Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. 2026/08/10 16:43:50 parsed 1 programs 2026/08/10 16:43:50 serving rpc on tcp://46411 [ 48.722846][ T29] audit: type=1400 audit(1786380230.516:77): avc: denied { node_bind } for pid=2976 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 48.743653][ T29] audit: type=1400 audit(1786380230.516:78): avc: denied { module_request } for pid=2976 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 50.640292][ T29] audit: type=1400 audit(1786380232.436:79): avc: denied { mounton } for pid=2986 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.663991][ T29] audit: type=1400 audit(1786380232.456:80): avc: denied { mount } for pid=2986 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.668073][ T2986] cgroup: Unknown subsys name 'net' [ 50.692862][ T29] audit: type=1400 audit(1786380232.486:81): avc: denied { unmount } for pid=2986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.797831][ T2986] cgroup: Unknown subsys name 'cpuset' [ 50.806144][ T2986] cgroup: Unknown subsys name 'rlimit' [ 50.976612][ T29] audit: type=1400 audit(1786380232.776:82): avc: denied { setattr } for pid=2986 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.999981][ T29] audit: type=1400 audit(1786380232.776:83): avc: denied { create } for pid=2986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.020857][ T29] audit: type=1400 audit(1786380232.776:84): avc: denied { write } for pid=2986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.041557][ T29] audit: type=1400 audit(1786380232.776:85): avc: denied { read } for pid=2986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.062147][ T29] audit: type=1400 audit(1786380232.806:86): avc: denied { sys_module } for pid=2986 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 51.138600][ T2990] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 51.188988][ T2986] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.697059][ T2992] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.321001][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 54.321021][ T29] audit: type=1400 audit(1786380236.116:113): avc: denied { create } for pid=3045 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 54.352262][ T29] audit: type=1400 audit(1786380236.116:114): avc: denied { setattr } for pid=3045 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 54.376651][ T29] audit: type=1400 audit(1786380236.116:115): avc: denied { read write } for pid=3045 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 54.404733][ T29] audit: type=1400 audit(1786380236.116:116): avc: denied { open } for pid=3045 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1 [ 64.251018][ T29] audit: type=1400 audit(1786380246.046:117): avc: denied { create } for pid=3500 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 64.271394][ T29] audit: type=1400 audit(1786380246.076:118): avc: denied { sys_admin } for pid=3500 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.303795][ T29] audit: type=1400 audit(1786380246.096:119): avc: denied { sys_chroot } for pid=3501 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 64.750440][ T29] audit: type=1401 audit(1786380246.546:120): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 64.850644][ T29] audit: type=1400 audit(1786380246.646:121): avc: denied { create } for pid=3516 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2026/08/10 16:44:06 executed programs: 0 2026/08/10 16:44:16 executed programs: 2 [ 75.084783][ T29] audit: type=1400 audit(1786380256.876:122): avc: denied { read write } for pid=3972 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.112793][ T29] audit: type=1400 audit(1786380256.876:123): avc: denied { open } for pid=3972 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.136064][ T29] audit: type=1400 audit(1786380256.876:124): avc: denied { ioctl } for pid=3972 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.325462][ T28] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.477138][ T28] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 75.487105][ T28] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 75.497338][ T28] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 75.508922][ T28] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 75.518013][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.526019][ T28] usb 4-1: Product: syz [ 75.530180][ T28] usb 4-1: Manufacturer: syz [ 75.534753][ T28] usb 4-1: SerialNumber: syz [ 75.544841][ T3972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.552166][ T3972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.559384][ T3972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.771935][ T28] redrat3 4-1:1.0: Problem fetching firmware ID [ 75.784136][ T28] redrat3 4-1:1.0: Failed to read timeout from hardware [ 75.835195][ T28] rc_core: IR keymap rc-hauppauge not found [ 75.841459][ T28] Registered IR keymap rc-empty [ 75.850080][ T28] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0 [ 75.863272][ T28] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input5 [ 75.878235][ T28] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 75.887159][ T28] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 75.895830][ T28] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 75.908028][ T28] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5 [ 75.920619][ T28] usb 4-1: USB disconnect, device number 2 [ 76.525162][ T119] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.677260][ T119] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 76.687119][ T119] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 76.696957][ T119] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 76.708426][ T119] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 76.717487][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.725491][ T119] usb 4-1: Product: syz [ 76.729632][ T119] usb 4-1: Manufacturer: syz [ 76.734202][ T119] usb 4-1: SerialNumber: syz [ 76.742053][ T3978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.749533][ T3978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.756750][ T3978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.969091][ T119] redrat3 4-1:1.0: Problem fetching firmware ID [ 76.977216][ T119] redrat3 4-1:1.0: Failed to read timeout from hardware [ 77.035186][ T119] rc_core: IR keymap rc-hauppauge not found [ 77.041111][ T119] Registered IR keymap rc-empty [ 77.047316][ T119] rc rc1: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc1 [ 77.060440][ T119] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc1/input6 [ 77.075331][ T119] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 77.084276][ T119] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 77.092984][ T119] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 77.103686][ T119] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5 [ 77.115697][ T119] usb 4-1: USB disconnect, device number 3 [ 77.123688][ T2855] ================================================================== [ 77.131751][ T2855] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 77.138701][ T2855] Read of size 1 at addr ffff88811df36758 by task udevd/2855 [ 77.146048][ T2855] [ 77.148368][ T2855] CPU: 1 UID: 0 PID: 2855 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 77.148386][ T2855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.148401][ T2855] Call Trace: [ 77.148409][ T2855] [ 77.148414][ T2855] dump_stack_lvl+0x100/0x190 [ 77.148441][ T2855] print_report+0x13d/0x4b0 [ 77.148462][ T2855] ? __virt_addr_valid+0x239/0x430 [ 77.148483][ T2855] ? string+0x471/0x4d0 [ 77.148504][ T2855] kasan_report+0xdf/0x1c0 [ 77.148523][ T2855] ? string+0x471/0x4d0 [ 77.148546][ T2855] string+0x471/0x4d0 [ 77.148568][ T2855] ? __pfx_string+0x10/0x10 [ 77.148592][ T2855] vsnprintf+0x422/0x1300 [ 77.148608][ T2855] ? __pfx_vsnprintf+0x10/0x10 [ 77.148622][ T2855] ? ksys_read+0x12a/0x250 [ 77.148647][ T2855] ? do_syscall_64+0x10b/0x7f0 [ 77.148662][ T2855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.148678][ T2855] add_uevent_var+0x183/0x3a0 [ 77.148700][ T2855] ? __pfx_add_uevent_var+0x10/0x10 [ 77.148723][ T2855] ? rc_dev_uevent+0x12d/0x1c0 [ 77.148746][ T2855] ? __pfx_rc_dev_uevent+0x10/0x10 [ 77.148767][ T2855] rc_dev_uevent+0x17d/0x1c0 [ 77.148788][ T2855] dev_uevent+0x2f1/0x870 [ 77.148809][ T2855] ? __pfx_dev_uevent+0x10/0x10 [ 77.148827][ T2855] ? kasan_save_track+0x14/0x30 [ 77.148844][ T2855] ? __kasan_kmalloc+0x8f/0xa0 [ 77.148860][ T2855] ? __kmalloc_cache_noprof+0x35e/0x670 [ 77.148895][ T2855] ? uevent_show+0x166/0x3a0 [ 77.148910][ T2855] ? __pfx_uevent_show+0x10/0x10 [ 77.148924][ T2855] uevent_show+0x1ca/0x3a0 [ 77.148939][ T2855] ? __pfx_uevent_show+0x10/0x10 [ 77.148953][ T2855] dev_attr_show+0x52/0xa0 [ 77.148972][ T2855] ? __pfx_dev_attr_show+0x10/0x10 [ 77.148991][ T2855] sysfs_kf_seq_show+0x217/0x3f0 [ 77.149008][ T2855] seq_read_iter+0x32f/0x1270 [ 77.149029][ T2855] ? cp_new_stat+0x484/0x5c0 [ 77.149046][ T2855] kernfs_fop_read_iter+0x46c/0x610 [ 77.149068][ T2855] ? security_file_permission+0x21/0x80 [ 77.149084][ T2855] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 77.149107][ T2855] vfs_read+0x82e/0xb40 [ 77.149127][ T2855] ? __pfx_vfs_read+0x10/0x10 [ 77.149147][ T2855] ? __pfx___do_sys_newfstat+0x10/0x10 [ 77.149167][ T2855] ksys_read+0x12a/0x250 [ 77.149186][ T2855] ? __pfx_ksys_read+0x10/0x10 [ 77.149208][ T2855] do_syscall_64+0x10b/0x7f0 [ 77.149224][ T2855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.149238][ T2855] RIP: 0033:0x7f8e44dbf407 [ 77.149251][ T2855] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 77.149268][ T2855] RSP: 002b:00007ffd8bd1baf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 77.149282][ T2855] RAX: ffffffffffffffda RBX: 00007f8e44cd1880 RCX: 00007f8e44dbf407 [ 77.149292][ T2855] RDX: 0000000000001000 RSI: 0000559380022dd0 RDI: 000000000000000c [ 77.149301][ T2855] RBP: 00007f8e44f07ff0 R08: 0000000000000000 R09: 0000000000000000 [ 77.149310][ T2855] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 77.149318][ T2855] R13: 00007f8e44f07ea0 R14: 0000000000000000 R15: 000055937ffdd090 [ 77.149331][ T2855] [ 77.149336][ T2855] [ 77.451511][ T2855] Allocated by task 119: [ 77.455740][ T2855] kasan_save_stack+0x30/0x50 [ 77.460410][ T2855] kasan_save_track+0x14/0x30 [ 77.465071][ T2855] __kasan_kmalloc+0x8f/0xa0 [ 77.469657][ T2855] __kmalloc_cache_noprof+0x35e/0x670 [ 77.475012][ T2855] redrat3_dev_probe+0x326/0x2b50 [ 77.480043][ T2855] usb_probe_interface+0x386/0x9b0 [ 77.485143][ T2855] really_probe+0x241/0xa60 [ 77.489627][ T2855] __driver_probe_device+0x20e/0x450 [ 77.494893][ T2855] driver_probe_device+0x4a/0x140 [ 77.499898][ T2855] __device_attach_driver+0x1df/0x320 [ 77.505255][ T2855] bus_for_each_drv+0x159/0x1e0 [ 77.510094][ T2855] __device_attach+0x1e4/0x4d0 [ 77.514839][ T2855] device_initial_probe+0xaf/0xd0 [ 77.519845][ T2855] bus_probe_device+0x64/0x160 [ 77.524588][ T2855] device_add+0x121d/0x1970 [ 77.529080][ T2855] usb_set_configuration+0xd97/0x1c60 [ 77.534437][ T2855] usb_generic_driver_probe+0xa1/0xe0 [ 77.539789][ T2855] usb_probe_device+0xef/0x400 [ 77.544564][ T2855] really_probe+0x241/0xa60 [ 77.549072][ T2855] __driver_probe_device+0x20e/0x450 [ 77.554339][ T2855] driver_probe_device+0x4a/0x140 [ 77.559349][ T2855] __device_attach_driver+0x1df/0x320 [ 77.564713][ T2855] bus_for_each_drv+0x159/0x1e0 [ 77.569573][ T2855] __device_attach+0x1e4/0x4d0 [ 77.574329][ T2855] device_initial_probe+0xaf/0xd0 [ 77.579336][ T2855] bus_probe_device+0x64/0x160 [ 77.584083][ T2855] device_add+0x121d/0x1970 [ 77.588572][ T2855] usb_new_device.cold+0x685/0x115c [ 77.593761][ T2855] hub_event+0x314d/0x4af0 [ 77.598162][ T2855] process_one_work+0xa23/0x1940 [ 77.603083][ T2855] worker_thread+0x5ef/0xe50 [ 77.607654][ T2855] kthread+0x370/0x450 [ 77.611706][ T2855] ret_from_fork+0x69a/0xc80 [ 77.616281][ T2855] ret_from_fork_asm+0x1a/0x30 [ 77.621034][ T2855] [ 77.623351][ T2855] Freed by task 119: [ 77.627230][ T2855] kasan_save_stack+0x30/0x50 [ 77.631901][ T2855] kasan_save_track+0x14/0x30 [ 77.636575][ T2855] kasan_save_free_info+0x3b/0x70 [ 77.641592][ T2855] __kasan_slab_free+0x43/0x70 [ 77.646343][ T2855] kfree+0x20c/0x650 [ 77.650244][ T2855] redrat3_dev_probe+0x107a/0x2b50 [ 77.655349][ T2855] usb_probe_interface+0x386/0x9b0 [ 77.660451][ T2855] really_probe+0x241/0xa60 [ 77.664938][ T2855] __driver_probe_device+0x20e/0x450 [ 77.670209][ T2855] driver_probe_device+0x4a/0x140 [ 77.675220][ T2855] __device_attach_driver+0x1df/0x320 [ 77.680578][ T2855] bus_for_each_drv+0x159/0x1e0 [ 77.685422][ T2855] __device_attach+0x1e4/0x4d0 [ 77.690169][ T2855] device_initial_probe+0xaf/0xd0 [ 77.695195][ T2855] bus_probe_device+0x64/0x160 [ 77.699939][ T2855] device_add+0x121d/0x1970 [ 77.704426][ T2855] usb_set_configuration+0xd97/0x1c60 [ 77.709781][ T2855] usb_generic_driver_probe+0xa1/0xe0 [ 77.715137][ T2855] usb_probe_device+0xef/0x400 [ 77.719887][ T2855] really_probe+0x241/0xa60 [ 77.724374][ T2855] __driver_probe_device+0x20e/0x450 [ 77.729639][ T2855] driver_probe_device+0x4a/0x140 [ 77.734647][ T2855] __device_attach_driver+0x1df/0x320 [ 77.740001][ T2855] bus_for_each_drv+0x159/0x1e0 [ 77.744845][ T2855] __device_attach+0x1e4/0x4d0 [ 77.749601][ T2855] device_initial_probe+0xaf/0xd0 [ 77.754621][ T2855] bus_probe_device+0x64/0x160 [ 77.759372][ T2855] device_add+0x121d/0x1970 [ 77.763863][ T2855] usb_new_device.cold+0x685/0x115c [ 77.769049][ T2855] hub_event+0x314d/0x4af0 [ 77.773461][ T2855] process_one_work+0xa23/0x1940 [ 77.778391][ T2855] worker_thread+0x5ef/0xe50 [ 77.783101][ T2855] kthread+0x370/0x450 [ 77.787167][ T2855] ret_from_fork+0x69a/0xc80 [ 77.791752][ T2855] ret_from_fork_asm+0x1a/0x30 [ 77.796496][ T2855] [ 77.798800][ T2855] The buggy address belongs to the object at ffff88811df36000 [ 77.798800][ T2855] which belongs to the cache kmalloc-2k of size 2048 [ 77.812832][ T2855] The buggy address is located 1880 bytes inside of [ 77.812832][ T2855] freed 2048-byte region [ffff88811df36000, ffff88811df36800) [ 77.826803][ T2855] [ 77.829126][ T2855] The buggy address belongs to the physical page: [ 77.835532][ T2855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11df30 [ 77.844371][ T2855] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 77.852850][ T2855] flags: 0x200000000000040(head|node=0|zone=2) [ 77.858996][ T2855] page_type: f5(slab) [ 77.862962][ T2855] raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122 [ 77.871533][ T2855] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 77.880102][ T2855] head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122 [ 77.888755][ T2855] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 77.897406][ T2855] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 77.906068][ T2855] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 77.914724][ T2855] page dumped because: kasan: bad access detected [ 77.921123][ T2855] page_owner tracks the page as allocated [ 77.926818][ T2855] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2844, tgid 2844 (klogd), ts 75926961876, free_ts 74929119146 [ 77.947554][ T2855] post_alloc_hook+0xfd/0x120 [ 77.952251][ T2855] get_page_from_freelist+0xf25/0x3400 [ 77.957721][ T2855] __alloc_frozen_pages_noprof+0x28f/0x2b90 [ 77.963603][ T2855] new_slab+0xa2/0x670 [ 77.967659][ T2855] refill_objects+0xe3/0x410 [ 77.972235][ T2855] __pcs_replace_empty_main+0x376/0x680 [ 77.977791][ T2855] __kmalloc_cache_noprof+0x50e/0x670 [ 77.983154][ T2855] syslog_print+0xf8/0x620 [ 77.987557][ T2855] do_syslog+0x5bd/0x6d0 [ 77.991789][ T2855] __x64_sys_syslog+0x74/0xb0 [ 77.996452][ T2855] do_syscall_64+0x10b/0x7f0 [ 78.001029][ T2855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.006904][ T2855] page last free pid 3966 tgid 3966 stack trace: [ 78.013205][ T2855] __free_frozen_pages+0x716/0xf50 [ 78.018305][ T2855] qlist_free_all+0x47/0xf0 [ 78.022805][ T2855] kasan_quarantine_reduce+0x1a0/0x1f0 [ 78.028247][ T2855] __kasan_slab_alloc+0x4e/0x70 [ 78.033084][ T2855] kmem_cache_alloc_noprof+0x2e2/0x640 [ 78.038531][ T2855] do_getname+0x35/0x390 [ 78.042757][ T2855] user_statfs+0x8c/0x1a0 [ 78.047074][ T2855] __do_sys_statfs+0x8d/0x100 [ 78.051740][ T2855] do_syscall_64+0x10b/0x7f0 [ 78.056313][ T2855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.062187][ T2855] [ 78.064498][ T2855] Memory state around the buggy address: [ 78.070105][ T2855] ffff88811df36600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.078147][ T2855] ffff88811df36680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.086187][ T2855] >ffff88811df36700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.094226][ T2855] ^ [ 78.101142][ T2855] ffff88811df36780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.109183][ T2855] ffff88811df36800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.117233][ T2855] ================================================================== [ 78.125586][ T2855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.132791][ T2855] CPU: 1 UID: 0 PID: 2855 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 78.141656][ T2855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.151709][ T2855] Call Trace: [ 78.154973][ T2855] [ 78.157887][ T2855] dump_stack_lvl+0x100/0x190 [ 78.162554][ T2855] vpanic+0x552/0x970 [ 78.166519][ T2855] ? __pfx_vpanic+0x10/0x10 [ 78.171030][ T2855] ? string+0x471/0x4d0 [ 78.175182][ T2855] panic+0xd1/0xe0 [ 78.178903][ T2855] ? __pfx_panic+0x10/0x10 [ 78.183304][ T2855] ? string+0x471/0x4d0 [ 78.187458][ T2855] ? preempt_schedule_common+0x42/0xc0 [ 78.192915][ T2855] ? check_panic_on_warn+0x1f/0x90 [ 78.198044][ T2855] check_panic_on_warn.cold+0x19/0x34 [ 78.203401][ T2855] end_report.part.0+0x3a/0x90 [ 78.208151][ T2855] kasan_report.cold+0xe/0x18 [ 78.212815][ T2855] ? string+0x471/0x4d0 [ 78.216962][ T2855] string+0x471/0x4d0 [ 78.220937][ T2855] ? __pfx_string+0x10/0x10 [ 78.225434][ T2855] vsnprintf+0x422/0x1300 [ 78.229753][ T2855] ? __pfx_vsnprintf+0x10/0x10 [ 78.234502][ T2855] ? ksys_read+0x12a/0x250 [ 78.238904][ T2855] ? do_syscall_64+0x10b/0x7f0 [ 78.243652][ T2855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.249705][ T2855] add_uevent_var+0x183/0x3a0 [ 78.254375][ T2855] ? __pfx_add_uevent_var+0x10/0x10 [ 78.259564][ T2855] ? rc_dev_uevent+0x12d/0x1c0 [ 78.264317][ T2855] ? __pfx_rc_dev_uevent+0x10/0x10 [ 78.269419][ T2855] rc_dev_uevent+0x17d/0x1c0 [ 78.273997][ T2855] dev_uevent+0x2f1/0x870 [ 78.278316][ T2855] ? __pfx_dev_uevent+0x10/0x10 [ 78.283155][ T2855] ? kasan_save_track+0x14/0x30 [ 78.287994][ T2855] ? __kasan_kmalloc+0x8f/0xa0 [ 78.292744][ T2855] ? __kmalloc_cache_noprof+0x35e/0x670 [ 78.298289][ T2855] ? uevent_show+0x166/0x3a0 [ 78.302867][ T2855] ? __pfx_uevent_show+0x10/0x10 [ 78.307798][ T2855] uevent_show+0x1ca/0x3a0 [ 78.312216][ T2855] ? __pfx_uevent_show+0x10/0x10 [ 78.317153][ T2855] dev_attr_show+0x52/0xa0 [ 78.321568][ T2855] ? __pfx_dev_attr_show+0x10/0x10 [ 78.326671][ T2855] sysfs_kf_seq_show+0x217/0x3f0 [ 78.331615][ T2855] seq_read_iter+0x32f/0x1270 [ 78.336284][ T2855] ? cp_new_stat+0x484/0x5c0 [ 78.340873][ T2855] kernfs_fop_read_iter+0x46c/0x610 [ 78.346066][ T2855] ? security_file_permission+0x21/0x80 [ 78.351596][ T2855] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 78.357310][ T2855] vfs_read+0x82e/0xb40 [ 78.361458][ T2855] ? __pfx_vfs_read+0x10/0x10 [ 78.366122][ T2855] ? __pfx___do_sys_newfstat+0x10/0x10 [ 78.371571][ T2855] ksys_read+0x12a/0x250 [ 78.375803][ T2855] ? __pfx_ksys_read+0x10/0x10 [ 78.380561][ T2855] do_syscall_64+0x10b/0x7f0 [ 78.385138][ T2855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.391017][ T2855] RIP: 0033:0x7f8e44dbf407 [ 78.395413][ T2855] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 78.415023][ T2855] RSP: 002b:00007ffd8bd1baf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 78.423421][ T2855] RAX: ffffffffffffffda RBX: 00007f8e44cd1880 RCX: 00007f8e44dbf407 [ 78.431377][ T2855] RDX: 0000000000001000 RSI: 0000559380022dd0 RDI: 000000000000000c [ 78.439332][ T2855] RBP: 00007f8e44f07ff0 R08: 0000000000000000 R09: 0000000000000000 [ 78.447287][ T2855] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 78.455242][ T2855] R13: 00007f8e44f07ea0 R14: 0000000000000000 R15: 000055937ffdd090 [ 78.463225][ T2855] [ 78.466357][ T2855] Kernel Offset: disabled [ 78.470669][ T2855] Rebooting in 86400 seconds..