Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts.
2026/08/10 17:43:17 parsed 1 programs
[ 79.271832][ T28] kauditd_printk_skb: 1 callbacks suppressed
[ 79.271855][ T28] audit: type=1400 audit(1786383797.056:77): avc: denied { node_bind } for pid=2979 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 79.299397][ T28] audit: type=1400 audit(1786383797.056:78): avc: denied { module_request } for pid=2979 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
2026/08/10 17:43:17 serving rpc on tcp://34961
[ 82.330837][ T28] audit: type=1400 audit(1786383800.106:79): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 82.355562][ T28] audit: type=1400 audit(1786383800.136:80): avc: denied { mount } for pid=2989 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 82.366680][ T2989] cgroup: Unknown subsys name 'net'
[ 82.387320][ T28] audit: type=1400 audit(1786383800.176:81): avc: denied { unmount } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 82.496413][ T2989] cgroup: Unknown subsys name 'cpuset'
[ 82.505244][ T2989] cgroup: Unknown subsys name 'rlimit'
[ 82.690657][ T28] audit: type=1400 audit(1786383800.466:82): avc: denied { setattr } for pid=2989 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 82.714943][ T28] audit: type=1400 audit(1786383800.476:83): avc: denied { create } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 82.735998][ T28] audit: type=1400 audit(1786383800.476:84): avc: denied { write } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 82.756833][ T28] audit: type=1400 audit(1786383800.476:85): avc: denied { read } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 82.785170][ T28] audit: type=1400 audit(1786383800.566:86): avc: denied { sys_module } for pid=2989 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 82.917116][ T2993] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 82.957659][ T2989] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 84.540666][ T28] kauditd_printk_skb: 8 callbacks suppressed
[ 84.540689][ T28] audit: type=1400 audit(1786383802.316:95): avc: denied { execmem } for pid=2995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 84.589204][ T28] audit: type=1400 audit(1786383802.356:96): avc: denied { read } for pid=2996 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 84.612935][ T28] audit: type=1400 audit(1786383802.356:97): avc: denied { open } for pid=2996 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 84.672693][ T28] audit: type=1400 audit(1786383802.356:98): avc: denied { mounton } for pid=2996 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 84.694823][ T28] audit: type=1400 audit(1786383802.446:99): avc: denied { mounton } for pid=2996 comm="syz-executor" path="/root/syzkaller.PcuikW/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 84.719478][ T28] audit: type=1400 audit(1786383802.446:100): avc: denied { mount } for pid=2996 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 84.741883][ T28] audit: type=1400 audit(1786383802.446:101): avc: denied { mounton } for pid=2996 comm="syz-executor" path="/root/syzkaller.PcuikW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 84.767536][ T28] audit: type=1400 audit(1786383802.446:102): avc: denied { mount } for pid=2996 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 84.789769][ T28] audit: type=1400 audit(1786383802.446:103): avc: denied { mounton } for pid=2996 comm="syz-executor" path="/root/syzkaller.PcuikW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 84.816842][ T28] audit: type=1400 audit(1786383802.446:104): avc: denied { mounton } for pid=2996 comm="syz-executor" path="/root/syzkaller.PcuikW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 84.882229][ T2996] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 98.413835][ T28] kauditd_printk_skb: 6 callbacks suppressed
[ 98.413858][ T28] audit: type=1400 audit(1786383816.196:111): avc: denied { mount } for pid=3003 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 98.441859][ T28] audit: type=1400 audit(1786383816.196:112): avc: denied { mounton } for pid=3003 comm="syz-executor" path="/root/syzkaller.DHHh1C/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 98.591116][ T3003] syz-executor (3003) used greatest stack depth: 22664 bytes left
[ 100.486140][ T28] audit: type=1401 audit(1786383818.266:113): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 100.695705][ T28] audit: type=1400 audit(1786383818.476:114): avc: denied { create } for pid=3501 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 100.748644][ T28] audit: type=1400 audit(1786383818.526:115): avc: denied { create } for pid=3502 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 100.768711][ T28] audit: type=1400 audit(1786383818.526:116): avc: denied { sys_admin } for pid=3502 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 100.819007][ T28] audit: type=1400 audit(1786383818.596:117): avc: denied { sys_chroot } for pid=3503 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 101.002578][ T28] audit: type=1400 audit(1786383818.786:118): avc: denied { create } for pid=3509 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 101.023032][ T28] audit: type=1400 audit(1786383818.786:119): avc: denied { setattr } for pid=3509 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 101.045929][ T28] audit: type=1400 audit(1786383818.786:120): avc: denied { read write } for pid=3509 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
2026/08/10 17:43:39 executed programs: 0
2026/08/10 17:43:52 executed programs: 2
[ 115.168786][ T28] kauditd_printk_skb: 1 callbacks suppressed
[ 115.168809][ T28] audit: type=1400 audit(1786383832.946:122): avc: denied { read write } for pid=3975 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 115.210028][ T28] audit: type=1400 audit(1786383832.946:123): avc: denied { open } for pid=3975 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 115.239079][ T28] audit: type=1400 audit(1786383832.946:124): avc: denied { ioctl } for pid=3975 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 115.451269][ T38] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 115.613608][ T38] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 115.623653][ T38] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 115.634038][ T38] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 115.647069][ T38] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 115.656441][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 115.664549][ T38] usb 4-1: Product: syz
[ 115.668756][ T38] usb 4-1: Manufacturer: syz
[ 115.673430][ T38] usb 4-1: SerialNumber: syz
[ 115.686027][ T3975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 115.693592][ T3975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 115.700823][ T3975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 115.913480][ T38] redrat3 4-1:1.0: Problem fetching firmware ID
[ 115.929812][ T38] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 116.001374][ T38] rc_core: IR keymap rc-hauppauge not found
[ 116.011186][ T38] Registered IR keymap rc-empty
[ 116.018592][ T38] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0
[ 116.032292][ T38] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input5
[ 116.048270][ T38] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 116.057530][ T38] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 116.066226][ T38] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 116.078577][ T38] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 116.094171][ T38] usb 4-1: USB disconnect, device number 2
[ 116.671061][ T38] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 116.823167][ T38] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 116.833097][ T38] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 116.843021][ T38] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 116.854845][ T38] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 116.863980][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 116.872034][ T38] usb 4-1: Product: syz
[ 116.876198][ T38] usb 4-1: Manufacturer: syz
[ 116.880794][ T38] usb 4-1: SerialNumber: syz
[ 116.889107][ T3982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 116.896769][ T3982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 116.904358][ T3982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 117.116319][ T38] redrat3 4-1:1.0: Problem fetching firmware ID
[ 117.125550][ T38] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 117.180974][ T38] rc_core: IR keymap rc-hauppauge not found
[ 117.186918][ T38] Registered IR keymap rc-empty
[ 117.193295][ T38] rc rc1: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc1
[ 117.209790][ T38] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc1/input6
[ 117.224806][ T38] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 117.233866][ T38] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 117.242592][ T38] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 117.253328][ T38] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 117.265684][ T38] usb 4-1: USB disconnect, device number 3
[ 117.870955][ T38] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 118.022435][ T38] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 118.032448][ T38] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 118.042417][ T38] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 118.053974][ T38] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 118.063150][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 118.071200][ T38] usb 4-1: Product: syz
[ 118.075372][ T38] usb 4-1: Manufacturer: syz
[ 118.079968][ T38] usb 4-1: SerialNumber: syz
[ 118.087821][ T3985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 118.095942][ T3985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 118.103493][ T3985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 118.315650][ T38] redrat3 4-1:1.0: Problem fetching firmware ID
[ 118.324495][ T38] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 118.380966][ T38] rc_core: IR keymap rc-hauppauge not found
[ 118.386929][ T38] Registered IR keymap rc-empty
[ 118.393413][ T38] rc rc2: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc2
[ 118.409915][ T38] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc2/input7
[ 118.424076][ T38] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 118.433134][ T38] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 118.441886][ T38] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 118.453827][ T38] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 118.465915][ T38] usb 4-1: USB disconnect, device number 4
[ 118.479678][ T2858] ==================================================================
[ 118.487798][ T2858] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[ 118.494821][ T2858] Read of size 1 at addr ffff88811e7a3758 by task udevd/2858
[ 118.502201][ T2858]
[ 118.504551][ T2858] CPU: 0 UID: 0 PID: 2858 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy)
[ 118.504578][ T2858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 118.504600][ T2858] Call Trace:
[ 118.504610][ T2858]
[ 118.504619][ T2858] dump_stack_lvl+0x100/0x190
[ 118.504656][ T2858] print_report+0x13d/0x4b0
[ 118.504690][ T2858] ? __virt_addr_valid+0x239/0x430
[ 118.504722][ T2858] ? string+0x471/0x4d0
[ 118.504757][ T2858] kasan_report+0xdf/0x1c0
[ 118.504787][ T2858] ? string+0x471/0x4d0
[ 118.504825][ T2858] string+0x471/0x4d0
[ 118.504861][ T2858] ? __pfx_string+0x10/0x10
[ 118.504900][ T2858] vsnprintf+0x422/0x1300
[ 118.504927][ T2858] ? __pfx_vsnprintf+0x10/0x10
[ 118.504949][ T2858] ? ksys_read+0x12a/0x250
[ 118.504981][ T2858] ? do_syscall_64+0x10b/0x7f0
[ 118.505005][ T2858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.505032][ T2858] add_uevent_var+0x183/0x3a0
[ 118.505067][ T2858] ? __pfx_add_uevent_var+0x10/0x10
[ 118.505105][ T2858] ? rc_dev_uevent+0x12d/0x1c0
[ 118.505141][ T2858] ? __pfx_rc_dev_uevent+0x10/0x10
[ 118.505175][ T2858] rc_dev_uevent+0x17d/0x1c0
[ 118.505210][ T2858] dev_uevent+0x2f1/0x870
[ 118.505243][ T2858] ? __pfx_dev_uevent+0x10/0x10
[ 118.505274][ T2858] ? kasan_save_track+0x14/0x30
[ 118.505300][ T2858] ? __kasan_kmalloc+0x8f/0xa0
[ 118.505331][ T2858] ? __kmalloc_cache_noprof+0x35e/0x670
[ 118.505364][ T2858] ? uevent_show+0x166/0x3a0
[ 118.505388][ T2858] ? __pfx_uevent_show+0x10/0x10
[ 118.505411][ T2858] uevent_show+0x1ca/0x3a0
[ 118.505436][ T2858] ? __pfx_uevent_show+0x10/0x10
[ 118.505458][ T2858] dev_attr_show+0x52/0xa0
[ 118.505490][ T2858] ? __pfx_dev_attr_show+0x10/0x10
[ 118.505520][ T2858] sysfs_kf_seq_show+0x217/0x3f0
[ 118.505547][ T2858] seq_read_iter+0x32f/0x1270
[ 118.505585][ T2858] ? cp_new_stat+0x484/0x5c0
[ 118.505612][ T2858] kernfs_fop_read_iter+0x46c/0x610
[ 118.505648][ T2858] ? security_file_permission+0x21/0x80
[ 118.505673][ T2858] ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 118.505710][ T2858] vfs_read+0x82e/0xb40
[ 118.505743][ T2858] ? __pfx_vfs_read+0x10/0x10
[ 118.505775][ T2858] ? __pfx___do_sys_newfstat+0x10/0x10
[ 118.505807][ T2858] ksys_read+0x12a/0x250
[ 118.505839][ T2858] ? __pfx_ksys_read+0x10/0x10
[ 118.505875][ T2858] do_syscall_64+0x10b/0x7f0
[ 118.505900][ T2858] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.505924][ T2858] RIP: 0033:0x7faa9cbe4407
[ 118.505946][ T2858] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 118.505971][ T2858] RSP: 002b:00007ffe51d5f320 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 118.505992][ T2858] RAX: ffffffffffffffda RBX: 00007faa9caf6880 RCX: 00007faa9cbe4407
[ 118.506007][ T2858] RDX: 0000000000001000 RSI: 000055f20ebf9220 RDI: 000000000000000c
[ 118.506023][ T2858] RBP: 00007faa9cd2cff0 R08: 0000000000000000 R09: 0000000000000000
[ 118.506037][ T2858] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 118.506051][ T2858] R13: 00007faa9cd2cea0 R14: 0000000000000000 R15: 000055f20ebfc490
[ 118.506073][ T2858]
[ 118.506080][ T2858]
[ 118.809959][ T2858] Allocated by task 38:
[ 118.814130][ T2858] kasan_save_stack+0x30/0x50
[ 118.818828][ T2858] kasan_save_track+0x14/0x30
[ 118.823523][ T2858] __kasan_kmalloc+0x8f/0xa0
[ 118.828156][ T2858] __kmalloc_cache_noprof+0x35e/0x670
[ 118.833552][ T2858] redrat3_dev_probe+0x326/0x2b50
[ 118.838605][ T2858] usb_probe_interface+0x386/0x9b0
[ 118.843737][ T2858] really_probe+0x241/0xa60
[ 118.848255][ T2858] __driver_probe_device+0x20e/0x450
[ 118.853555][ T2858] driver_probe_device+0x4a/0x140
[ 118.858593][ T2858] __device_attach_driver+0x1df/0x320
[ 118.864001][ T2858] bus_for_each_drv+0x159/0x1e0
[ 118.868913][ T2858] __device_attach+0x1e4/0x4d0
[ 118.873712][ T2858] device_initial_probe+0xaf/0xd0
[ 118.878755][ T2858] bus_probe_device+0x64/0x160
[ 118.883531][ T2858] device_add+0x121d/0x1970
[ 118.888053][ T2858] usb_set_configuration+0xd97/0x1c60
[ 118.893444][ T2858] usb_generic_driver_probe+0xa1/0xe0
[ 118.898827][ T2858] usb_probe_device+0xef/0x400
[ 118.903609][ T2858] really_probe+0x241/0xa60
[ 118.908126][ T2858] __driver_probe_device+0x20e/0x450
[ 118.913422][ T2858] driver_probe_device+0x4a/0x140
[ 118.918566][ T2858] __device_attach_driver+0x1df/0x320
[ 118.923955][ T2858] bus_for_each_drv+0x159/0x1e0
[ 118.928835][ T2858] __device_attach+0x1e4/0x4d0
[ 118.933619][ T2858] device_initial_probe+0xaf/0xd0
[ 118.938659][ T2858] bus_probe_device+0x64/0x160
[ 118.943452][ T2858] device_add+0x121d/0x1970
[ 118.947975][ T2858] usb_new_device.cold+0x685/0x115c
[ 118.953192][ T2858] hub_event+0x314d/0x4af0
[ 118.957671][ T2858] process_one_work+0xa23/0x1940
[ 118.962650][ T2858] worker_thread+0x5ef/0xe50
[ 118.967260][ T2858] kthread+0x370/0x450
[ 118.971345][ T2858] ret_from_fork+0x69a/0xc80
[ 118.975971][ T2858] ret_from_fork_asm+0x1a/0x30
[ 118.980778][ T2858]
[ 118.983104][ T2858] Freed by task 38:
[ 118.986912][ T2858] kasan_save_stack+0x30/0x50
[ 118.991602][ T2858] kasan_save_track+0x14/0x30
[ 118.996319][ T2858] kasan_save_free_info+0x3b/0x70
[ 119.001369][ T2858] __kasan_slab_free+0x43/0x70
[ 119.006153][ T2858] kfree+0x20c/0x650
[ 119.010062][ T2858] redrat3_dev_probe+0x107a/0x2b50
[ 119.015194][ T2858] usb_probe_interface+0x386/0x9b0
[ 119.020325][ T2858] really_probe+0x241/0xa60
[ 119.024843][ T2858] __driver_probe_device+0x20e/0x450
[ 119.030174][ T2858] driver_probe_device+0x4a/0x140
[ 119.035213][ T2858] __device_attach_driver+0x1df/0x320
[ 119.040599][ T2858] bus_for_each_drv+0x159/0x1e0
[ 119.045480][ T2858] __device_attach+0x1e4/0x4d0
[ 119.050434][ T2858] device_initial_probe+0xaf/0xd0
[ 119.055490][ T2858] bus_probe_device+0x64/0x160
[ 119.060367][ T2858] device_add+0x121d/0x1970
[ 119.064900][ T2858] usb_set_configuration+0xd97/0x1c60
[ 119.070311][ T2858] usb_generic_driver_probe+0xa1/0xe0
[ 119.075698][ T2858] usb_probe_device+0xef/0x400
[ 119.080484][ T2858] really_probe+0x241/0xa60
[ 119.084997][ T2858] __driver_probe_device+0x20e/0x450
[ 119.090409][ T2858] driver_probe_device+0x4a/0x140
[ 119.095451][ T2858] __device_attach_driver+0x1df/0x320
[ 119.100858][ T2858] bus_for_each_drv+0x159/0x1e0
[ 119.105788][ T2858] __device_attach+0x1e4/0x4d0
[ 119.110565][ T2858] device_initial_probe+0xaf/0xd0
[ 119.115606][ T2858] bus_probe_device+0x64/0x160
[ 119.120379][ T2858] device_add+0x121d/0x1970
[ 119.124901][ T2858] usb_new_device.cold+0x685/0x115c
[ 119.130119][ T2858] hub_event+0x314d/0x4af0
[ 119.134554][ T2858] process_one_work+0xa23/0x1940
[ 119.139507][ T2858] worker_thread+0x5ef/0xe50
[ 119.144113][ T2858] kthread+0x370/0x450
[ 119.148219][ T2858] ret_from_fork+0x69a/0xc80
[ 119.152836][ T2858] ret_from_fork_asm+0x1a/0x30
[ 119.157612][ T2858]
[ 119.159954][ T2858] The buggy address belongs to the object at ffff88811e7a3000
[ 119.159954][ T2858] which belongs to the cache kmalloc-2k of size 2048
[ 119.174016][ T2858] The buggy address is located 1880 bytes inside of
[ 119.174016][ T2858] freed 2048-byte region [ffff88811e7a3000, ffff88811e7a3800)
[ 119.187995][ T2858]
[ 119.190324][ T2858] The buggy address belongs to the physical page:
[ 119.196747][ T2858] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e7a0
[ 119.205608][ T2858] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 119.214124][ T2858] flags: 0x200000000000040(head|node=0|zone=2)
[ 119.220296][ T2858] page_type: f5(slab)
[ 119.224293][ T2858] raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 119.232898][ T2858] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[ 119.241497][ T2858] head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 119.250177][ T2858] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[ 119.258885][ T2858] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 119.267573][ T2858] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 119.276253][ T2858] page dumped because: kasan: bad access detected
[ 119.282686][ T2858] page_owner tracks the page as allocated
[ 119.288419][ T2858] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2847, tgid 2847 (klogd), ts 117281756853, free_ts 117279979335
[ 119.309363][ T2858] post_alloc_hook+0xfd/0x120
[ 119.314059][ T2858] get_page_from_freelist+0xf25/0x3400
[ 119.319534][ T2858] __alloc_frozen_pages_noprof+0x28f/0x2b90
[ 119.325637][ T2858] new_slab+0xa2/0x670
[ 119.329724][ T2858] refill_objects+0xe3/0x410
[ 119.334337][ T2858] __pcs_replace_empty_main+0x376/0x680
[ 119.339903][ T2858] __kmalloc_cache_noprof+0x50e/0x670
[ 119.345297][ T2858] syslog_print+0xf8/0x620
[ 119.349735][ T2858] do_syslog+0x5bd/0x6d0
[ 119.353998][ T2858] __x64_sys_syslog+0x74/0xb0
[ 119.358697][ T2858] do_syscall_64+0x10b/0x7f0
[ 119.363302][ T2858] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.369209][ T2858] page last free pid 2858 tgid 2858 stack trace:
[ 119.375534][ T2858] __free_frozen_pages+0x716/0xf50
[ 119.380662][ T2858] qlist_free_all+0x47/0xf0
[ 119.385201][ T2858] kasan_quarantine_reduce+0x1a0/0x1f0
[ 119.390681][ T2858] __kasan_slab_alloc+0x4e/0x70
[ 119.395551][ T2858] kmem_cache_alloc_lru_noprof+0x2de/0x640
[ 119.401383][ T2858] __d_alloc+0x35/0xa50
[ 119.405559][ T2858] d_alloc_parallel+0x105/0x14b0
[ 119.410517][ T2858] __lookup_slow+0x98/0x320
[ 119.415038][ T2858] lookup_slow+0x50/0x70
[ 119.419306][ T2858] link_path_walk+0x1377/0x1cc0
[ 119.424180][ T2858] path_openat+0x1c9/0x4280
[ 119.428689][ T2858] do_file_open+0x20e/0x430
[ 119.433195][ T2858] do_sys_openat2+0x10f/0x1e0
[ 119.437882][ T2858] __x64_sys_openat+0x12d/0x210
[ 119.442742][ T2858] do_syscall_64+0x10b/0x7f0
[ 119.447344][ T2858] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.453262][ T2858]
[ 119.455589][ T2858] Memory state around the buggy address:
[ 119.461220][ T2858] ffff88811e7a3600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 119.469284][ T2858] ffff88811e7a3680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 119.477348][ T2858] >ffff88811e7a3700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 119.485426][ T2858] ^
[ 119.492368][ T2858] ffff88811e7a3780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 119.500436][ T2858] ffff88811e7a3800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 119.508500][ T2858] ==================================================================
[ 119.518094][ T2858] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 119.525349][ T2858] CPU: 0 UID: 0 PID: 2858 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy)
[ 119.534249][ T2858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 119.544343][ T2858] Call Trace:
[ 119.547658][ T2858]
[ 119.550631][ T2858] dump_stack_lvl+0x100/0x190
[ 119.555371][ T2858] vpanic+0x552/0x970
[ 119.559408][ T2858] ? __pfx_vpanic+0x10/0x10
[ 119.563969][ T2858] ? string+0x471/0x4d0
[ 119.568199][ T2858] panic+0xd1/0xe0
[ 119.571994][ T2858] ? __pfx_panic+0x10/0x10
[ 119.576479][ T2858] ? string+0x471/0x4d0
[ 119.580729][ T2858] ? preempt_schedule_common+0x42/0xc0
[ 119.586257][ T2858] ? check_panic_on_warn+0x1f/0x90
[ 119.591422][ T2858] check_panic_on_warn.cold+0x19/0x34
[ 119.596818][ T2858] end_report.part.0+0x3a/0x90
[ 119.601609][ T2858] kasan_report.cold+0xe/0x18
[ 119.606310][ T2858] ? string+0x471/0x4d0
[ 119.610491][ T2858] string+0x471/0x4d0
[ 119.614501][ T2858] ? __pfx_string+0x10/0x10
[ 119.619032][ T2858] vsnprintf+0x422/0x1300
[ 119.623378][ T2858] ? __pfx_vsnprintf+0x10/0x10
[ 119.628171][ T2858] ? ksys_read+0x12a/0x250
[ 119.632630][ T2858] ? do_syscall_64+0x10b/0x7f0
[ 119.637407][ T2858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.643493][ T2858] add_uevent_var+0x183/0x3a0
[ 119.648193][ T2858] ? __pfx_add_uevent_var+0x10/0x10
[ 119.653421][ T2858] ? rc_dev_uevent+0x12d/0x1c0
[ 119.658219][ T2858] ? __pfx_rc_dev_uevent+0x10/0x10
[ 119.663376][ T2858] rc_dev_uevent+0x17d/0x1c0
[ 119.668011][ T2858] dev_uevent+0x2f1/0x870
[ 119.672407][ T2858] ? __pfx_dev_uevent+0x10/0x10
[ 119.677291][ T2858] ? kasan_save_track+0x14/0x30
[ 119.682171][ T2858] ? __kasan_kmalloc+0x8f/0xa0
[ 119.687094][ T2858] ? __kmalloc_cache_noprof+0x35e/0x670
[ 119.692675][ T2858] ? uevent_show+0x166/0x3a0
[ 119.697289][ T2858] ? __pfx_uevent_show+0x10/0x10
[ 119.702245][ T2858] uevent_show+0x1ca/0x3a0
[ 119.706684][ T2858] ? __pfx_uevent_show+0x10/0x10
[ 119.711672][ T2858] dev_attr_show+0x52/0xa0
[ 119.716128][ T2858] ? __pfx_dev_attr_show+0x10/0x10
[ 119.721267][ T2858] sysfs_kf_seq_show+0x217/0x3f0
[ 119.726240][ T2858] seq_read_iter+0x32f/0x1270
[ 119.731071][ T2858] ? cp_new_stat+0x484/0x5c0
[ 119.735685][ T2858] kernfs_fop_read_iter+0x46c/0x610
[ 119.740990][ T2858] ? security_file_permission+0x21/0x80
[ 119.746589][ T2858] ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 119.752344][ T2858] vfs_read+0x82e/0xb40
[ 119.756524][ T2858] ? __pfx_vfs_read+0x10/0x10
[ 119.761241][ T2858] ? __pfx___do_sys_newfstat+0x10/0x10
[ 119.766729][ T2858] ksys_read+0x12a/0x250
[ 119.771003][ T2858] ? __pfx_ksys_read+0x10/0x10
[ 119.775838][ T2858] do_syscall_64+0x10b/0x7f0
[ 119.780447][ T2858] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.786370][ T2858] RIP: 0033:0x7faa9cbe4407
[ 119.790798][ T2858] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 119.810442][ T2858] RSP: 002b:00007ffe51d5f320 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 119.818878][ T2858] RAX: ffffffffffffffda RBX: 00007faa9caf6880 RCX: 00007faa9cbe4407
[ 119.826873][ T2858] RDX: 0000000000001000 RSI: 000055f20ebf9220 RDI: 000000000000000c
[ 119.834854][ T2858] RBP: 00007faa9cd2cff0 R08: 0000000000000000 R09: 0000000000000000
[ 119.842832][ T2858] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 119.850809][ T2858] R13: 00007faa9cd2cea0 R14: 0000000000000000 R15: 000055f20ebfc490
[ 119.858832][ T2858]
[ 119.862449][ T2858] Kernel Offset: disabled
[ 119.866791][ T2858] Rebooting in 86400 seconds..