./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2991793378 <...> Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. execve("./syz-executor2991793378", ["./syz-executor2991793378"], 0x7ffd8bd5c090 /* 10 vars */) = 0 brk(NULL) = 0x5555916fb000 brk(0x5555916fbd00) = 0x5555916fbd00 arch_prctl(ARCH_SET_FS, 0x5555916fb380) = 0 set_tid_address(0x5555916fb650) = 5841 set_robust_list(0x5555916fb660, 24) = 0 rseq(0x5555916fbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2991793378", 4096) = 28 getrandom("\xc6\x1b\x18\x30\x7d\x05\x8c\x21", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555916fbd00 brk(0x55559171cd00) = 0x55559171cd00 brk(0x55559171d000) = 0x55559171d000 mprotect(0x7fa44bc1b000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 [ 79.553703][ T30] audit: type=1400 audit(1751900682.338:62): avc: denied { write } for pid=5838 comm="strace-static-x" path="pipe:[4465]" dev="pipefs" ino=4465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 executing program write(1, "executing program\n", 18) = 18 openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffe6ad3c1a0) = 0 ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1a0) = 0 [ 79.587316][ T30] audit: type=1400 audit(1751900682.368:63): avc: denied { execmem } for pid=5841 comm="syz-executor299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.610564][ T30] audit: type=1400 audit(1751900682.398:64): avc: denied { read write } for pid=5841 comm="syz-executor299" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.634449][ T30] audit: type=1400 audit(1751900682.398:65): avc: denied { open } for pid=5841 comm="syz-executor299" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.658647][ T30] audit: type=1400 audit(1751900682.398:66): avc: denied { ioctl } for pid=5841 comm="syz-executor299" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1a0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1a0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6ad3b190) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1a0) = 0 [ 79.871274][ T1204] usb 1-1: new high-speed USB device number 2 using dummy_hcd ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1a0) = 0 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6ad3b190) = 18 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6ad3b190) = 9 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1a0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6ad3b190) = 36 [ 80.041101][ T1204] usb 1-1: Using ep0 maxpacket: 16 [ 80.079443][ T1204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.090556][ T1204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.100298][ T1204] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.113102][ T1204] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1a0) = 0 ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa44bc213cc) = -1 EINVAL (Invalid argument) ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6ad3b190) = 0 [ 80.122135][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.132844][ T1204] usb 1-1: config 0 descriptor?? ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1d0) = 0 ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffe6ad3b1c0) = 0 openat(AT_FDCWD, "/dev/usbmon0", O_RDONLY) = 4 ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffe6ad3c1d0) = 0 [ 80.586538][ T30] audit: type=1400 audit(1751900683.368:67): avc: denied { read } for pid=5841 comm="syz-executor299" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.610498][ T30] audit: type=1400 audit(1751900683.368:68): avc: denied { open } for pid=5841 comm="syz-executor299" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffe6ad3b1c0) = 34 [ 80.615469][ T1204] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 80.641964][ T1204] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 80.651856][ T1204] ================================================================== [ 80.659899][ T1204] BUG: KASAN: slab-out-of-bounds in mon_copy_to_buff+0xc2/0x170 [ 80.667523][ T1204] Read of size 3904 at addr ffff8880216bc6e1 by task kworker/0:2/1204 [ 80.675643][ T1204] [ 80.677956][ T1204] CPU: 0 UID: 0 PID: 1204 Comm: kworker/0:2 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 80.677970][ T1204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.677977][ T1204] Workqueue: usb_hub_wq hub_event [ 80.677995][ T1204] Call Trace: [ 80.678000][ T1204] [ 80.678006][ T1204] dump_stack_lvl+0x116/0x1f0 [ 80.678026][ T1204] print_report+0xcd/0x680 [ 80.678042][ T1204] ? __virt_addr_valid+0x81/0x610 [ 80.678055][ T1204] ? __phys_addr+0xe8/0x180 [ 80.678067][ T1204] ? mon_copy_to_buff+0xc2/0x170 [ 80.678082][ T1204] kasan_report+0xe0/0x110 [ 80.678097][ T1204] ? mon_copy_to_buff+0xc2/0x170 [ 80.678113][ T1204] kasan_check_range+0x100/0x1b0 [ 80.678124][ T1204] __asan_memcpy+0x23/0x60 [ 80.678136][ T1204] mon_copy_to_buff+0xc2/0x170 [ 80.678153][ T1204] mon_bin_event+0x1071/0x2050 [ 80.678171][ T1204] ? __pfx_mon_bin_event+0x10/0x10 [ 80.678189][ T1204] mon_bus_submit+0xcf/0x140 [ 80.678203][ T1204] usb_hcd_submit_urb+0x12d/0x1c60 [ 80.678219][ T1204] ? __device_attach+0x1e4/0x4b0 [ 80.678235][ T1204] ? bus_probe_device+0x17f/0x1c0 [ 80.678247][ T1204] ? device_add+0x1148/0x1a70 [ 80.678256][ T1204] ? usb_set_configuration+0x1187/0x1e20 [ 80.678268][ T1204] ? usb_generic_driver_probe+0xb1/0x110 [ 80.678279][ T1204] usb_submit_urb+0x87c/0x1790 [ 80.678289][ T1204] ? __pfx_lockdep_init_map_type+0x1/0x10 [ 80.678301][ T1204] ? __init_swait_queue_head+0xca/0x150 [ 80.678315][ T1204] usb_start_wait_urb+0x104/0x4b0 [ 80.678325][ T1204] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 80.678337][ T1204] ? __asan_memset+0x23/0x50 [ 80.678350][ T1204] usb_control_msg+0x326/0x4a0 [ 80.678360][ T1204] ? __pfx_usb_control_msg+0x10/0x10 [ 80.678372][ T1204] usbhid_raw_request+0x58f/0x700 [ 80.678390][ T1204] ? __pfx_usbhid_raw_request+0x10/0x10 [ 80.678406][ T1204] __hid_request+0x296/0x3c0 [ 80.678420][ T1204] hidinput_connect+0x1ada/0x2bd0 [ 80.678438][ T1204] hid_connect+0x13f3/0x1a60 [ 80.678449][ T1204] ? trace_kmalloc+0x2b/0xd0 [ 80.678465][ T1204] ? __kmalloc_noprof+0x242/0x510 [ 80.678479][ T1204] ? __asan_memset+0x23/0x50 [ 80.678491][ T1204] ? __pfx_hid_connect+0x10/0x10 [ 80.678506][ T1204] hid_hw_start+0xaa/0x140 [ 80.678518][ T1204] ms_probe+0x195/0x500 [ 80.678528][ T1204] ? __pfx_ms_probe+0x10/0x10 [ 80.678537][ T1204] hid_device_probe+0x360/0x720 [ 80.678549][ T1204] ? __pfx_hid_device_probe+0x10/0x10 [ 80.678562][ T1204] really_probe+0x23e/0xa90 [ 80.678576][ T1204] __driver_probe_device+0x1de/0x440 [ 80.678591][ T1204] driver_probe_device+0x4c/0x1b0 [ 80.678605][ T1204] __device_attach_driver+0x1df/0x310 [ 80.678620][ T1204] ? __pfx___device_attach_driver+0x10/0x10 [ 80.678634][ T1204] bus_for_each_drv+0x156/0x1e0 [ 80.678646][ T1204] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.678657][ T1204] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.678672][ T1204] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.678686][ T1204] __device_attach+0x1e4/0x4b0 [ 80.678700][ T1204] ? __pfx___device_attach+0x10/0x10 [ 80.678723][ T1204] ? do_raw_spin_unlock+0x172/0x230 [ 80.678736][ T1204] bus_probe_device+0x17f/0x1c0 [ 80.678749][ T1204] device_add+0x1148/0x1a70 [ 80.678758][ T1204] ? __pfx_device_add+0x10/0x10 [ 80.678768][ T1204] ? debugfs_create_file_full+0x41/0x60 [ 80.678785][ T1204] hid_add_device+0x373/0xa60 [ 80.678797][ T1204] ? __pfx_hid_add_device+0x10/0x10 [ 80.678807][ T1204] ? lockdep_init_map_type+0x5c/0x280 [ 80.678817][ T1204] ? lockdep_init_map_type+0x5c/0x280 [ 80.678828][ T1204] usbhid_probe+0xd38/0x13f0 [ 80.678845][ T1204] usb_probe_interface+0x303/0x9c0 [ 80.678860][ T1204] ? __pfx_usb_probe_interface+0x10/0x10 [ 80.678874][ T1204] really_probe+0x23e/0xa90 [ 80.678888][ T1204] __driver_probe_device+0x1de/0x440 [ 80.678903][ T1204] driver_probe_device+0x4c/0x1b0 [ 80.678917][ T1204] __device_attach_driver+0x1df/0x310 [ 80.678932][ T1204] ? __pfx___device_attach_driver+0x10/0x10 [ 80.678947][ T1204] bus_for_each_drv+0x156/0x1e0 [ 80.678958][ T1204] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.678969][ T1204] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.678983][ T1204] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.678997][ T1204] __device_attach+0x1e4/0x4b0 [ 80.679011][ T1204] ? __pfx___device_attach+0x10/0x10 [ 80.679025][ T1204] ? do_raw_spin_unlock+0x172/0x230 [ 80.679038][ T1204] bus_probe_device+0x17f/0x1c0 [ 80.679051][ T1204] device_add+0x1148/0x1a70 [ 80.679061][ T1204] ? __pfx_device_add+0x10/0x10 [ 80.679069][ T1204] ? preempt_schedule_thunk+0x16/0x30 [ 80.679086][ T1204] usb_set_configuration+0x1187/0x1e20 [ 80.679102][ T1204] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 80.679112][ T1204] usb_generic_driver_probe+0xb1/0x110 [ 80.679122][ T1204] usb_probe_device+0xef/0x3e0 [ 80.679134][ T1204] ? __pfx_usb_probe_device+0x10/0x10 [ 80.679146][ T1204] really_probe+0x23e/0xa90 [ 80.679160][ T1204] __driver_probe_device+0x1de/0x440 [ 80.679174][ T1204] ? usb_driver_applicable+0x1c7/0x220 [ 80.679188][ T1204] driver_probe_device+0x4c/0x1b0 [ 80.679203][ T1204] __device_attach_driver+0x1df/0x310 [ 80.679217][ T1204] ? __pfx___device_attach_driver+0x10/0x10 [ 80.679232][ T1204] bus_for_each_drv+0x156/0x1e0 [ 80.679243][ T1204] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.679255][ T1204] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.679268][ T1204] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.679282][ T1204] __device_attach+0x1e4/0x4b0 [ 80.679296][ T1204] ? __pfx___device_attach+0x10/0x10 [ 80.679310][ T1204] ? do_raw_spin_unlock+0x172/0x230 [ 80.679323][ T1204] bus_probe_device+0x17f/0x1c0 [ 80.679336][ T1204] device_add+0x1148/0x1a70 [ 80.679346][ T1204] ? __pfx_device_add+0x10/0x10 [ 80.679354][ T1204] ? usb_detect_static_quirks+0x335/0x3e0 [ 80.679366][ T1204] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 80.679381][ T1204] usb_new_device+0xd07/0x1a20 [ 80.679393][ T1204] ? do_raw_spin_lock+0x12c/0x2b0 [ 80.679405][ T1204] ? __pfx_usb_new_device+0x10/0x10 [ 80.679416][ T1204] ? mark_held_locks+0x49/0x80 [ 80.679433][ T1204] hub_event+0x2eb7/0x4fa0 [ 80.679450][ T1204] ? __pfx_hub_event+0x10/0x10 [ 80.679461][ T1204] ? ioread32_rep+0xe0/0x100 [ 80.679477][ T1204] ? rcu_is_watching+0x12/0xc0 [ 80.679491][ T1204] process_one_work+0x9cf/0x1b70 [ 80.679505][ T1204] ? __pfx_hcd_resume_work+0x10/0x10 [ 80.679518][ T1204] ? __pfx_process_one_work+0x10/0x10 [ 80.679531][ T1204] ? assign_work+0x1a0/0x250 [ 80.679542][ T1204] worker_thread+0x6c8/0xf10 [ 80.679554][ T1204] ? __kthread_parkme+0x19e/0x250 [ 80.679570][ T1204] ? __pfx_worker_thread+0x10/0x10 [ 80.679581][ T1204] kthread+0x3c5/0x780 [ 80.679591][ T1204] ? __pfx_kthread+0x10/0x10 [ 80.679601][ T1204] ? rcu_is_watching+0x12/0xc0 [ 80.679614][ T1204] ? __pfx_kthread+0x10/0x10 [ 80.679623][ T1204] ret_from_fork+0x5d4/0x6f0 [ 80.679639][ T1204] ? __pfx_kthread+0x10/0x10 [ 80.679649][ T1204] ret_from_fork_asm+0x1a/0x30 [ 80.679664][ T1204] [ 80.679667][ T1204] [ 81.339604][ T1204] Allocated by task 1204: [ 81.343918][ T1204] kasan_save_stack+0x33/0x60 [ 81.348586][ T1204] kasan_save_track+0x14/0x30 [ 81.353250][ T1204] __kasan_kmalloc+0xaa/0xb0 [ 81.357824][ T1204] __kmalloc_noprof+0x223/0x510 [ 81.362658][ T1204] __hid_request+0x2c/0x3c0 [ 81.367147][ T1204] hidinput_connect+0x1ada/0x2bd0 [ 81.372160][ T1204] hid_connect+0x13f3/0x1a60 [ 81.376732][ T1204] hid_hw_start+0xaa/0x140 [ 81.381131][ T1204] ms_probe+0x195/0x500 [ 81.385267][ T1204] hid_device_probe+0x360/0x720 [ 81.390099][ T1204] really_probe+0x23e/0xa90 [ 81.394587][ T1204] __driver_probe_device+0x1de/0x440 [ 81.399861][ T1204] driver_probe_device+0x4c/0x1b0 [ 81.404871][ T1204] __device_attach_driver+0x1df/0x310 [ 81.410229][ T1204] bus_for_each_drv+0x156/0x1e0 [ 81.415063][ T1204] __device_attach+0x1e4/0x4b0 [ 81.419813][ T1204] bus_probe_device+0x17f/0x1c0 [ 81.424646][ T1204] device_add+0x1148/0x1a70 [ 81.429130][ T1204] hid_add_device+0x373/0xa60 [ 81.433789][ T1204] usbhid_probe+0xd38/0x13f0 [ 81.438367][ T1204] usb_probe_interface+0x303/0x9c0 [ 81.443466][ T1204] really_probe+0x23e/0xa90 [ 81.447957][ T1204] __driver_probe_device+0x1de/0x440 [ 81.453228][ T1204] driver_probe_device+0x4c/0x1b0 [ 81.458242][ T1204] __device_attach_driver+0x1df/0x310 [ 81.463604][ T1204] bus_for_each_drv+0x156/0x1e0 [ 81.468437][ T1204] __device_attach+0x1e4/0x4b0 [ 81.473186][ T1204] bus_probe_device+0x17f/0x1c0 [ 81.478029][ T1204] device_add+0x1148/0x1a70 [ 81.482510][ T1204] usb_set_configuration+0x1187/0x1e20 [ 81.487954][ T1204] usb_generic_driver_probe+0xb1/0x110 [ 81.493393][ T1204] usb_probe_device+0xef/0x3e0 [ 81.498138][ T1204] really_probe+0x23e/0xa90 [ 81.502626][ T1204] __driver_probe_device+0x1de/0x440 [ 81.507898][ T1204] driver_probe_device+0x4c/0x1b0 [ 81.512907][ T1204] __device_attach_driver+0x1df/0x310 [ 81.518265][ T1204] bus_for_each_drv+0x156/0x1e0 [ 81.523100][ T1204] __device_attach+0x1e4/0x4b0 [ 81.527851][ T1204] bus_probe_device+0x17f/0x1c0 [ 81.532686][ T1204] device_add+0x1148/0x1a70 [ 81.537168][ T1204] usb_new_device+0xd07/0x1a20 [ 81.541913][ T1204] hub_event+0x2eb7/0x4fa0 [ 81.546313][ T1204] process_one_work+0x9cf/0x1b70 [ 81.551239][ T1204] worker_thread+0x6c8/0xf10 [ 81.555810][ T1204] kthread+0x3c5/0x780 [ 81.559859][ T1204] ret_from_fork+0x5d4/0x6f0 [ 81.564438][ T1204] ret_from_fork_asm+0x1a/0x30 [ 81.569186][ T1204] [ 81.571490][ T1204] The buggy address belongs to the object at ffff8880216bc6e0 [ 81.571490][ T1204] which belongs to the cache kmalloc-8 of size 8 [ 81.585178][ T1204] The buggy address is located 1 bytes inside of [ 81.585178][ T1204] allocated 7-byte region [ffff8880216bc6e0, ffff8880216bc6e7) [ 81.598963][ T1204] [ 81.601270][ T1204] The buggy address belongs to the physical page: [ 81.607667][ T1204] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x216bc [ 81.616411][ T1204] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 81.623513][ T1204] page_type: f5(slab) [ 81.627477][ T1204] raw: 00fff00000000000 ffff88801b841500 ffffea00009fbac0 dead000000000002 [ 81.636048][ T1204] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 81.644611][ T1204] page dumped because: kasan: bad access detected [ 81.651005][ T1204] page_owner tracks the page as allocated [ 81.656704][ T1204] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2412854036, free_ts 2374376433 [ 81.675005][ T1204] post_alloc_hook+0x1c0/0x230 [ 81.679769][ T1204] get_page_from_freelist+0x1321/0x3890 [ 81.685299][ T1204] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 81.691178][ T1204] alloc_pages_mpol+0x1fb/0x550 [ 81.696016][ T1204] new_slab+0x23b/0x330 [ 81.700153][ T1204] ___slab_alloc+0xd9c/0x1940 [ 81.704810][ T1204] __slab_alloc.constprop.0+0x56/0xb0 [ 81.710163][ T1204] __kmalloc_noprof+0x2f2/0x510 [ 81.714997][ T1204] acpi_ns_internalize_name+0x144/0x220 [ 81.720527][ T1204] acpi_ns_get_node_unlocked+0x163/0x310 [ 81.726145][ T1204] acpi_ns_get_node+0x4c/0x70 [ 81.730803][ T1204] acpi_get_handle+0x105/0x270 [ 81.735549][ T1204] acpi_has_method+0x7a/0xc0 [ 81.740125][ T1204] acpi_attr_is_visible+0x435/0x540 [ 81.745311][ T1204] internal_create_group+0x501/0xf30 [ 81.750584][ T1204] internal_create_groups+0x9d/0x150 [ 81.755854][ T1204] page last free pid 1 tgid 1 stack trace: [ 81.761636][ T1204] __free_frozen_pages+0x7fe/0x1180 [ 81.766816][ T1204] __kmem_cache_do_shrink+0x30b/0x380 [ 81.772171][ T1204] acpi_os_purge_cache+0x15/0x20 [ 81.777095][ T1204] acpi_purge_cached_objects+0x86/0x100 [ 81.782626][ T1204] acpi_initialize_objects+0x47/0xa0 [ 81.787913][ T1204] acpi_init+0x168/0xb60 [ 81.792138][ T1204] do_one_initcall+0x120/0x6e0 [ 81.796883][ T1204] kernel_init_freeable+0x5c2/0x900 [ 81.802079][ T1204] kernel_init+0x1c/0x2b0 [ 81.806402][ T1204] ret_from_fork+0x5d4/0x6f0 [ 81.810985][ T1204] ret_from_fork_asm+0x1a/0x30 [ 81.815738][ T1204] [ 81.818043][ T1204] Memory state around the buggy address: [ 81.823657][ T1204] ffff8880216bc580: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 81.831705][ T1204] ffff8880216bc600: 00 fc fc fc 00 fc fc fc fa fc fc fc 00 fc fc fc [ 81.839748][ T1204] >ffff8880216bc680: fa fc fc fc fa fc fc fc 00 fc fc fc 07 fc fc fc [ 81.847786][ T1204] ^ [ 81.854958][ T1204] ffff8880216bc700: 00 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 81.863001][ T1204] ffff8880216bc780: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 81.871045][ T1204] ================================================================== [ 81.879087][ T1204] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.886265][ T1204] CPU: 0 UID: 0 PID: 1204 Comm: kworker/0:2 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 81.896573][ T1204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.906614][ T1204] Workqueue: usb_hub_wq hub_event [ 81.911633][ T1204] Call Trace: [ 81.914895][ T1204] [ 81.917811][ T1204] dump_stack_lvl+0x3d/0x1f0 [ 81.922391][ T1204] panic+0x71c/0x800 [ 81.926277][ T1204] ? __pfx_panic+0x10/0x10 [ 81.930684][ T1204] ? __pfx__printk+0x10/0x10 [ 81.935260][ T1204] ? end_report+0x4c/0x170 [ 81.939666][ T1204] ? check_panic_on_warn+0x1f/0xb0 [ 81.944769][ T1204] ? mon_copy_to_buff+0xc2/0x170 [ 81.949696][ T1204] check_panic_on_warn+0xab/0xb0 [ 81.954623][ T1204] end_report+0x107/0x170 [ 81.958941][ T1204] kasan_report+0xee/0x110 [ 81.963350][ T1204] ? mon_copy_to_buff+0xc2/0x170 [ 81.968279][ T1204] kasan_check_range+0x100/0x1b0 [ 81.973201][ T1204] __asan_memcpy+0x23/0x60 [ 81.977602][ T1204] mon_copy_to_buff+0xc2/0x170 [ 81.982356][ T1204] mon_bin_event+0x1071/0x2050 [ 81.987114][ T1204] ? __pfx_mon_bin_event+0x10/0x10 [ 81.992217][ T1204] mon_bus_submit+0xcf/0x140 [ 81.996796][ T1204] usb_hcd_submit_urb+0x12d/0x1c60 [ 82.001896][ T1204] ? __device_attach+0x1e4/0x4b0 [ 82.006838][ T1204] ? bus_probe_device+0x17f/0x1c0 [ 82.011857][ T1204] ? device_add+0x1148/0x1a70 [ 82.016518][ T1204] ? usb_set_configuration+0x1187/0x1e20 [ 82.022144][ T1204] ? usb_generic_driver_probe+0xb1/0x110 [ 82.027763][ T1204] usb_submit_urb+0x87c/0x1790 [ 82.032511][ T1204] ? __pfx_lockdep_init_map_type+0x1/0x10 [ 82.038215][ T1204] ? __init_swait_queue_head+0xca/0x150 [ 82.043749][ T1204] usb_start_wait_urb+0x104/0x4b0 [ 82.048755][ T1204] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 82.054292][ T1204] ? __asan_memset+0x23/0x50 [ 82.058871][ T1204] usb_control_msg+0x326/0x4a0 [ 82.063620][ T1204] ? __pfx_usb_control_msg+0x10/0x10 [ 82.068889][ T1204] usbhid_raw_request+0x58f/0x700 [ 82.073908][ T1204] ? __pfx_usbhid_raw_request+0x10/0x10 [ 82.079446][ T1204] __hid_request+0x296/0x3c0 [ 82.084025][ T1204] hidinput_connect+0x1ada/0x2bd0 [ 82.089049][ T1204] hid_connect+0x13f3/0x1a60 [ 82.093629][ T1204] ? trace_kmalloc+0x2b/0xd0 [ 82.098210][ T1204] ? __kmalloc_noprof+0x242/0x510 [ 82.103223][ T1204] ? __asan_memset+0x23/0x50 [ 82.107804][ T1204] ? __pfx_hid_connect+0x10/0x10 [ 82.112733][ T1204] hid_hw_start+0xaa/0x140 [ 82.117135][ T1204] ms_probe+0x195/0x500 [ 82.121278][ T1204] ? __pfx_ms_probe+0x10/0x10 [ 82.125935][ T1204] hid_device_probe+0x360/0x720 [ 82.130773][ T1204] ? __pfx_hid_device_probe+0x10/0x10 [ 82.136131][ T1204] really_probe+0x23e/0xa90 [ 82.140625][ T1204] __driver_probe_device+0x1de/0x440 [ 82.145899][ T1204] driver_probe_device+0x4c/0x1b0 [ 82.150912][ T1204] __device_attach_driver+0x1df/0x310 [ 82.156277][ T1204] ? __pfx___device_attach_driver+0x10/0x10 [ 82.162158][ T1204] bus_for_each_drv+0x156/0x1e0 [ 82.166998][ T1204] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.172356][ T1204] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.177545][ T1204] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.183340][ T1204] __device_attach+0x1e4/0x4b0 [ 82.188094][ T1204] ? __pfx___device_attach+0x10/0x10 [ 82.193385][ T1204] ? do_raw_spin_unlock+0x172/0x230 [ 82.198582][ T1204] bus_probe_device+0x17f/0x1c0 [ 82.203430][ T1204] device_add+0x1148/0x1a70 [ 82.207919][ T1204] ? __pfx_device_add+0x10/0x10 [ 82.212758][ T1204] ? debugfs_create_file_full+0x41/0x60 [ 82.218301][ T1204] hid_add_device+0x373/0xa60 [ 82.222968][ T1204] ? __pfx_hid_add_device+0x10/0x10 [ 82.228159][ T1204] ? lockdep_init_map_type+0x5c/0x280 [ 82.233523][ T1204] ? lockdep_init_map_type+0x5c/0x280 [ 82.238878][ T1204] usbhid_probe+0xd38/0x13f0 [ 82.243462][ T1204] usb_probe_interface+0x303/0x9c0 [ 82.248565][ T1204] ? __pfx_usb_probe_interface+0x10/0x10 [ 82.254185][ T1204] really_probe+0x23e/0xa90 [ 82.258679][ T1204] __driver_probe_device+0x1de/0x440 [ 82.263953][ T1204] driver_probe_device+0x4c/0x1b0 [ 82.268968][ T1204] __device_attach_driver+0x1df/0x310 [ 82.274330][ T1204] ? __pfx___device_attach_driver+0x10/0x10 [ 82.280210][ T1204] bus_for_each_drv+0x156/0x1e0 [ 82.285048][ T1204] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.290405][ T1204] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.295597][ T1204] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.301400][ T1204] __device_attach+0x1e4/0x4b0 [ 82.306161][ T1204] ? __pfx___device_attach+0x10/0x10 [ 82.311436][ T1204] ? do_raw_spin_unlock+0x172/0x230 [ 82.316622][ T1204] bus_probe_device+0x17f/0x1c0 [ 82.321462][ T1204] device_add+0x1148/0x1a70 [ 82.325952][ T1204] ? __pfx_device_add+0x10/0x10 [ 82.330785][ T1204] ? preempt_schedule_thunk+0x16/0x30 [ 82.336161][ T1204] usb_set_configuration+0x1187/0x1e20 [ 82.341617][ T1204] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 82.347667][ T1204] usb_generic_driver_probe+0xb1/0x110 [ 82.353109][ T1204] usb_probe_device+0xef/0x3e0 [ 82.357871][ T1204] ? __pfx_usb_probe_device+0x10/0x10 [ 82.363233][ T1204] really_probe+0x23e/0xa90 [ 82.367732][ T1204] __driver_probe_device+0x1de/0x440 [ 82.373009][ T1204] ? usb_driver_applicable+0x1c7/0x220 [ 82.378459][ T1204] driver_probe_device+0x4c/0x1b0 [ 82.383473][ T1204] __device_attach_driver+0x1df/0x310 [ 82.388836][ T1204] ? __pfx___device_attach_driver+0x10/0x10 [ 82.394718][ T1204] bus_for_each_drv+0x156/0x1e0 [ 82.399556][ T1204] ? __pfx_bus_for_each_drv+0x10/0x10 [ 82.404914][ T1204] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.410103][ T1204] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.415900][ T1204] __device_attach+0x1e4/0x4b0 [ 82.420652][ T1204] ? __pfx___device_attach+0x10/0x10 [ 82.425928][ T1204] ? do_raw_spin_unlock+0x172/0x230 [ 82.431116][ T1204] bus_probe_device+0x17f/0x1c0 [ 82.435953][ T1204] device_add+0x1148/0x1a70 [ 82.440440][ T1204] ? __pfx_device_add+0x10/0x10 [ 82.445282][ T1204] ? usb_detect_static_quirks+0x335/0x3e0 [ 82.450993][ T1204] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 82.456882][ T1204] usb_new_device+0xd07/0x1a20 [ 82.461635][ T1204] ? do_raw_spin_lock+0x12c/0x2b0 [ 82.466644][ T1204] ? __pfx_usb_new_device+0x10/0x10 [ 82.471829][ T1204] ? mark_held_locks+0x49/0x80 [ 82.476584][ T1204] hub_event+0x2eb7/0x4fa0 [ 82.480995][ T1204] ? __pfx_hub_event+0x10/0x10 [ 82.485747][ T1204] ? ioread32_rep+0xe0/0x100 [ 82.490329][ T1204] ? rcu_is_watching+0x12/0xc0 [ 82.495085][ T1204] process_one_work+0x9cf/0x1b70 [ 82.500027][ T1204] ? __pfx_hcd_resume_work+0x10/0x10 [ 82.505309][ T1204] ? __pfx_process_one_work+0x10/0x10 [ 82.510671][ T1204] ? assign_work+0x1a0/0x250 [ 82.515250][ T1204] worker_thread+0x6c8/0xf10 [ 82.519833][ T1204] ? __kthread_parkme+0x19e/0x250 [ 82.524852][ T1204] ? __pfx_worker_thread+0x10/0x10 [ 82.529950][ T1204] kthread+0x3c5/0x780 [ 82.534006][ T1204] ? __pfx_kthread+0x10/0x10 [ 82.538583][ T1204] ? rcu_is_watching+0x12/0xc0 [ 82.543338][ T1204] ? __pfx_kthread+0x10/0x10 [ 82.547916][ T1204] ret_from_fork+0x5d4/0x6f0 [ 82.552497][ T1204] ? __pfx_kthread+0x10/0x10 [ 82.557078][ T1204] ret_from_fork_asm+0x1a/0x30 [ 82.561837][ T1204] [ 82.565031][ T1204] Kernel Offset: disabled [ 82.569330][ T1204] Rebooting in 86400 seconds..