Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts.
2026/08/15 05:43:42 parsed 1 programs
[ 52.792140][ T29] audit: type=1400 audit(1786772622.372:77): avc: denied { node_bind } for pid=2978 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 52.813209][ T29] audit: type=1400 audit(1786772622.372:78): avc: denied { module_request } for pid=2978 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
2026/08/15 05:43:42 serving rpc on tcp://34759
[ 55.786348][ T29] audit: type=1400 audit(1786772625.362:79): avc: denied { mounton } for pid=2988 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 55.809992][ T29] audit: type=1400 audit(1786772625.392:80): avc: denied { mount } for pid=2988 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 55.821593][ T2988] cgroup: Unknown subsys name 'net'
[ 55.839745][ T29] audit: type=1400 audit(1786772625.422:81): avc: denied { unmount } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 55.960899][ T2988] cgroup: Unknown subsys name 'cpuset'
[ 55.970075][ T2988] cgroup: Unknown subsys name 'rlimit'
[ 56.126029][ T29] audit: type=1400 audit(1786772625.702:82): avc: denied { setattr } for pid=2988 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 56.149441][ T29] audit: type=1400 audit(1786772625.702:83): avc: denied { create } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 56.170446][ T29] audit: type=1400 audit(1786772625.702:84): avc: denied { write } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 56.191184][ T29] audit: type=1400 audit(1786772625.702:85): avc: denied { read } for pid=2988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 56.217810][ T29] audit: type=1400 audit(1786772625.792:86): avc: denied { sys_module } for pid=2988 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 56.344853][ T2992] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 56.399362][ T2988] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 57.965739][ T29] kauditd_printk_skb: 8 callbacks suppressed
[ 57.965762][ T29] audit: type=1400 audit(1786772627.542:95): avc: denied { execmem } for pid=2994 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 58.001296][ T29] audit: type=1400 audit(1786772627.582:96): avc: denied { read } for pid=2995 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 58.048410][ T29] audit: type=1400 audit(1786772627.582:97): avc: denied { open } for pid=2995 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 58.082235][ T29] audit: type=1400 audit(1786772627.582:98): avc: denied { mounton } for pid=2995 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 61.290401][ T29] audit: type=1400 audit(1786772630.872:99): avc: denied { create } for pid=2995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 70.904752][ T29] audit: type=1400 audit(1786772640.482:100): avc: denied { mounton } for pid=2995 comm="syz-executor" path="/root/syzkaller.GJ1DtE/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 70.929315][ T29] audit: type=1400 audit(1786772640.482:101): avc: denied { mount } for pid=2995 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 70.951997][ T29] audit: type=1400 audit(1786772640.492:102): avc: denied { mounton } for pid=2995 comm="syz-executor" path="/root/syzkaller.GJ1DtE/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 70.977927][ T29] audit: type=1400 audit(1786772640.492:103): avc: denied { mount } for pid=2995 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 71.000150][ T29] audit: type=1400 audit(1786772640.492:104): avc: denied { mounton } for pid=2995 comm="syz-executor" path="/root/syzkaller.GJ1DtE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 71.027451][ T29] audit: type=1400 audit(1786772640.502:105): avc: denied { mounton } for pid=2995 comm="syz-executor" path="/root/syzkaller.GJ1DtE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 71.056056][ T29] audit: type=1400 audit(1786772640.512:106): avc: denied { unmount } for pid=2995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 71.076032][ T29] audit: type=1400 audit(1786772640.512:107): avc: denied { mounton } for pid=2995 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 71.132032][ T2995] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 71.153474][ T29] audit: type=1400 audit(1786772640.732:108): avc: denied { read write } for pid=2995 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 71.184277][ T29] audit: type=1400 audit(1786772640.732:109): avc: denied { open } for pid=2995 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 71.282633][ T2995] syz-executor (2995) used greatest stack depth: 22856 bytes left
2026/08/15 05:44:04 executed programs: 0
2026/08/15 05:44:17 executed programs: 2
[ 87.582998][ T29] kauditd_printk_skb: 12 callbacks suppressed
[ 87.583020][ T29] audit: type=1400 audit(1786772657.162:122): avc: denied { read write } for pid=3974 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 87.619939][ T29] audit: type=1400 audit(1786772657.162:123): avc: denied { open } for pid=3974 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 87.643712][ T29] audit: type=1400 audit(1786772657.162:124): avc: denied { ioctl } for pid=3974 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 87.858688][ T3449] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 88.019100][ T3449] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 88.030224][ T3449] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 88.040436][ T3449] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 88.050618][ T3449] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 88.060416][ T3449] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 88.073267][ T3449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 89.291403][ T3449] ==================================================================
[ 89.299526][ T3449] BUG: KASAN: slab-out-of-bounds in strlen+0x93/0xa0
[ 89.306259][ T3449] Read of size 1 at addr ffff888118e1e300 by task kworker/0:2/3449
[ 89.314163][ T3449]
[ 89.316531][ T3449] CPU: 0 UID: 0 PID: 3449 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(lazy)
[ 89.316559][ T3449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 89.316578][ T3449] Workqueue: usb_hub_wq hub_event
[ 89.316621][ T3449] Call Trace:
[ 89.316634][ T3449]
[ 89.316643][ T3449] dump_stack_lvl+0x100/0x190
[ 89.316678][ T3449] print_report+0x13d/0x4b0
[ 89.316711][ T3449] ? __virt_addr_valid+0x239/0x430
[ 89.316743][ T3449] ? strlen+0x93/0xa0
[ 89.316772][ T3449] kasan_report+0xdf/0x1c0
[ 89.316803][ T3449] ? strlen+0x93/0xa0
[ 89.316834][ T3449] strlen+0x93/0xa0
[ 89.316863][ T3449] drm_property_add_enum+0x2d/0x590
[ 89.316892][ T3449] drm_mode_create_tv_properties_legacy+0x3e9/0x4c0
[ 89.316934][ T3449] gud_connector_add_tv_mode+0x1d7/0x2b0
[ 89.316970][ T3449] ? __pfx_gud_connector_add_tv_mode+0x10/0x10
[ 89.317004][ T3449] ? __pfx___drm_dev_dbg+0x10/0x10
[ 89.317033][ T3449] ? gud_get_connectors+0x645/0x1700
[ 89.317069][ T3449] gud_get_connectors+0xbd9/0x1700
[ 89.317108][ T3449] gud_probe+0x17aa/0x1c20
[ 89.317142][ T3449] ? __pfx_gud_probe+0x10/0x10
[ 89.317171][ T3449] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 89.317207][ T3449] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 89.317242][ T3449] ? __pm_runtime_set_status+0x13c/0x970
[ 89.317280][ T3449] usb_probe_interface+0x386/0x9b0
[ 89.317319][ T3449] ? __pfx_usb_probe_interface+0x10/0x10
[ 89.317354][ T3449] ? kernfs_put+0x3f/0x60
[ 89.317384][ T3449] ? sysfs_create_link+0x68/0xc0
[ 89.317410][ T3449] ? __pfx_usb_probe_interface+0x10/0x10
[ 89.317446][ T3449] really_probe+0x241/0xa60
[ 89.317474][ T3449] __driver_probe_device+0x20e/0x450
[ 89.317501][ T3449] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 89.317525][ T3449] driver_probe_device+0x4a/0x140
[ 89.317553][ T3449] __device_attach_driver+0x1df/0x320
[ 89.317582][ T3449] ? __pfx___device_attach_driver+0x10/0x10
[ 89.317610][ T3449] bus_for_each_drv+0x159/0x1e0
[ 89.317631][ T3449] ? __pfx_bus_for_each_drv+0x10/0x10
[ 89.317654][ T3449] ? lockdep_hardirqs_on+0x78/0x100
[ 89.317676][ T3449] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 89.317713][ T3449] __device_attach+0x1e4/0x4d0
[ 89.317740][ T3449] ? __pfx___device_attach+0x10/0x10
[ 89.317769][ T3449] ? do_raw_spin_unlock+0x145/0x1e0
[ 89.317806][ T3449] device_initial_probe+0xaf/0xd0
[ 89.317835][ T3449] bus_probe_device+0x64/0x160
[ 89.317860][ T3449] device_add+0x121d/0x1970
[ 89.317893][ T3449] ? __pfx_device_add+0x10/0x10
[ 89.317924][ T3449] ? mark_held_locks+0x40/0x70
[ 89.317957][ T3449] usb_set_configuration+0xd97/0x1c60
[ 89.317997][ T3449] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 89.318024][ T3449] usb_generic_driver_probe+0xa1/0xe0
[ 89.318051][ T3449] usb_probe_device+0xef/0x400
[ 89.318083][ T3449] ? __pfx_usb_probe_device+0x10/0x10
[ 89.318116][ T3449] really_probe+0x241/0xa60
[ 89.318144][ T3449] __driver_probe_device+0x20e/0x450
[ 89.318171][ T3449] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 89.318195][ T3449] driver_probe_device+0x4a/0x140
[ 89.318222][ T3449] __device_attach_driver+0x1df/0x320
[ 89.318256][ T3449] ? __pfx___device_attach_driver+0x10/0x10
[ 89.318284][ T3449] bus_for_each_drv+0x159/0x1e0
[ 89.318351][ T3449] ? __pfx_bus_for_each_drv+0x10/0x10
[ 89.318383][ T3449] ? lockdep_hardirqs_on+0x78/0x100
[ 89.318416][ T3449] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 89.318474][ T3449] __device_attach+0x1e4/0x4d0
[ 89.318502][ T3449] ? __pfx___device_attach+0x10/0x10
[ 89.318530][ T3449] ? do_raw_spin_unlock+0x145/0x1e0
[ 89.318566][ T3449] device_initial_probe+0xaf/0xd0
[ 89.318595][ T3449] bus_probe_device+0x64/0x160
[ 89.318619][ T3449] device_add+0x121d/0x1970
[ 89.318651][ T3449] ? __pfx_device_add+0x10/0x10
[ 89.318681][ T3449] ? usb_detect_static_quirks+0x335/0x3e0
[ 89.318712][ T3449] usb_new_device.part.0+0xcc2/0x1686
[ 89.318744][ T3449] ? do_raw_spin_lock+0x128/0x260
[ 89.318780][ T3449] ? __pfx_usb_new_device.part.0+0x10/0x10
[ 89.318809][ T3449] ? mark_held_locks+0x40/0x70
[ 89.318839][ T3449] hub_event.cold+0x51a/0xe9d
[ 89.318878][ T3449] ? __pfx_hub_event+0x10/0x10
[ 89.318907][ T3449] ? debug_object_deactivate+0x2e4/0x3b0
[ 89.318944][ T3449] ? rcu_is_watching+0x12/0xc0
[ 89.318966][ T3449] process_one_work+0xa23/0x1940
[ 89.319000][ T3449] ? __pfx_process_one_work+0x10/0x10
[ 89.319032][ T3449] ? __pfx_hub_event+0x10/0x10
[ 89.319064][ T3449] worker_thread+0x5ef/0xe50
[ 89.319095][ T3449] ? __pfx_worker_thread+0x10/0x10
[ 89.319123][ T3449] ? kthread+0x13a/0x450
[ 89.319147][ T3449] ? __pfx_worker_thread+0x10/0x10
[ 89.319174][ T3449] kthread+0x370/0x450
[ 89.319198][ T3449] ? __pfx_kthread+0x10/0x10
[ 89.319224][ T3449] ret_from_fork+0x69a/0xc80
[ 89.319275][ T3449] ? __pfx_ret_from_fork+0x10/0x10
[ 89.319308][ T3449] ? __switch_to+0x7f6/0x10e0
[ 89.319332][ T3449] ? __switch_to_asm+0x39/0x70
[ 89.319352][ T3449] ? __pfx_kthread+0x10/0x10
[ 89.319377][ T3449] ret_from_fork_asm+0x1a/0x30
[ 89.319404][ T3449]
[ 89.319411][ T3449]
[ 89.801863][ T3449] Allocated by task 3449:
[ 89.806225][ T3449] kasan_save_stack+0x30/0x50
[ 89.810944][ T3449] kasan_save_track+0x14/0x30
[ 89.815638][ T3449] __kasan_kmalloc+0x8f/0xa0
[ 89.820252][ T3449] __kmalloc_cache_noprof+0x35e/0x670
[ 89.825798][ T3449] gud_connector_add_tv_mode+0xac/0x2b0
[ 89.831401][ T3449] gud_get_connectors+0xbd9/0x1700
[ 89.836543][ T3449] gud_probe+0x17aa/0x1c20
[ 89.840976][ T3449] usb_probe_interface+0x386/0x9b0
[ 89.846118][ T3449] really_probe+0x241/0xa60
[ 89.850732][ T3449] __driver_probe_device+0x20e/0x450
[ 89.856035][ T3449] driver_probe_device+0x4a/0x140
[ 89.861076][ T3449] __device_attach_driver+0x1df/0x320
[ 89.866468][ T3449] bus_for_each_drv+0x159/0x1e0
[ 89.871334][ T3449] __device_attach+0x1e4/0x4d0
[ 89.876116][ T3449] device_initial_probe+0xaf/0xd0
[ 89.881262][ T3449] bus_probe_device+0x64/0x160
[ 89.886039][ T3449] device_add+0x121d/0x1970
[ 89.890565][ T3449] usb_set_configuration+0xd97/0x1c60
[ 89.895958][ T3449] usb_generic_driver_probe+0xa1/0xe0
[ 89.901348][ T3449] usb_probe_device+0xef/0x400
[ 89.906131][ T3449] really_probe+0x241/0xa60
[ 89.910658][ T3449] __driver_probe_device+0x20e/0x450
[ 89.915972][ T3449] driver_probe_device+0x4a/0x140
[ 89.921018][ T3449] __device_attach_driver+0x1df/0x320
[ 89.926417][ T3449] bus_for_each_drv+0x159/0x1e0
[ 89.931277][ T3449] __device_attach+0x1e4/0x4d0
[ 89.936058][ T3449] device_initial_probe+0xaf/0xd0
[ 89.941112][ T3449] bus_probe_device+0x64/0x160
[ 89.945890][ T3449] device_add+0x121d/0x1970
[ 89.950444][ T3449] usb_new_device.part.0+0xcc2/0x1686
[ 89.955871][ T3449] hub_event.cold+0x51a/0xe9d
[ 89.960574][ T3449] process_one_work+0xa23/0x1940
[ 89.965536][ T3449] worker_thread+0x5ef/0xe50
[ 89.970155][ T3449] kthread+0x370/0x450
[ 89.974416][ T3449] ret_from_fork+0x69a/0xc80
[ 89.979051][ T3449] ret_from_fork_asm+0x1a/0x30
[ 89.983829][ T3449]
[ 89.986162][ T3449] The buggy address belongs to the object at ffff888118e1e200
[ 89.986162][ T3449] which belongs to the cache kmalloc-256 of size 256
[ 90.000241][ T3449] The buggy address is located 0 bytes to the right of
[ 90.000241][ T3449] allocated 256-byte region [ffff888118e1e200, ffff888118e1e300)
[ 90.014839][ T3449]
[ 90.017184][ T3449] The buggy address belongs to the physical page:
[ 90.023629][ T3449] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118e1e
[ 90.032521][ T3449] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 90.041047][ T3449] flags: 0x200000000000040(head|node=0|zone=2)
[ 90.047237][ T3449] page_type: f5(slab)
[ 90.051264][ T3449] raw: 0200000000000040 ffff888100041b40 dead000000000100 dead000000000122
[ 90.059898][ T3449] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 90.068517][ T3449] head: 0200000000000040 ffff888100041b40 dead000000000100 dead000000000122
[ 90.077211][ T3449] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 90.085906][ T3449] head: 0200000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 90.094625][ T3449] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 90.103315][ T3449] page dumped because: kasan: bad access detected
[ 90.109746][ T3449] page_owner tracks the page as allocated
[ 90.115483][ T3449] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2858, tgid 2858 (udevadm), ts 18986008443, free_ts 0
[ 90.134891][ T3449] post_alloc_hook+0xfd/0x120
[ 90.139627][ T3449] get_page_from_freelist+0xf25/0x3400
[ 90.145130][ T3449] __alloc_frozen_pages_noprof+0x28f/0x2b90
[ 90.151098][ T3449] new_slab+0xa2/0x670
[ 90.155200][ T3449] refill_objects+0xe3/0x410
[ 90.159836][ T3449] __pcs_replace_empty_main+0x376/0x680
[ 90.165420][ T3449] __kmalloc_cache_noprof+0x50e/0x670
[ 90.170845][ T3449] inode_doinit_use_xattr+0x54/0x330
[ 90.176174][ T3449] inode_doinit_with_dentry+0x10e6/0x1320
[ 90.181929][ T3449] selinux_d_instantiate+0x26/0x40
[ 90.187170][ T3449] security_d_instantiate+0x62/0xc0
[ 90.192416][ T3449] d_splice_alias_ops+0xd7/0x15c0
[ 90.197472][ T3449] kernfs_iop_lookup+0x23f/0x2d0
[ 90.202453][ T3449] path_openat+0x241f/0x4280
[ 90.207066][ T3449] do_file_open+0x20e/0x430
[ 90.211593][ T3449] do_sys_openat2+0x10f/0x1e0
[ 90.216390][ T3449] page_owner free stack trace missing
[ 90.221772][ T3449]
[ 90.224116][ T3449] Memory state around the buggy address:
[ 90.229762][ T3449] ffff888118e1e200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 90.237864][ T3449] ffff888118e1e280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 90.245958][ T3449] >ffff888118e1e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 90.254030][ T3449] ^
[ 90.258117][ T3449] ffff888118e1e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 90.266200][ T3449] ffff888118e1e400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 90.274276][ T3449] ==================================================================
[ 90.282887][ T3449] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 90.290137][ T3449] CPU: 0 UID: 0 PID: 3449 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(lazy)
[ 90.299562][ T3449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 90.309661][ T3449] Workqueue: usb_hub_wq hub_event
[ 90.314760][ T3449] Call Trace:
[ 90.318071][ T3449]
[ 90.321053][ T3449] dump_stack_lvl+0x100/0x190
[ 90.325787][ T3449] vpanic+0x552/0x970
[ 90.329831][ T3449] ? __pfx_vpanic+0x10/0x10
[ 90.334382][ T3449] ? strlen+0x93/0xa0
[ 90.338406][ T3449] panic+0xd1/0xe0
[ 90.342206][ T3449] ? __pfx_panic+0x10/0x10
[ 90.346668][ T3449] ? strlen+0x93/0xa0
[ 90.350684][ T3449] ? preempt_schedule_common+0x42/0xc0
[ 90.356182][ T3449] ? check_panic_on_warn+0x1f/0x90
[ 90.361337][ T3449] check_panic_on_warn.cold+0x19/0x34
[ 90.366781][ T3449] end_report.part.0+0x3a/0x90
[ 90.371585][ T3449] kasan_report.cold+0xe/0x18
[ 90.376316][ T3449] ? strlen+0x93/0xa0
[ 90.380343][ T3449] strlen+0x93/0xa0
[ 90.384188][ T3449] drm_property_add_enum+0x2d/0x590
[ 90.389433][ T3449] drm_mode_create_tv_properties_legacy+0x3e9/0x4c0
[ 90.396093][ T3449] gud_connector_add_tv_mode+0x1d7/0x2b0
[ 90.401772][ T3449] ? __pfx_gud_connector_add_tv_mode+0x10/0x10
[ 90.407969][ T3449] ? __pfx___drm_dev_dbg+0x10/0x10
[ 90.413129][ T3449] ? gud_get_connectors+0x645/0x1700
[ 90.418465][ T3449] gud_get_connectors+0xbd9/0x1700
[ 90.423660][ T3449] gud_probe+0x17aa/0x1c20
[ 90.428126][ T3449] ? __pfx_gud_probe+0x10/0x10
[ 90.432928][ T3449] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 90.438788][ T3449] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 90.444727][ T3449] ? __pm_runtime_set_status+0x13c/0x970
[ 90.450401][ T3449] usb_probe_interface+0x386/0x9b0
[ 90.455563][ T3449] ? __pfx_usb_probe_interface+0x10/0x10
[ 90.461244][ T3449] ? kernfs_put+0x3f/0x60
[ 90.465613][ T3449] ? sysfs_create_link+0x68/0xc0
[ 90.470618][ T3449] ? __pfx_usb_probe_interface+0x10/0x10
[ 90.476301][ T3449] really_probe+0x241/0xa60
[ 90.480866][ T3449] __driver_probe_device+0x20e/0x450
[ 90.486190][ T3449] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 90.492119][ T3449] driver_probe_device+0x4a/0x140
[ 90.497178][ T3449] __device_attach_driver+0x1df/0x320
[ 90.502591][ T3449] ? __pfx___device_attach_driver+0x10/0x10
[ 90.508525][ T3449] bus_for_each_drv+0x159/0x1e0
[ 90.513408][ T3449] ? __pfx_bus_for_each_drv+0x10/0x10
[ 90.518834][ T3449] ? lockdep_hardirqs_on+0x78/0x100
[ 90.524079][ T3449] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 90.529940][ T3449] __device_attach+0x1e4/0x4d0
[ 90.534744][ T3449] ? __pfx___device_attach+0x10/0x10
[ 90.540086][ T3449] ? do_raw_spin_unlock+0x145/0x1e0
[ 90.545342][ T3449] device_initial_probe+0xaf/0xd0
[ 90.550405][ T3449] bus_probe_device+0x64/0x160
[ 90.555213][ T3449] device_add+0x121d/0x1970
[ 90.559764][ T3449] ? __pfx_device_add+0x10/0x10
[ 90.564665][ T3449] ? mark_held_locks+0x40/0x70
[ 90.569491][ T3449] usb_set_configuration+0xd97/0x1c60
[ 90.574933][ T3449] ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 90.581029][ T3449] usb_generic_driver_probe+0xa1/0xe0
[ 90.586490][ T3449] usb_probe_device+0xef/0x400
[ 90.591300][ T3449] ? __pfx_usb_probe_device+0x10/0x10
[ 90.596734][ T3449] really_probe+0x241/0xa60
[ 90.601275][ T3449] __driver_probe_device+0x20e/0x450
[ 90.606595][ T3449] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 90.612536][ T3449] driver_probe_device+0x4a/0x140
[ 90.617598][ T3449] __device_attach_driver+0x1df/0x320
[ 90.623013][ T3449] ? __pfx___device_attach_driver+0x10/0x10
[ 90.628952][ T3449] bus_for_each_drv+0x159/0x1e0
[ 90.633832][ T3449] ? __pfx_bus_for_each_drv+0x10/0x10
[ 90.639236][ T3449] ? lockdep_hardirqs_on+0x78/0x100
[ 90.644467][ T3449] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 90.650336][ T3449] __device_attach+0x1e4/0x4d0
[ 90.655155][ T3449] ? __pfx___device_attach+0x10/0x10
[ 90.660482][ T3449] ? do_raw_spin_unlock+0x145/0x1e0
[ 90.665734][ T3449] device_initial_probe+0xaf/0xd0
[ 90.670800][ T3449] bus_probe_device+0x64/0x160
[ 90.675602][ T3449] device_add+0x121d/0x1970
[ 90.680168][ T3449] ? __pfx_device_add+0x10/0x10
[ 90.685065][ T3449] ? usb_detect_static_quirks+0x335/0x3e0
[ 90.690919][ T3449] usb_new_device.part.0+0xcc2/0x1686
[ 90.696343][ T3449] ? do_raw_spin_lock+0x128/0x260
[ 90.701425][ T3449] ? __pfx_usb_new_device.part.0+0x10/0x10
[ 90.707289][ T3449] ? mark_held_locks+0x40/0x70
[ 90.712137][ T3449] hub_event.cold+0x51a/0xe9d
[ 90.716880][ T3449] ? __pfx_hub_event+0x10/0x10
[ 90.721682][ T3449] ? debug_object_deactivate+0x2e4/0x3b0
[ 90.727384][ T3449] ? rcu_is_watching+0x12/0xc0
[ 90.732209][ T3449] process_one_work+0xa23/0x1940
[ 90.737220][ T3449] ? __pfx_process_one_work+0x10/0x10
[ 90.742645][ T3449] ? __pfx_hub_event+0x10/0x10
[ 90.747453][ T3449] worker_thread+0x5ef/0xe50
[ 90.752087][ T3449] ? __pfx_worker_thread+0x10/0x10
[ 90.757260][ T3449] ? kthread+0x13a/0x450
[ 90.761532][ T3449] ? __pfx_worker_thread+0x10/0x10
[ 90.766684][ T3449] kthread+0x370/0x450
[ 90.770791][ T3449] ? __pfx_kthread+0x10/0x10
[ 90.775433][ T3449] ret_from_fork+0x69a/0xc80
[ 90.780080][ T3449] ? __pfx_ret_from_fork+0x10/0x10
[ 90.785244][ T3449] ? __switch_to+0x7f6/0x10e0
[ 90.789958][ T3449] ? __switch_to_asm+0x39/0x70
[ 90.794754][ T3449] ? __pfx_kthread+0x10/0x10
[ 90.799386][ T3449] ret_from_fork_asm+0x1a/0x30
[ 90.804199][ T3449]
[ 90.807822][ T3449] Kernel Offset: disabled
[ 90.812166][ T3449] Rebooting in 86400 seconds..