104/0x240
[ 105.984215][ C0] ? __pfx_device_add+0x10/0x10
[ 105.989109][ C0] ? input_register_device+0x9a9/0xe00
[ 105.994617][ C0] ? kfree+0x20c/0x650
[ 105.998736][ C0] input_register_device+0x7d2/0xe00
[ 106.004079][ C0] imon_probe+0x15ea/0x30a0
[ 106.008630][ C0] usb_probe_interface+0x386/0x9b0
[ 106.013794][ C0] ? __pfx_usb_probe_interface+0x10/0x10
[ 106.019468][ C0] ? kernfs_put+0x3f/0x60
[ 106.023838][ C0] ? sysfs_create_link+0x68/0xc0
[ 106.028828][ C0] ? __pfx_usb_probe_interface+0x10/0x10
[ 106.034509][ C0] really_probe+0x241/0xa60
[ 106.039073][ C0] __driver_probe_device+0x20e/0x450
[ 106.044394][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 106.050408][ C0] driver_probe_device+0x4a/0x140
[ 106.055565][ C0] __device_attach_driver+0x1df/0x320
[ 106.061034][ C0] ? __pfx___device_attach_driver+0x10/0x10
[ 106.067000][ C0] bus_for_each_drv+0x159/0x1e0
[ 106.071931][ C0] ? __pfx_bus_for_each_drv+0x10/0x10
[ 106.077469][ C0] ? lockdep_hardirqs_on+0x78/0x100
[ 106.082831][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 106.088785][ C0] __device_attach+0x1e4/0x4d0
[ 106.093605][ C0] ? __pfx___device_attach+0x10/0x10
[ 106.098950][ C0] ? do_raw_spin_unlock+0x145/0x1e0
[ 106.104211][ C0] device_initial_probe+0xaf/0xd0
[ 106.109377][ C0] bus_probe_device+0x64/0x160
[ 106.114189][ C0] device_add+0x121d/0x1970
[ 106.118761][ C0] ? __pfx_device_add+0x10/0x10
[ 106.123671][ C0] ? usb_cache_string+0xd6/0x100
[ 106.128656][ C0] ? kfree+0x20c/0x650
[ 106.132783][ C0] usb_set_configuration+0xd97/0x1c60
[ 106.138225][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 106.144337][ C0] usb_generic_driver_probe+0xa1/0xe0
[ 106.149756][ C0] usb_probe_device+0xef/0x400
[ 106.154590][ C0] ? __pfx_usb_probe_device+0x10/0x10
[ 106.160029][ C0] really_probe+0x241/0xa60
[ 106.164613][ C0] __driver_probe_device+0x20e/0x450
[ 106.169952][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 106.175890][ C0] driver_probe_device+0x4a/0x140
[ 106.180977][ C0] __device_attach_driver+0x1df/0x320
[ 106.186411][ C0] ? __pfx___device_attach_driver+0x10/0x10
[ 106.192354][ C0] bus_for_each_drv+0x159/0x1e0
[ 106.197267][ C0] ? __pfx_bus_for_each_drv+0x10/0x10
[ 106.202703][ C0] ? lockdep_hardirqs_on+0x78/0x100
[ 106.207958][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 106.213904][ C0] __device_attach+0x1e4/0x4d0
[ 106.218708][ C0] ? __pfx___device_attach+0x10/0x10
[ 106.224058][ C0] ? do_raw_spin_unlock+0x145/0x1e0
[ 106.229308][ C0] device_initial_probe+0xaf/0xd0
[ 106.234374][ C0] bus_probe_device+0x64/0x160
[ 106.239173][ C0] device_add+0x121d/0x1970
[ 106.243724][ C0] ? __pfx_device_add+0x10/0x10
[ 106.248618][ C0] ? add_device_randomness+0xc9/0x110
[ 106.254051][ C0] usb_new_device.cold+0x685/0x115c
[ 106.259305][ C0] ? _mutex_trylock_nest_lock+0x2b1/0x310
[ 106.265081][ C0] ? do_raw_spin_lock+0x128/0x260
[ 106.270152][ C0] ? __pfx_usb_new_device+0x10/0x10
[ 106.275394][ C0] ? mark_held_locks+0x40/0x70
[ 106.280201][ C0] hub_event+0x314d/0x4af0
[ 106.284678][ C0] ? __pfx_hub_event+0x10/0x10
[ 106.289492][ C0] ? debug_object_deactivate+0x2e4/0x3b0
[ 106.295188][ C0] ? rcu_is_watching+0x12/0xc0
[ 106.299992][ C0] process_one_work+0xa23/0x1940
[ 106.304985][ C0] ? __pfx_process_one_work+0x10/0x10
[ 106.310403][ C0] ? __pfx_hub_event+0x10/0x10
[ 106.315210][ C0] worker_thread+0x5ef/0xe50
[ 106.319842][ C0] ? __pfx_worker_thread+0x10/0x10
[ 106.324994][ C0] ? kthread+0x13a/0x450
[ 106.329270][ C0] ? __pfx_worker_thread+0x10/0x10
[ 106.334418][ C0] kthread+0x370/0x450
[ 106.338552][ C0] ? __pfx_kthread+0x10/0x10
[ 106.343180][ C0] ret_from_fork+0x69a/0xc80
[ 106.347815][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 106.352996][ C0] ? __switch_to+0x7f6/0x10e0
[ 106.357713][ C0] ? __switch_to_asm+0x39/0x70
[ 106.362514][ C0] ? __pfx_kthread+0x10/0x10
[ 106.367403][ C0] ret_from_fork_asm+0x1a/0x30
[ 106.372292][ C0]
[ 106.375941][ C0] Kernel Offset: disabled
[ 106.380293][ C0] Rebooting in 86400 seconds..