Re: [syzbot] [usb?] KASAN: invalid-free in f_uac2_opts_p_srate_store

From: syzbot

Date: Fri Oct 09 2026 - 23:53:09 EST


syzbot suspects this issue was fixed by commit:

commit 844d83d5964b87919b958ff48405188c6ddae9cc
Author: Qing Ming <a0yami@xxxxxxxxxxx>
Date: Tue May 19 14:33:19 2026 +0000

usb: gadget: uac: validate rate list length before storing

bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1080e1d1580000
start commit: 3d6d817622b0 Merge tag 'scsi-fixes' of git://git.kernel.or..
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=158601bb8cb292dd
dashboard link: https://syzkaller.appspot.com/bug?extid=38bab69d2760cc99cfbe
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=10f82c79580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=13068ac6580000

If the result looks correct, please mark the issue as fixed by replying with:

#syz fix: usb: gadget: uac: validate rate list length before storing

For information about bisection process see: https://goo.gl/tpsmEJ#bisection