Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts.
2026/08/08 22:44:15 parsed 1 programs
2026/08/08 22:44:15 serving rpc on tcp://41269
[ 72.721856][ T4200] cgroup: Unknown subsys name 'net'
[ 72.830364][ T4200] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 74.356180][ T4200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 76.495808][ T4232] chnl_net:caif_netlink_parms(): no params data found
[ 76.545823][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.553833][ T4232] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.562385][ T4232] device bridge_slave_0 entered promiscuous mode
[ 76.572780][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.581573][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.589808][ T4232] device bridge_slave_1 entered promiscuous mode
[ 76.619345][ T4232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.633477][ T4232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.662936][ T4232] team0: Port device team_slave_0 added
[ 76.672919][ T4232] team0: Port device team_slave_1 added
[ 76.697794][ T4232] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.705043][ T4232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.732690][ T4232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.746309][ T4232] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.754952][ T4232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.782497][ T4232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.825106][ T4232] device hsr_slave_0 entered promiscuous mode
[ 76.832729][ T4232] device hsr_slave_1 entered promiscuous mode
[ 76.978583][ T4232] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 76.991015][ T4232] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.001849][ T4232] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.012667][ T4232] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.041689][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.048959][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.057379][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.064663][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.129163][ T4232] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.146309][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 77.157538][ T1285] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.167428][ T1285] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.176094][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 77.194088][ T4232] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.208715][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 77.218256][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.225413][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.241263][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 77.251877][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.259011][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.282747][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 77.301897][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 77.313224][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 77.323116][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 77.337776][ T4232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 77.350420][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 77.359614][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 77.490983][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 77.498576][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 77.510807][ T4232] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.534805][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 77.544436][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 77.567874][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 77.578815][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 77.588890][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 77.597458][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 77.613662][ T4232] device veth0_vlan entered promiscuous mode
[ 77.628010][ T4232] device veth1_vlan entered promiscuous mode
[ 77.654384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 77.663965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 77.675102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 77.685450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 77.696809][ T4232] device veth0_macvtap entered promiscuous mode
[ 77.709361][ T4232] device veth1_macvtap entered promiscuous mode
[ 77.728483][ T4232] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.739270][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 77.748290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 77.759522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 77.768716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 77.783400][ T4232] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.791661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 77.801837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 77.814027][ T4232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.824344][ T4232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.833715][ T4232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.842787][ T4232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.952491][ T4232] syz-executor (4232) used greatest stack depth: 20688 bytes left
[ 78.300562][ T3058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.468720][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.478331][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.491684][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 79.512743][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.521190][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.528817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/08/08 22:44:24 executed programs: 0
[ 79.946942][ T4289] chnl_net:caif_netlink_parms(): no params data found
[ 79.995794][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.003518][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.012109][ T4289] device bridge_slave_0 entered promiscuous mode
[ 80.020964][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.028330][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.036510][ T4289] device bridge_slave_1 entered promiscuous mode
[ 80.058669][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.071167][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.094470][ T4289] team0: Port device team_slave_0 added
[ 80.101997][ T4289] team0: Port device team_slave_1 added
[ 80.120440][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.127450][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.153872][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.167737][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.175045][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.201361][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.234646][ T4289] device hsr_slave_0 entered promiscuous mode
[ 80.241779][ T4289] device hsr_slave_1 entered promiscuous mode
[ 80.248441][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 80.256602][ T4289] Cannot create hsr debugfs directory
[ 81.007582][ T3058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.901128][ T1107] Bluetooth: hci0: command 0x0409 tx timeout
[ 83.576438][ T3058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.627598][ T3058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.980153][ T4313] Bluetooth: hci0: command 0x041b tx timeout
[ 84.503379][ T4289] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.512831][ T4289] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.523350][ T4289] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.533139][ T4289] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.632739][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.647890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 84.656169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 84.668322][ T4289] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.694299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 84.704809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 84.713761][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.720884][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.729697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 84.741847][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 84.752458][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 84.761834][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.769067][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.796430][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 84.809527][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 84.823563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 84.833860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 84.843467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 84.863075][ T3058] device hsr_slave_0 left promiscuous mode
[ 84.869918][ T3058] device hsr_slave_1 left promiscuous mode
[ 84.878843][ T3058] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 84.886743][ T3058] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 84.896349][ T3058] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 84.904567][ T3058] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 84.913320][ T3058] device bridge_slave_1 left promiscuous mode
[ 84.920650][ T3058] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.935874][ T3058] device bridge_slave_0 left promiscuous mode
[ 84.942299][ T3058] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.965864][ T3058] device veth1_macvtap left promiscuous mode
[ 84.972623][ T3058] device veth0_macvtap left promiscuous mode
[ 84.978709][ T3058] device veth1_vlan left promiscuous mode
[ 84.985580][ T3058] device veth0_vlan left promiscuous mode
[ 85.154797][ T3058] team0 (unregistering): Port device team_slave_1 removed
[ 85.168890][ T3058] team0 (unregistering): Port device team_slave_0 removed
[ 85.185599][ T3058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 85.203908][ T3058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 85.266731][ T3058] bond0 (unregistering): Released all slaves
[ 85.322956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 85.331844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.346666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 85.355395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.370510][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 85.378973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.391010][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.512742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 85.520661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 85.534568][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.559157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 85.569385][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 85.588729][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 85.597457][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 85.607874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 85.616042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 85.625232][ T4289] device veth0_vlan entered promiscuous mode
[ 85.637341][ T4289] device veth1_vlan entered promiscuous mode
[ 85.650810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 85.659018][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 85.675667][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 85.684478][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 85.695635][ T4289] device veth0_macvtap entered promiscuous mode
[ 85.707383][ T4289] device veth1_macvtap entered promiscuous mode
[ 85.727701][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.736885][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 85.748659][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 85.758463][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 85.767954][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 85.782999][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.801300][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 85.810578][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 85.822803][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.832912][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.844962][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.854681][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.933076][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.953477][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.961352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/08/08 22:44:31 executed programs: 2
[ 85.989473][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.997481][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.006952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 86.071320][ T2240] Bluetooth: hci0: command 0x040f tx timeout
[ 86.360120][ T2240] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 86.742381][ T2240] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 86.752710][ T2240] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 86.763112][ T2240] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 86.792594][ T1324] cfg80211: failed to load regulatory.db
[ 86.930266][ T2240] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 86.939380][ T2240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 86.948839][ T2240] usb 1-1: Product: syz
[ 86.953487][ T2240] usb 1-1: Manufacturer: syz
[ 86.958122][ T2240] usb 1-1: SerialNumber: syz
[ 86.982438][ T4340] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 87.010585][ T4340] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 87.017713][ T4340] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 87.380223][ T2240] redrat3 1-1:1.0: Problem fetching firmware ID
[ 87.410216][ T2240] redrat3 1-1:1.0: Failed to read timeout from hardware
[ 87.470080][ T2240] rc_core: IR keymap rc-hauppauge not found
[ 87.476022][ T2240] Registered IR keymap rc-empty
[ 87.502451][ T2240] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0
[ 87.514972][ T2240] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0/input5
[ 87.550152][ T2240] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 87.570570][ T2240] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 87.579494][ T2240] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 87.594363][ T2240] redrat3: probe of 1-1:1.0 failed with error -5
[ 87.623172][ T2240] usb 1-1: USB disconnect, device number 2
[ 87.638669][ T3560] ==================================================================
[ 87.647350][ T3560] BUG: KASAN: use-after-free in string+0x204/0x290
[ 87.653895][ T3560] Read of size 1 at addr ffff88807bd8e728 by task udevd/3560
[ 87.661278][ T3560]
[ 87.663643][ T3560] CPU: 0 PID: 3560 Comm: udevd Not tainted syzkaller #0
[ 87.670605][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 87.680684][ T3560] Call Trace:
[ 87.683984][ T3560]
[ 87.686938][ T3560] dump_stack_lvl+0x188/0x250
[ 87.691628][ T3560] ? show_regs_print_info+0x20/0x20
[ 87.696960][ T3560] ? _printk+0xda/0x130
[ 87.701140][ T3560] ? load_image+0x410/0x410
[ 87.705664][ T3560] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 87.711147][ T3560] print_address_description+0x60/0x2d0
[ 87.716706][ T3560] ? string+0x204/0x290
[ 87.720882][ T3560] kasan_report+0xdf/0x130
[ 87.725326][ T3560] ? string+0x204/0x290
[ 87.729506][ T3560] string+0x204/0x290
[ 87.733688][ T3560] vsnprintf+0x10db/0x1c20
[ 87.738150][ T3560] add_uevent_var+0x1cd/0x460
[ 87.742864][ T3560] ? dev_attr_show+0x50/0xb0
[ 87.747502][ T3560] ? kobject_uevent_env+0x890/0x890
[ 87.752757][ T3560] ? __mutex_lock_common+0x435/0x2400
[ 87.758183][ T3560] rc_dev_uevent+0x15b/0x190
[ 87.762796][ T3560] dev_uevent+0x4d6/0x740
[ 87.767161][ T3560] ? dev_uevent_name+0xa0/0xa0
[ 87.771949][ T3560] uevent_show+0x1b1/0x320
[ 87.776374][ T3560] dev_attr_show+0x50/0xb0
[ 87.780799][ T3560] ? device_get_ownership+0xa0/0xa0
[ 87.786019][ T3560] sysfs_kf_seq_show+0x316/0x4c0
[ 87.791167][ T3560] seq_read_iter+0x460/0xc50
[ 87.795789][ T3560] vfs_read+0x75e/0xd50
[ 87.800011][ T3560] ? kernel_read+0x1e0/0x1e0
[ 87.804901][ T3560] ? __fdget_pos+0x2c6/0x370
[ 87.809496][ T3560] ksys_read+0x153/0x260
[ 87.813762][ T3560] ? vfs_write+0xd70/0xd70
[ 87.818185][ T3560] ? lockdep_hardirqs_on+0x94/0x140
[ 87.823436][ T3560] do_syscall_64+0x4c/0xa0
[ 87.827859][ T3560] ? clear_bhb_loop+0x30/0x80
[ 87.832540][ T3560] ? clear_bhb_loop+0x30/0x80
[ 87.837224][ T3560] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.843150][ T3560] RIP: 0033:0x7f1e1c134407
[ 87.847584][ T3560] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 87.867213][ T3560] RSP: 002b:00007ffc8a481520 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 87.875655][ T3560] RAX: ffffffffffffffda RBX: 00007f1e1c046880 RCX: 00007f1e1c134407
[ 87.883729][ T3560] RDX: 0000000000001000 RSI: 000055c67fc0d550 RDI: 000000000000000c
[ 87.891715][ T3560] RBP: 00007f1e1c27cff0 R08: 0000000000000000 R09: 0000000000000000
[ 87.899706][ T3560] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 87.907702][ T3560] R13: 00007f1e1c27cea0 R14: 0000000000000000 R15: 000055c67fc295d0
[ 87.915699][ T3560]
[ 87.918729][ T3560]
[ 87.921051][ T3560] Allocated by task 2240:
[ 87.925465][ T3560] __kasan_kmalloc+0xaf/0xe0
[ 87.930078][ T3560] redrat3_dev_probe+0x3ef/0x23c0
[ 87.935142][ T3560] usb_probe_interface+0x5be/0xae0
[ 87.940364][ T3560] really_probe+0x276/0xc70
[ 87.944883][ T3560] __driver_probe_device+0x1f5/0x390
[ 87.950193][ T3560] driver_probe_device+0x4f/0x420
[ 87.955257][ T3560] __device_attach_driver+0x2b0/0x500
[ 87.960635][ T3560] bus_for_each_drv+0x184/0x210
[ 87.965494][ T3560] __device_attach+0x2a7/0x480
[ 87.970282][ T3560] bus_probe_device+0xba/0x1d0
[ 87.975171][ T3560] device_add+0xbcf/0x1050
[ 87.979707][ T3560] usb_set_configuration+0x19d5/0x2030
[ 87.985206][ T3560] usb_generic_driver_probe+0x89/0x150
[ 87.990684][ T3560] usb_probe_device+0x126/0x250
[ 87.995547][ T3560] really_probe+0x276/0xc70
[ 88.000073][ T3560] __driver_probe_device+0x1f5/0x390
[ 88.005391][ T3560] driver_probe_device+0x4f/0x420
[ 88.010707][ T3560] __device_attach_driver+0x2b0/0x500
[ 88.016087][ T3560] bus_for_each_drv+0x184/0x210
[ 88.020943][ T3560] __device_attach+0x2a7/0x480
[ 88.025770][ T3560] bus_probe_device+0xba/0x1d0
[ 88.030658][ T3560] device_add+0xbcf/0x1050
[ 88.035085][ T3560] usb_new_device+0x9f6/0x15d0
[ 88.039859][ T3560] hub_event+0x2b8d/0x5260
[ 88.044286][ T3560] process_one_work+0x867/0xff0
[ 88.049161][ T3560] worker_thread+0xad7/0x12a0
[ 88.053847][ T3560] kthread+0x42e/0x520
[ 88.057923][ T3560] ret_from_fork+0x1f/0x30
[ 88.062354][ T3560]
[ 88.064702][ T3560] Freed by task 2240:
[ 88.068702][ T3560] kasan_set_track+0x4b/0x70
[ 88.073426][ T3560] kasan_set_free_info+0x1f/0x40
[ 88.078501][ T3560] ____kasan_slab_free+0xd5/0x110
[ 88.083549][ T3560] slab_free_freelist_hook+0xec/0x170
[ 88.088922][ T3560] kfree+0xef/0x2a0
[ 88.092729][ T3560] redrat3_dev_probe+0x1b69/0x23c0
[ 88.097842][ T3560] usb_probe_interface+0x5be/0xae0
[ 88.102963][ T3560] really_probe+0x276/0xc70
[ 88.107682][ T3560] __driver_probe_device+0x1f5/0x390
[ 88.112997][ T3560] driver_probe_device+0x4f/0x420
[ 88.118045][ T3560] __device_attach_driver+0x2b0/0x500
[ 88.123597][ T3560] bus_for_each_drv+0x184/0x210
[ 88.128474][ T3560] __device_attach+0x2a7/0x480
[ 88.133252][ T3560] bus_probe_device+0xba/0x1d0
[ 88.138032][ T3560] device_add+0xbcf/0x1050
[ 88.140677][ T4313] Bluetooth: hci0: command 0x0419 tx timeout
[ 88.142485][ T3560] usb_set_configuration+0x19d5/0x2030
[ 88.153952][ T3560] usb_generic_driver_probe+0x89/0x150
[ 88.159451][ T3560] usb_probe_device+0x126/0x250
[ 88.164345][ T3560] really_probe+0x276/0xc70
[ 88.168892][ T3560] __driver_probe_device+0x1f5/0x390
[ 88.174232][ T3560] driver_probe_device+0x4f/0x420
[ 88.179295][ T3560] __device_attach_driver+0x2b0/0x500
[ 88.184735][ T3560] bus_for_each_drv+0x184/0x210
[ 88.189644][ T3560] __device_attach+0x2a7/0x480
[ 88.194415][ T3560] bus_probe_device+0xba/0x1d0
[ 88.199271][ T3560] device_add+0xbcf/0x1050
[ 88.203693][ T3560] usb_new_device+0x9f6/0x15d0
[ 88.208482][ T3560] hub_event+0x2b8d/0x5260
[ 88.212996][ T3560] process_one_work+0x867/0xff0
[ 88.217853][ T3560] worker_thread+0xad7/0x12a0
[ 88.222547][ T3560] kthread+0x42e/0x520
[ 88.226620][ T3560] ret_from_fork+0x1f/0x30
[ 88.231122][ T3560]
[ 88.233446][ T3560] The buggy address belongs to the object at ffff88807bd8e000
[ 88.233446][ T3560] which belongs to the cache kmalloc-2k of size 2048
[ 88.247750][ T3560] The buggy address is located 1832 bytes inside of
[ 88.247750][ T3560] 2048-byte region [ffff88807bd8e000, ffff88807bd8e800)
[ 88.261297][ T3560] The buggy address belongs to the page:
[ 88.267056][ T3560] page:ffffea0001ef6200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bd88
[ 88.277399][ T3560] head:ffffea0001ef6200 order:3 compound_mapcount:0 compound_pincount:0
[ 88.285943][ T3560] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 88.294032][ T3560] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c42000
[ 88.302674][ T3560] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[ 88.311260][ T3560] page dumped because: kasan: bad access detected
[ 88.317781][ T3560] page_owner tracks the page as allocated
[ 88.323559][ T3560] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4313, ts 86970740383, free_ts 86742177508
[ 88.344205][ T3560] get_page_from_freelist+0x24f6/0x2670
[ 88.349767][ T3560] __alloc_pages+0x1ee/0x480
[ 88.354365][ T3560] new_slab+0xc0/0x4b0
[ 88.358526][ T3560] ___slab_alloc+0x807/0xdd0
[ 88.363125][ T3560] __kmalloc_node_track_caller+0x13d/0x3a0
[ 88.368951][ T3560] __alloc_skb+0x22c/0x750
[ 88.373422][ T3560] mld_newpack+0x12f/0xba0
[ 88.377861][ T3560] add_grec+0x1364/0x1840
[ 88.382204][ T3560] mld_ifc_work+0x6f2/0xd60
[ 88.386816][ T3560] process_one_work+0x867/0xff0
[ 88.391670][ T3560] worker_thread+0xad7/0x12a0
[ 88.396355][ T3560] kthread+0x42e/0x520
[ 88.400451][ T3560] ret_from_fork+0x1f/0x30
[ 88.405028][ T3560] page last free stack trace:
[ 88.409835][ T3560] free_unref_page_prepare+0x637/0x6c0
[ 88.415340][ T3560] free_unref_page+0x8f/0x2a0
[ 88.420042][ T3560] __unfreeze_partials+0x188/0x1e0
[ 88.425189][ T3560] put_cpu_partial+0x12d/0x190
[ 88.430160][ T3560] qlist_free_all+0x35/0x90
[ 88.434695][ T3560] kasan_quarantine_reduce+0x150/0x160
[ 88.440452][ T3560] __kasan_slab_alloc+0x2f/0xc0
[ 88.445346][ T3560] slab_post_alloc_hook+0x4c/0x380
[ 88.450800][ T3560] __kmalloc+0x189/0x340
[ 88.455086][ T3560] tomoyo_realpath_from_path+0xed/0x5e0
[ 88.460715][ T3560] tomoyo_path_number_perm+0x251/0x6b0
[ 88.466236][ T3560] security_file_ioctl+0x6c/0xa0
[ 88.471359][ T3560] __se_sys_ioctl+0x48/0x170
[ 88.475974][ T3560] do_syscall_64+0x4c/0xa0
[ 88.480395][ T3560] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 88.486380][ T3560]
[ 88.488701][ T3560] Memory state around the buggy address:
[ 88.494327][ T3560] ffff88807bd8e600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 88.502477][ T3560] ffff88807bd8e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 88.510559][ T3560] >ffff88807bd8e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 88.518726][ T3560] ^
[ 88.524129][ T3560] ffff88807bd8e780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 88.532201][ T3560] ffff88807bd8e800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 88.540273][ T3560] ==================================================================
[ 88.548346][ T3560] Disabling lock debugging due to kernel taint
[ 88.558000][ T3560] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 88.565253][ T3560] CPU: 0 PID: 3560 Comm: udevd Tainted: G B syzkaller #0
[ 88.573653][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 88.583713][ T3560] Call Trace:
[ 88.587012][ T3560]
[ 88.589968][ T3560] dump_stack_lvl+0x188/0x250
[ 88.594674][ T3560] ? show_regs_print_info+0x20/0x20
[ 88.599880][ T3560] ? load_image+0x410/0x410
[ 88.604406][ T3560] panic+0x2f8/0x850
[ 88.608317][ T3560] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 88.614601][ T3560] ? bpf_jit_dump+0xd0/0xd0
[ 88.619147][ T3560] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 88.625140][ T3560] ? _raw_spin_unlock+0x40/0x40
[ 88.630093][ T3560] ? string+0x204/0x290
[ 88.634271][ T3560] check_panic_on_warn+0x80/0xa0
[ 88.639224][ T3560] ? string+0x204/0x290
[ 88.643400][ T3560] end_report+0x6d/0xf0
[ 88.647565][ T3560] kasan_report+0x102/0x130
[ 88.652081][ T3560] ? string+0x204/0x290
[ 88.656244][ T3560] string+0x204/0x290
[ 88.660238][ T3560] vsnprintf+0x10db/0x1c20
[ 88.664686][ T3560] add_uevent_var+0x1cd/0x460
[ 88.669382][ T3560] ? dev_attr_show+0x50/0xb0
[ 88.673983][ T3560] ? kobject_uevent_env+0x890/0x890
[ 88.679338][ T3560] ? __mutex_lock_common+0x435/0x2400
[ 88.684755][ T3560] rc_dev_uevent+0x15b/0x190
[ 88.689376][ T3560] dev_uevent+0x4d6/0x740
[ 88.693719][ T3560] ? dev_uevent_name+0xa0/0xa0
[ 88.698502][ T3560] uevent_show+0x1b1/0x320
[ 88.702943][ T3560] dev_attr_show+0x50/0xb0
[ 88.707373][ T3560] ? device_get_ownership+0xa0/0xa0
[ 88.712585][ T3560] sysfs_kf_seq_show+0x316/0x4c0
[ 88.717545][ T3560] seq_read_iter+0x460/0xc50
[ 88.722184][ T3560] vfs_read+0x75e/0xd50
[ 88.726354][ T3560] ? kernel_read+0x1e0/0x1e0
[ 88.730981][ T3560] ? __fdget_pos+0x2c6/0x370
[ 88.735632][ T3560] ksys_read+0x153/0x260
[ 88.739882][ T3560] ? vfs_write+0xd70/0xd70
[ 88.744325][ T3560] ? lockdep_hardirqs_on+0x94/0x140
[ 88.749557][ T3560] do_syscall_64+0x4c/0xa0
[ 88.754023][ T3560] ? clear_bhb_loop+0x30/0x80
[ 88.758728][ T3560] ? clear_bhb_loop+0x30/0x80
[ 88.763411][ T3560] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 88.769321][ T3560] RIP: 0033:0x7f1e1c134407
[ 88.773855][ T3560] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 88.793469][ T3560] RSP: 002b:00007ffc8a481520 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 88.801891][ T3560] RAX: ffffffffffffffda RBX: 00007f1e1c046880 RCX: 00007f1e1c134407
[ 88.809885][ T3560] RDX: 0000000000001000 RSI: 000055c67fc0d550 RDI: 000000000000000c
[ 88.817946][ T3560] RBP: 00007f1e1c27cff0 R08: 0000000000000000 R09: 0000000000000000
[ 88.825938][ T3560] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 88.833916][ T3560] R13: 00007f1e1c27cea0 R14: 0000000000000000 R15: 000055c67fc295d0
[ 88.841893][ T3560]
[ 88.845233][ T3560] Kernel Offset: disabled
[ 88.849596][ T3560] Rebooting in 86400 seconds..