Re: [syzbot] [usb?] KASAN: invalid-free in f_uac2_opts_c_srate_store

From: syzbot

Date: Fri Oct 09 2026 - 13:29:10 EST


syzbot suspects this issue was fixed by commit:

commit 844d83d5964b87919b958ff48405188c6ddae9cc
Author: Qing Ming <a0yami@xxxxxxxxxxx>
Date: Tue May 19 14:33:19 2026 +0000

usb: gadget: uac: validate rate list length before storing

bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=12c8c671580000
start commit: f5bbbfec59b4 Merge tag 'probes-fixes-v7.2-rc7' of git://gi..
git tree: upstream
kernel config: https://syzkaller.appspot.com/x/.config?x=158601bb8cb292dd
dashboard link: https://syzkaller.appspot.com/bug?extid=a4f65284f1451010b0a8
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1504aa9e580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=149f7879580000

If the result looks correct, please mark the issue as fixed by replying with:

#syz fix: usb: gadget: uac: validate rate list length before storing

For information about bisection process see: https://goo.gl/tpsmEJ#bisection