[ 30.419122][ T29] audit: type=1400 audit(1786250893.794:66): avc: denied { write } for pid=2924 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=474 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.448208][ T29] audit: type=1400 audit(1786250893.794:67): avc: denied { read } for pid=2927 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=474 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.471207][ T29] audit: type=1400 audit(1786250893.794:68): avc: denied { read open } for pid=2927 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=474 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.634265][ T29] audit: type=1400 audit(1786250894.004:69): avc: denied { write } for pid=2924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=473 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.752220][ T29] audit: type=1400 audit(1786250894.124:70): avc: denied { write } for pid=2938 comm="rm" name="hook-state" dev="tmpfs" ino=473 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 30.851703][ T29] audit: type=1400 audit(1786250894.224:71): avc: denied { search } for pid=2924 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 34.490252][ T29] audit: type=1400 audit(1786250897.864:72): avc: denied { transition } for pid=2947 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 34.512988][ T29] audit: type=1400 audit(1786250897.864:73): avc: denied { noatsecure } for pid=2947 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 34.533069][ T29] audit: type=1400 audit(1786250897.864:74): avc: denied { write } for pid=2947 comm="sh" path="pipe:[2420]" dev="pipefs" ino=2420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 34.555477][ T29] audit: type=1400 audit(1786250897.864:75): avc: denied { rlimitinh } for pid=2947 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts.
2026/08/09 04:48:32 parsed 1 programs
2026/08/09 04:48:32 serving rpc on tcp://43797
[ 49.415344][ T29] kauditd_printk_skb: 1 callbacks suppressed
[ 49.415366][ T29] audit: type=1400 audit(1786250912.784:77): avc: denied { node_bind } for pid=2979 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 49.442667][ T29] audit: type=1400 audit(1786250912.794:78): avc: denied { module_request } for pid=2979 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 51.744216][ T29] audit: type=1400 audit(1786250915.114:79): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 51.767861][ T29] audit: type=1400 audit(1786250915.144:80): avc: denied { mount } for pid=2989 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 51.771103][ T2989] cgroup: Unknown subsys name 'net'
[ 51.797734][ T29] audit: type=1400 audit(1786250915.174:81): avc: denied { unmount } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 51.918506][ T2989] cgroup: Unknown subsys name 'cpuset'
[ 51.926953][ T2989] cgroup: Unknown subsys name 'rlimit'
[ 52.086333][ T29] audit: type=1400 audit(1786250915.454:82): avc: denied { setattr } for pid=2989 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 52.109710][ T29] audit: type=1400 audit(1786250915.464:83): avc: denied { create } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 52.130550][ T29] audit: type=1400 audit(1786250915.464:84): avc: denied { write } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 52.151433][ T29] audit: type=1400 audit(1786250915.464:85): avc: denied { read } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 52.172135][ T29] audit: type=1400 audit(1786250915.484:86): avc: denied { sys_module } for pid=2989 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 52.265723][ T2994] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 52.322447][ T2989] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 54.051351][ T2996] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 54.704592][ T29] kauditd_printk_skb: 25 callbacks suppressed
[ 54.704608][ T29] audit: type=1400 audit(1786250918.074:112): avc: denied { create } for pid=3015 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 54.731196][ T29] audit: type=1400 audit(1786250918.084:113): avc: denied { setattr } for pid=3015 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 54.753727][ T29] audit: type=1400 audit(1786250918.084:114): avc: denied { read write } for pid=3015 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 54.782048][ T29] audit: type=1400 audit(1786250918.084:115): avc: denied { open } for pid=3015 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 54.846456][ T29] audit: type=1400 audit(1786250918.224:116): avc: denied { create } for pid=3018 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 55.754976][ T29] audit: type=1401 audit(1786250919.124:117): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 55.826391][ T29] audit: type=1400 audit(1786250919.194:118): avc: denied { create } for pid=3039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 55.866331][ T29] audit: type=1400 audit(1786250919.204:119): avc: denied { sys_admin } for pid=3039 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 55.906512][ T29] audit: type=1400 audit(1786250919.264:120): avc: denied { sys_chroot } for pid=3040 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 56.035932][ T29] audit: type=1400 audit(1786250919.404:121): avc: denied { create } for pid=3046 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 68.233857][ T3063] syz-executor (3063) used greatest stack depth: 21976 bytes left
2026/08/09 04:48:51 executed programs: 0
2026/08/09 04:49:03 executed programs: 2
[ 80.148934][ T29] audit: type=1400 audit(1786250943.524:122): avc: denied { read write } for pid=3975 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 80.178378][ T29] audit: type=1400 audit(1786250943.544:123): avc: denied { open } for pid=3975 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 80.202585][ T29] audit: type=1400 audit(1786250943.544:124): avc: denied { ioctl } for pid=3975 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 80.416595][ T3030] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 80.568536][ T3030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 80.578506][ T3030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 80.588779][ T3030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 80.600468][ T3030] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 80.609553][ T3030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 80.617580][ T3030] usb 4-1: Product: syz
[ 80.621775][ T3030] usb 4-1: Manufacturer: syz
[ 80.626411][ T3030] usb 4-1: SerialNumber: syz
[ 80.636418][ T3975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 80.643832][ T3975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 80.651065][ T3975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 80.863461][ T3030] redrat3 4-1:1.0: Problem fetching firmware ID
[ 80.872778][ T3030] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 80.926359][ T3030] rc_core: IR keymap rc-hauppauge not found
[ 80.932295][ T3030] Registered IR keymap rc-empty
[ 80.939154][ T3030] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0
[ 80.958038][ T3030] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input5
[ 80.973201][ T3030] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 80.982868][ T3030] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 80.991544][ T3030] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 81.003517][ T3030] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 81.016593][ T3030] usb 4-1: USB disconnect, device number 2
[ 81.616391][ T3030] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 81.768051][ T3030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 81.777987][ T3030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 81.787855][ T3030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 81.799466][ T3030] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 81.808578][ T3030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 81.816608][ T3030] usb 4-1: Product: syz
[ 81.820784][ T3030] usb 4-1: Manufacturer: syz
[ 81.825377][ T3030] usb 4-1: SerialNumber: syz
[ 81.834197][ T3981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 81.841477][ T3981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 81.848724][ T3981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 82.061723][ T3030] redrat3 4-1:1.0: Problem fetching firmware ID
[ 82.070534][ T3030] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 82.126304][ T3030] rc_core: IR keymap rc-hauppauge not found
[ 82.132231][ T3030] Registered IR keymap rc-empty
[ 82.138352][ T3030] rc rc1: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc1
[ 82.157189][ T3030] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc1/input6
[ 82.171699][ T3030] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 82.180754][ T3030] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 82.189394][ T3030] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 82.200744][ T3030] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 82.212547][ T3030] usb 4-1: USB disconnect, device number 3
[ 82.806352][ T3030] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 82.957628][ T3030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 82.967514][ T3030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 82.977383][ T3030] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 82.989165][ T3030] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 82.998250][ T3030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 83.006296][ T3030] usb 4-1: Product: syz
[ 83.010463][ T3030] usb 4-1: Manufacturer: syz
[ 83.015052][ T3030] usb 4-1: SerialNumber: syz
[ 83.022758][ T3985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 83.030029][ T3985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 83.037385][ T3985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 83.249003][ T3030] redrat3 4-1:1.0: Problem fetching firmware ID
[ 83.257670][ T3030] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 83.316361][ T3030] rc_core: IR keymap rc-hauppauge not found
[ 83.322334][ T3030] Registered IR keymap rc-empty
[ 83.330232][ T3030] rc rc2: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc2
[ 83.342729][ T3030] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc2/input7
[ 83.357276][ T3030] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 83.366176][ T3030] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 83.374894][ T3030] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 83.385771][ T3030] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 83.398631][ T3030] usb 4-1: USB disconnect, device number 4
[ 83.407157][ T2858] ==================================================================
[ 83.415228][ T2858] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[ 83.422181][ T2858] Read of size 1 at addr ffff88811f176758 by task udevd/2858
[ 83.429564][ T2858]
[ 83.431889][ T2858] CPU: 1 UID: 0 PID: 2858 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy)
[ 83.431911][ T2858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 83.431922][ T2858] Call Trace:
[ 83.431928][ T2858]
[ 83.431935][ T2858] dump_stack_lvl+0x100/0x190
[ 83.431961][ T2858] print_report+0x13d/0x4b0
[ 83.431988][ T2858] ? __virt_addr_valid+0x239/0x430
[ 83.432013][ T2858] ? string+0x471/0x4d0
[ 83.432040][ T2858] kasan_report+0xdf/0x1c0
[ 83.432064][ T2858] ? string+0x471/0x4d0
[ 83.432093][ T2858] string+0x471/0x4d0
[ 83.432123][ T2858] ? __pfx_string+0x10/0x10
[ 83.432154][ T2858] vsnprintf+0x422/0x1300
[ 83.432174][ T2858] ? __pfx_vsnprintf+0x10/0x10
[ 83.432191][ T2858] ? ksys_read+0x12a/0x250
[ 83.432216][ T2858] ? do_syscall_64+0x10b/0x7f0
[ 83.432235][ T2858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.432256][ T2858] add_uevent_var+0x183/0x3a0
[ 83.432284][ T2858] ? __pfx_add_uevent_var+0x10/0x10
[ 83.432314][ T2858] ? rc_dev_uevent+0x12d/0x1c0
[ 83.432342][ T2858] ? __pfx_rc_dev_uevent+0x10/0x10
[ 83.432369][ T2858] rc_dev_uevent+0x17d/0x1c0
[ 83.432396][ T2858] dev_uevent+0x2f1/0x870
[ 83.432422][ T2858] ? __pfx_dev_uevent+0x10/0x10
[ 83.432447][ T2858] ? kasan_save_track+0x14/0x30
[ 83.432468][ T2858] ? __kasan_kmalloc+0x8f/0xa0
[ 83.432489][ T2858] ? __kmalloc_cache_noprof+0x35e/0x670
[ 83.432514][ T2858] ? uevent_show+0x166/0x3a0
[ 83.432533][ T2858] ? __pfx_uevent_show+0x10/0x10
[ 83.432551][ T2858] uevent_show+0x1ca/0x3a0
[ 83.432570][ T2858] ? __pfx_uevent_show+0x10/0x10
[ 83.432588][ T2858] dev_attr_show+0x52/0xa0
[ 83.432612][ T2858] ? __pfx_dev_attr_show+0x10/0x10
[ 83.432637][ T2858] sysfs_kf_seq_show+0x217/0x3f0
[ 83.432659][ T2858] seq_read_iter+0x32f/0x1270
[ 83.432687][ T2858] ? cp_new_stat+0x484/0x5c0
[ 83.432707][ T2858] kernfs_fop_read_iter+0x46c/0x610
[ 83.432736][ T2858] ? security_file_permission+0x21/0x80
[ 83.432755][ T2858] ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 83.432786][ T2858] vfs_read+0x82e/0xb40
[ 83.432812][ T2858] ? __pfx_vfs_read+0x10/0x10
[ 83.432844][ T2858] ? __pfx___do_sys_newfstat+0x10/0x10
[ 83.432869][ T2858] ksys_read+0x12a/0x250
[ 83.432894][ T2858] ? __pfx_ksys_read+0x10/0x10
[ 83.432923][ T2858] do_syscall_64+0x10b/0x7f0
[ 83.432943][ T2858] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.432962][ T2858] RIP: 0033:0x7f0039d2d407
[ 83.432977][ T2858] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 83.432995][ T2858] RSP: 002b:00007ffd49efdee0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 83.433012][ T2858] RAX: ffffffffffffffda RBX: 00007f0039c3f880 RCX: 00007f0039d2d407
[ 83.433024][ T2858] RDX: 0000000000001000 RSI: 000056029cc096c0 RDI: 000000000000000c
[ 83.433035][ T2858] RBP: 00007f0039e75ff0 R08: 0000000000000000 R09: 0000000000000000
[ 83.433045][ T2858] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 83.433056][ T2858] R13: 00007f0039e75ea0 R14: 0000000000000000 R15: 000056029cbcd8d0
[ 83.433071][ T2858]
[ 83.433077][ T2858]
[ 83.736251][ T2858] Allocated by task 3030:
[ 83.740586][ T2858] kasan_save_stack+0x30/0x50
[ 83.745270][ T2858] kasan_save_track+0x14/0x30
[ 83.749950][ T2858] __kasan_kmalloc+0x8f/0xa0
[ 83.754556][ T2858] __kmalloc_cache_noprof+0x35e/0x670
[ 83.759945][ T2858] redrat3_dev_probe+0x326/0x2b50
[ 83.764994][ T2858] usb_probe_interface+0x386/0x9b0
[ 83.770132][ T2858] really_probe+0x241/0xa60
[ 83.774653][ T2858] __driver_probe_device+0x20e/0x450
[ 83.779952][ T2858] driver_probe_device+0x4a/0x140
[ 83.784989][ T2858] __device_attach_driver+0x1df/0x320
[ 83.790376][ T2858] bus_for_each_drv+0x159/0x1e0
[ 83.795250][ T2858] __device_attach+0x1e4/0x4d0
[ 83.800023][ T2858] device_initial_probe+0xaf/0xd0
[ 83.805072][ T2858] bus_probe_device+0x64/0x160
[ 83.809852][ T2858] device_add+0x121d/0x1970
[ 83.814376][ T2858] usb_set_configuration+0xd97/0x1c60
[ 83.819764][ T2858] usb_generic_driver_probe+0xa1/0xe0
[ 83.825150][ T2858] usb_probe_device+0xef/0x400
[ 83.829937][ T2858] really_probe+0x241/0xa60
[ 83.834458][ T2858] __driver_probe_device+0x20e/0x450
[ 83.839759][ T2858] driver_probe_device+0x4a/0x140
[ 83.844795][ T2858] __device_attach_driver+0x1df/0x320
[ 83.850180][ T2858] bus_for_each_drv+0x159/0x1e0
[ 83.855056][ T2858] __device_attach+0x1e4/0x4d0
[ 83.859842][ T2858] device_initial_probe+0xaf/0xd0
[ 83.864880][ T2858] bus_probe_device+0x64/0x160
[ 83.869655][ T2858] device_add+0x121d/0x1970
[ 83.874174][ T2858] usb_new_device.cold+0x685/0x115c
[ 83.879389][ T2858] hub_event+0x314d/0x4af0
[ 83.883823][ T2858] process_one_work+0xa23/0x1940
[ 83.889128][ T2858] worker_thread+0x5ef/0xe50
[ 83.893734][ T2858] kthread+0x370/0x450
[ 83.897824][ T2858] ret_from_fork+0x69a/0xc80
[ 83.902438][ T2858] ret_from_fork_asm+0x1a/0x30
[ 83.907213][ T2858]
[ 83.909541][ T2858] Freed by task 3030:
[ 83.913524][ T2858] kasan_save_stack+0x30/0x50
[ 83.918214][ T2858] kasan_save_track+0x14/0x30
[ 83.922906][ T2858] kasan_save_free_info+0x3b/0x70
[ 83.927962][ T2858] __kasan_slab_free+0x43/0x70
[ 83.932742][ T2858] kfree+0x20c/0x650
[ 83.936656][ T2858] redrat3_dev_probe+0x107a/0x2b50
[ 83.941792][ T2858] usb_probe_interface+0x386/0x9b0
[ 83.946928][ T2858] really_probe+0x241/0xa60
[ 83.951445][ T2858] __driver_probe_device+0x20e/0x450
[ 83.956747][ T2858] driver_probe_device+0x4a/0x140
[ 83.961786][ T2858] __device_attach_driver+0x1df/0x320
[ 83.967173][ T2858] bus_for_each_drv+0x159/0x1e0
[ 83.972051][ T2858] __device_attach+0x1e4/0x4d0
[ 83.976836][ T2858] device_initial_probe+0xaf/0xd0
[ 83.981880][ T2858] bus_probe_device+0x64/0x160
[ 83.986657][ T2858] device_add+0x121d/0x1970
[ 83.991181][ T2858] usb_set_configuration+0xd97/0x1c60
[ 83.996572][ T2858] usb_generic_driver_probe+0xa1/0xe0
[ 84.001960][ T2858] usb_probe_device+0xef/0x400
[ 84.006740][ T2858] really_probe+0x241/0xa60
[ 84.011256][ T2858] __driver_probe_device+0x20e/0x450
[ 84.016557][ T2858] driver_probe_device+0x4a/0x140
[ 84.021595][ T2858] __device_attach_driver+0x1df/0x320
[ 84.026985][ T2858] bus_for_each_drv+0x159/0x1e0
[ 84.031858][ T2858] __device_attach+0x1e4/0x4d0
[ 84.036653][ T2858] device_initial_probe+0xaf/0xd0
[ 84.041692][ T2858] bus_probe_device+0x64/0x160
[ 84.046465][ T2858] device_add+0x121d/0x1970
[ 84.051011][ T2858] usb_new_device.cold+0x685/0x115c
[ 84.056231][ T2858] hub_event+0x314d/0x4af0
[ 84.060668][ T2858] process_one_work+0xa23/0x1940
[ 84.065626][ T2858] worker_thread+0x5ef/0xe50
[ 84.070239][ T2858] kthread+0x370/0x450
[ 84.074409][ T2858] ret_from_fork+0x69a/0xc80
[ 84.079022][ T2858] ret_from_fork_asm+0x1a/0x30
[ 84.083799][ T2858]
[ 84.086125][ T2858] The buggy address belongs to the object at ffff88811f176000
[ 84.086125][ T2858] which belongs to the cache kmalloc-2k of size 2048
[ 84.100185][ T2858] The buggy address is located 1880 bytes inside of
[ 84.100185][ T2858] freed 2048-byte region [ffff88811f176000, ffff88811f176800)
[ 84.114168][ T2858]
[ 84.116499][ T2858] The buggy address belongs to the physical page:
[ 84.122911][ T2858] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11f170
[ 84.131766][ T2858] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 84.140269][ T2858] flags: 0x200000000000040(head|node=0|zone=2)
[ 84.146429][ T2858] page_type: f5(slab)
[ 84.150419][ T2858] raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 84.159031][ T2858] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[ 84.167647][ T2858] head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 84.176339][ T2858] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[ 84.185021][ T2858] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 84.193726][ T2858] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 84.202399][ T2858] page dumped because: kasan: bad access detected
[ 84.208816][ T2858] page_owner tracks the page as allocated
[ 84.214529][ T2858] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2847, tgid 2847 (klogd), ts 83030117292, free_ts 82239948412
[ 84.235299][ T2858] post_alloc_hook+0xfd/0x120
[ 84.240002][ T2858] get_page_from_freelist+0xf25/0x3400
[ 84.245479][ T2858] __alloc_frozen_pages_noprof+0x28f/0x2b90
[ 84.251393][ T2858] new_slab+0xa2/0x670
[ 84.255478][ T2858] refill_objects+0xe3/0x410
[ 84.260086][ T2858] __pcs_replace_empty_main+0x376/0x680
[ 84.265654][ T2858] __kmalloc_cache_noprof+0x50e/0x670
[ 84.271045][ T2858] syslog_print+0xf8/0x620
[ 84.275478][ T2858] do_syslog+0x5bd/0x6d0
[ 84.279740][ T2858] __x64_sys_syslog+0x74/0xb0
[ 84.284438][ T2858] do_syscall_64+0x10b/0x7f0
[ 84.289045][ T2858] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.294951][ T2858] page last free pid 3978 tgid 3978 stack trace:
[ 84.301286][ T2858] __free_frozen_pages+0x716/0xf50
[ 84.306410][ T2858] qlist_free_all+0x47/0xf0
[ 84.310927][ T2858] kasan_quarantine_reduce+0x1a0/0x1f0
[ 84.316403][ T2858] __kasan_slab_alloc+0x4e/0x70
[ 84.321269][ T2858] kmem_cache_alloc_noprof+0x2e2/0x640
[ 84.326752][ T2858] do_getname+0x35/0x390
[ 84.331013][ T2858] vfs_fstatat+0xd0/0xe0
[ 84.335270][ T2858] __do_sys_newfstatat+0x9d/0x120
[ 84.340311][ T2858] do_syscall_64+0x10b/0x7f0
[ 84.344911][ T2858] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.350817][ T2858]
[ 84.353148][ T2858] Memory state around the buggy address:
[ 84.358782][ T2858] ffff88811f176600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.366859][ T2858] ffff88811f176680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.374927][ T2858] >ffff88811f176700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.382997][ T2858] ^
[ 84.389933][ T2858] ffff88811f176780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.398006][ T2858] ffff88811f176800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.406070][ T2858] ==================================================================
[ 84.438309][ T29] audit: type=1400 audit(1786250947.804:125): avc: denied { read } for pid=2840 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 84.441979][ T2858] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 84.442001][ T2858] CPU: 0 UID: 0 PID: 2858 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy)
[ 84.442031][ T2858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 84.442046][ T2858] Call Trace:
[ 84.442054][ T2858]
[ 84.442064][ T2858] dump_stack_lvl+0x100/0x190
[ 84.442101][ T2858] vpanic+0x552/0x970
[ 84.442130][ T2858] ? __pfx_vpanic+0x10/0x10
[ 84.442161][ T2858] ? string+0x471/0x4d0
[ 84.442197][ T2858] panic+0xd1/0xe0
[ 84.442224][ T2858] ? __pfx_panic+0x10/0x10
[ 84.442252][ T2858] ? string+0x471/0x4d0
[ 84.442289][ T2858] ? preempt_schedule_common+0x42/0xc0
[ 84.442326][ T2858] ? check_panic_on_warn+0x1f/0x90
[ 84.442359][ T2858] check_panic_on_warn.cold+0x19/0x34
[ 84.442398][ T2858] end_report.part.0+0x3a/0x90
[ 84.442433][ T2858] kasan_report.cold+0xe/0x18
[ 84.442468][ T2858] ? string+0x471/0x4d0
[ 84.442508][ T2858] string+0x471/0x4d0
[ 84.442546][ T2858] ? __pfx_string+0x10/0x10
[ 84.442587][ T2858] vsnprintf+0x422/0x1300
[ 84.442616][ T2858] ? __pfx_vsnprintf+0x10/0x10
[ 84.442640][ T2858] ? ksys_read+0x12a/0x250
[ 84.442674][ T2858] ? do_syscall_64+0x10b/0x7f0
[ 84.442700][ T2858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.442729][ T2858] add_uevent_var+0x183/0x3a0
[ 84.442766][ T2858] ? __pfx_add_uevent_var+0x10/0x10
[ 84.442806][ T2858] ? rc_dev_uevent+0x12d/0x1c0
[ 84.442844][ T2858] ? __pfx_rc_dev_uevent+0x10/0x10
[ 84.442880][ T2858] rc_dev_uevent+0x17d/0x1c0
[ 84.442921][ T2858] dev_uevent+0x2f1/0x870
[ 84.442956][ T2858] ? __pfx_dev_uevent+0x10/0x10
[ 84.442989][ T2858] ? kasan_save_track+0x14/0x30
[ 84.443018][ T2858] ? __kasan_kmalloc+0x8f/0xa0
[ 84.443046][ T2858] ? __kmalloc_cache_noprof+0x35e/0x670
[ 84.443081][ T2858] ? uevent_show+0x166/0x3a0
[ 84.443108][ T2858] ? __pfx_uevent_show+0x10/0x10
[ 84.443134][ T2858] uevent_show+0x1ca/0x3a0
[ 84.443161][ T2858] ? __pfx_uevent_show+0x10/0x10
[ 84.443186][ T2858] dev_attr_show+0x52/0xa0
[ 84.443219][ T2858] ? __pfx_dev_attr_show+0x10/0x10
[ 84.443252][ T2858] sysfs_kf_seq_show+0x217/0x3f0
[ 84.443282][ T2858] seq_read_iter+0x32f/0x1270
[ 84.443319][ T2858] ? cp_new_stat+0x484/0x5c0
[ 84.443348][ T2858] kernfs_fop_read_iter+0x46c/0x610
[ 84.443387][ T2858] ? security_file_permission+0x21/0x80
[ 84.443422][ T2858] ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 84.443462][ T2858] vfs_read+0x82e/0xb40
[ 84.443498][ T2858] ? __pfx_vfs_read+0x10/0x10
[ 84.443533][ T2858] ? __pfx___do_sys_newfstat+0x10/0x10
[ 84.443568][ T2858] ksys_read+0x12a/0x250
[ 84.443602][ T2858] ? __pfx_ksys_read+0x10/0x10
[ 84.443640][ T2858] do_syscall_64+0x10b/0x7f0
[ 84.443681][ T2858] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.443707][ T2858] RIP: 0033:0x7f0039d2d407
[ 84.443728][ T2858] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 84.443751][ T2858] RSP: 002b:00007ffd49efdee0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 84.443777][ T2858] RAX: ffffffffffffffda RBX: 00007f0039c3f880 RCX: 00007f0039d2d407
[ 84.443795][ T2858] RDX: 0000000000001000 RSI: 000056029cc096c0 RDI: 000000000000000c
[ 84.443811][ T2858] RBP: 00007f0039e75ff0 R08: 0000000000000000 R09: 0000000000000000
[ 84.443827][ T2858] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 84.443843][ T2858] R13: 00007f0039e75ea0 R14: 0000000000000000 R15: 000056029cbcd8d0
[ 84.443866][ T2858]
[ 84.460359][ T2858] Kernel Offset: disabled