[ 92.180382][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts.
2026/08/15 14:45:47 parsed 1 programs
2026/08/15 14:45:47 serving rpc on tcp://45341
[ 99.033718][ T5636] cgroup: Unknown subsys name 'net'
[ 99.149509][ T5636] cgroup: Unknown subsys name 'cpuset'
[ 99.159402][ T5636] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 100.907202][ T5636] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 104.193212][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.201588][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.231958][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.240202][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.282862][ T5642] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 104.302029][ T5642] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 104.316992][ T5642] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 104.333281][ T5642] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 104.350782][ T5642] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 106.165357][ T5669] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.172843][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.180798][ T5669] bridge_slave_0: entered allmulticast mode
[ 106.189482][ T5669] bridge_slave_0: entered promiscuous mode
[ 106.199932][ T5669] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.207455][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.215253][ T5669] bridge_slave_1: entered allmulticast mode
[ 106.222772][ T5669] bridge_slave_1: entered promiscuous mode
[ 106.253907][ T5669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 106.266511][ T5669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 106.296176][ T5669] team0: Port device team_slave_0 added
[ 106.303874][ T5669] team0: Port device team_slave_1 added
[ 106.328839][ T5669] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 106.335920][ T5669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 106.363108][ T5669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 106.376528][ T5669] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 106.383754][ T5669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 106.410411][ T5669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 106.452498][ T5669] hsr_slave_0: entered promiscuous mode
[ 106.459645][ T5669] hsr_slave_1: entered promiscuous mode
[ 106.610329][ T5669] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 106.623725][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 106.631906][ T5669] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 106.643091][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 106.651873][ T5669] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 106.661666][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 106.670855][ T5669] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 106.680812][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 106.768856][ T5669] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.798998][ T5669] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.813835][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.821753][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.840586][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.847783][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.192008][ T5669] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.244781][ T5669] veth0_vlan: entered promiscuous mode
[ 107.261964][ T5669] veth1_vlan: entered promiscuous mode
[ 107.295945][ T5669] veth0_macvtap: entered promiscuous mode
[ 107.308129][ T5669] veth1_macvtap: entered promiscuous mode
[ 107.328266][ T5669] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.347438][ T5669] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.417366][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.427613][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.440156][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.450166][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.534236][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.649653][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.729419][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.809102][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.023555][ T4931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 108.033338][ T4931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 108.042025][ T4931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 108.052266][ T4931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 108.061083][ T4931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/08/15 14:46:01 executed programs: 0
[ 109.796117][ T4931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 109.807312][ T4931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 109.816762][ T4931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 109.828209][ T4931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 109.837819][ T4931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 109.905601][ T48] bridge_slave_1: left allmulticast mode
[ 109.928539][ T48] bridge_slave_1: left promiscuous mode
[ 109.938684][ T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.958668][ T48] bridge_slave_0: left allmulticast mode
[ 109.971434][ T48] bridge_slave_0: left promiscuous mode
[ 109.978569][ T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.238532][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 110.250793][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 110.273316][ T48] bond0 (unregistering): Released all slaves
[ 110.396489][ T48] hsr_slave_0: left promiscuous mode
[ 110.411652][ T48] hsr_slave_1: left promiscuous mode
[ 110.425274][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 110.433285][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 110.442382][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 110.451143][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 110.470929][ T48] veth1_macvtap: left promiscuous mode
[ 110.477764][ T48] veth0_macvtap: left promiscuous mode
[ 110.483792][ T48] veth1_vlan: left promiscuous mode
[ 110.491209][ T48] veth0_vlan: left promiscuous mode
[ 110.684768][ T48] team0 (unregistering): Port device team_slave_1 removed
[ 110.702404][ T48] team0 (unregistering): Port device team_slave_0 removed
[ 110.846422][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1
[ 111.777751][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2
[ 111.856996][ T4931] Bluetooth: hci0: command tx timeout
[ 111.937536][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.944944][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.952738][ T5752] bridge_slave_0: entered allmulticast mode
[ 111.961368][ T5752] bridge_slave_0: entered promiscuous mode
[ 111.970809][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.978332][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.985743][ T5752] bridge_slave_1: entered allmulticast mode
[ 111.993961][ T5752] bridge_slave_1: entered promiscuous mode
[ 112.152414][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.196352][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.298386][ T5752] team0: Port device team_slave_0 added
[ 112.323812][ T5752] team0: Port device team_slave_1 added
[ 112.408918][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.421355][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 112.449563][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.466745][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 112.481534][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 112.509041][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 112.579017][ T5752] hsr_slave_0: entered promiscuous mode
[ 112.587749][ T5752] hsr_slave_1: entered promiscuous mode
[ 112.644380][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3
[ 113.239194][ T5752] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.256019][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 113.264674][ T5752] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.280513][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 113.291415][ T5752] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.320530][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 113.340421][ T5752] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.359288][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 113.577272][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.611803][ T5752] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.628117][ T48] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.636070][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.655573][ T48] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.662900][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.945991][ T4931] Bluetooth: hci0: command tx timeout
[ 114.271488][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.355443][ T5752] veth0_vlan: entered promiscuous mode
[ 114.377281][ T5752] veth1_vlan: entered promiscuous mode
[ 114.428921][ T5752] veth0_macvtap: entered promiscuous mode
[ 114.446730][ T5752] veth1_macvtap: entered promiscuous mode
[ 114.475399][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.508451][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.567332][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.632777][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.648680][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.666259][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.704469][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.705857][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.714345][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.726567][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
2026/08/15 14:46:06 executed programs: 2
[ 115.076357][ T5347] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 115.263730][ T5347] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 115.281448][ T5347] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 115.291479][ T5347] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 115.301928][ T5347] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 115.317792][ T5347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 115.327390][ T5347] usb 1-1: Product: syz
[ 115.332519][ T5347] usb 1-1: Manufacturer: syz
[ 115.337981][ T5347] usb 1-1: SerialNumber: syz
[ 115.352499][ T5877] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 115.361520][ T5877] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 115.369785][ T5877] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 115.600032][ T5347] redrat3 1-1:1.0: Problem fetching firmware ID
[ 115.622934][ T5347] redrat3 1-1:1.0: Failed to read timeout from hardware
[ 115.695996][ T5347] rc_core: IR keymap rc-hauppauge not found
[ 115.703668][ T5347] Registered IR keymap rc-empty
[ 115.721632][ T5347] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0
[ 115.740352][ T5347] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0/input5
[ 115.763327][ T5347] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 115.772575][ T5347] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 115.783817][ T5347] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 115.800555][ T5347] redrat3 1-1:1.0: probe with driver redrat3 failed with error -5
[ 115.827808][ T5347] usb 1-1: USB disconnect, device number 2
[ 116.016043][ T4931] Bluetooth: hci0: command tx timeout
[ 116.356801][ T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 116.506548][ T29] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 116.517376][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 116.527757][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 116.537982][ T29] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 116.549955][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 116.558126][ T29] usb 1-1: Product: syz
[ 116.562544][ T29] usb 1-1: Manufacturer: syz
[ 116.567757][ T29] usb 1-1: SerialNumber: syz
[ 116.577338][ T5913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 116.585513][ T5913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 116.593731][ T5913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 116.807158][ T29] redrat3 1-1:1.0: Problem fetching firmware ID
[ 116.819095][ T29] redrat3 1-1:1.0: Failed to read timeout from hardware
[ 116.875904][ T29] rc_core: IR keymap rc-hauppauge not found
[ 116.881993][ T29] Registered IR keymap rc-empty
[ 116.888476][ T29] rc rc1: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc1
[ 116.907595][ T29] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc1/input6
[ 116.924862][ T29] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 116.935427][ T29] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 116.944419][ T29] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 116.957245][ T29] redrat3 1-1:1.0: probe with driver redrat3 failed with error -5
[ 116.972889][ T29] usb 1-1: USB disconnect, device number 3
[ 116.975486][ T4981] ==================================================================
[ 116.987271][ T4981] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0
[ 116.995686][ T4981] Read of size 1 at addr ffff88807f9f6758 by task udevd/4981
[ 117.005010][ T4981]
[ 117.007634][ T4981] CPU: 0 UID: 0 PID: 4981 Comm: udevd Not tainted syzkaller #0 PREEMPT(full)
[ 117.007652][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 117.007660][ T4981] Call Trace:
[ 117.007666][ T4981]
[ 117.007672][ T4981] dump_stack_lvl+0xe8/0x150
[ 117.007694][ T4981] print_address_description+0x55/0x1e0
[ 117.007709][ T4981] ? string+0x216/0x2d0
[ 117.007725][ T4981] print_report+0x58/0x70
[ 117.007738][ T4981] kasan_report+0x117/0x150
[ 117.007762][ T4981] ? string+0x216/0x2d0
[ 117.007779][ T4981] string+0x216/0x2d0
[ 117.007796][ T4981] vsnprintf+0x74a/0xef0
[ 117.007815][ T4981] add_uevent_var+0x1ce/0x460
[ 117.007832][ T4981] ? __pfx___mutex_lock+0x10/0x10
[ 117.007847][ T4981] ? __pfx_add_uevent_var+0x10/0x10
[ 117.007865][ T4981] rc_dev_uevent+0x164/0x1a0
[ 117.007881][ T4981] dev_uevent+0x537/0x870
[ 117.007899][ T4981] ? __pfx_dev_uevent+0x10/0x10
[ 117.007914][ T4981] ? __kmalloc_cache_noprof+0x32d/0x660
[ 117.007938][ T4981] ? __kmalloc_cache_noprof+0x150/0x660
[ 117.007951][ T4981] ? uevent_show+0x15c/0x310
[ 117.007967][ T4981] uevent_show+0x1a0/0x310
[ 117.007983][ T4981] dev_attr_show+0x58/0xc0
[ 117.007997][ T4981] ? __pfx_dev_attr_show+0x10/0x10
[ 117.008011][ T4981] sysfs_kf_seq_show+0x331/0x490
[ 117.008028][ T4981] seq_read_iter+0x463/0xca0
[ 117.008043][ T4981] vfs_read+0x595/0xa80
[ 117.008061][ T4981] ? __pfx_vfs_read+0x10/0x10
[ 117.008077][ T4981] ? do_sys_openat2+0x14e/0x200
[ 117.008100][ T4981] ksys_read+0x150/0x270
[ 117.008117][ T4981] ? __pfx_ksys_read+0x10/0x10
[ 117.008134][ T4981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.008147][ T4981] do_syscall_64+0x174/0x580
[ 117.008160][ T4981] ? clear_bhb_loop+0x70/0xc0
[ 117.008172][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.008184][ T4981] RIP: 0033:0x7f6f6b1ca407
[ 117.008196][ T4981] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 117.008205][ T4981] RSP: 002b:00007ffdf2a2a960 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 117.008219][ T4981] RAX: ffffffffffffffda RBX: 00007f6f6b13e880 RCX: 00007f6f6b1ca407
[ 117.008228][ T4981] RDX: 0000000000001000 RSI: 000055f3a0831560 RDI: 000000000000000c
[ 117.008235][ T4981] RBP: 00007f6f6b312ff0 R08: 0000000000000000 R09: 0000000000000000
[ 117.008242][ T4981] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 117.008251][ T4981] R13: 00007f6f6b312ea0 R14: 0000000000000000 R15: 000055f3a08270d0
[ 117.008268][ T4981]
[ 117.008273][ T4981]
[ 117.268092][ T4981] Allocated by task 29:
[ 117.272333][ T4981] kasan_save_track+0x3e/0x80
[ 117.277011][ T4981] __kasan_kmalloc+0x93/0xb0
[ 117.281594][ T4981] __kmalloc_cache_noprof+0x32d/0x660
[ 117.286982][ T4981] redrat3_dev_probe+0x477/0x2570
[ 117.292462][ T4981] usb_probe_interface+0x653/0xc60
[ 117.297685][ T4981] really_probe+0x254/0xae0
[ 117.302241][ T4981] __driver_probe_device+0x1e8/0x360
[ 117.307556][ T4981] driver_probe_device+0x4f/0x240
[ 117.312674][ T4981] __device_attach_driver+0x270/0x410
[ 117.318063][ T4981] bus_for_each_drv+0x258/0x2f0
[ 117.323009][ T4981] __device_attach+0x2c4/0x450
[ 117.328436][ T4981] device_initial_probe+0xa1/0xd0
[ 117.334085][ T4981] bus_probe_device+0x12a/0x220
[ 117.339353][ T4981] device_add+0x7d7/0xb80
[ 117.344291][ T4981] usb_set_configuration+0x1ad8/0x2180
[ 117.349877][ T4981] usb_generic_driver_probe+0x8d/0x150
[ 117.356320][ T4981] usb_probe_device+0x1c3/0x3b0
[ 117.361626][ T4981] really_probe+0x254/0xae0
[ 117.366956][ T4981] __driver_probe_device+0x1e8/0x360
[ 117.372521][ T4981] driver_probe_device+0x4f/0x240
[ 117.377994][ T4981] __device_attach_driver+0x270/0x410
[ 117.383823][ T4981] bus_for_each_drv+0x258/0x2f0
[ 117.389228][ T4981] __device_attach+0x2c4/0x450
[ 117.394272][ T4981] device_initial_probe+0xa1/0xd0
[ 117.399664][ T4981] bus_probe_device+0x12a/0x220
[ 117.404619][ T4981] device_add+0x7d7/0xb80
[ 117.409105][ T4981] usb_new_device+0x9aa/0x1690
[ 117.414310][ T4981] hub_event+0x28e8/0x4d30
[ 117.418928][ T4981] process_scheduled_works+0xa8e/0x14e0
[ 117.424680][ T4981] worker_thread+0xa47/0xfb0
[ 117.430120][ T4981] kthread+0x388/0x470
[ 117.434300][ T4981] ret_from_fork+0x514/0xb70
[ 117.439075][ T4981] ret_from_fork_asm+0x1a/0x30
[ 117.444123][ T4981]
[ 117.446471][ T4981] Freed by task 29:
[ 117.450715][ T4981] kasan_save_track+0x3e/0x80
[ 117.455571][ T4981] kasan_save_free_info+0x40/0x50
[ 117.461135][ T4981] __kasan_slab_free+0x5c/0x80
[ 117.466071][ T4981] kfree+0x1c5/0x640
[ 117.469971][ T4981] redrat3_dev_probe+0x1bf4/0x2570
[ 117.475143][ T4981] usb_probe_interface+0x653/0xc60
[ 117.480250][ T4981] really_probe+0x254/0xae0
[ 117.484752][ T4981] __driver_probe_device+0x1e8/0x360
[ 117.490117][ T4981] driver_probe_device+0x4f/0x240
[ 117.495135][ T4981] __device_attach_driver+0x270/0x410
[ 117.500510][ T4981] bus_for_each_drv+0x258/0x2f0
[ 117.507684][ T4981] __device_attach+0x2c4/0x450
[ 117.512802][ T4981] device_initial_probe+0xa1/0xd0
[ 117.517937][ T4981] bus_probe_device+0x12a/0x220
[ 117.523149][ T4981] device_add+0x7d7/0xb80
[ 117.527486][ T4981] usb_set_configuration+0x1ad8/0x2180
[ 117.533484][ T4981] usb_generic_driver_probe+0x8d/0x150
[ 117.539155][ T4981] usb_probe_device+0x1c3/0x3b0
[ 117.544199][ T4981] really_probe+0x254/0xae0
[ 117.548739][ T4981] __driver_probe_device+0x1e8/0x360
[ 117.554128][ T4981] driver_probe_device+0x4f/0x240
[ 117.559166][ T4981] __device_attach_driver+0x270/0x410
[ 117.564736][ T4981] bus_for_each_drv+0x258/0x2f0
[ 117.569687][ T4981] __device_attach+0x2c4/0x450
[ 117.574714][ T4981] device_initial_probe+0xa1/0xd0
[ 117.579749][ T4981] bus_probe_device+0x12a/0x220
[ 117.584624][ T4981] device_add+0x7d7/0xb80
[ 117.589182][ T4981] usb_new_device+0x9aa/0x1690
[ 117.594237][ T4981] hub_event+0x28e8/0x4d30
[ 117.598829][ T4981] process_scheduled_works+0xa8e/0x14e0
[ 117.604552][ T4981] worker_thread+0xa47/0xfb0
[ 117.609225][ T4981] kthread+0x388/0x470
[ 117.613307][ T4981] ret_from_fork+0x514/0xb70
[ 117.617994][ T4981] ret_from_fork_asm+0x1a/0x30
[ 117.622860][ T4981]
[ 117.625273][ T4981] The buggy address belongs to the object at ffff88807f9f6000
[ 117.625273][ T4981] which belongs to the cache kmalloc-2k of size 2048
[ 117.640218][ T4981] The buggy address is located 1880 bytes inside of
[ 117.640218][ T4981] freed 2048-byte region [ffff88807f9f6000, ffff88807f9f6800)
[ 117.654354][ T4981]
[ 117.656674][ T4981] The buggy address belongs to the physical page:
[ 117.663105][ T4981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f9f0
[ 117.672059][ T4981] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 117.680566][ T4981] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 117.688215][ T4981] page_type: f5(slab)
[ 117.692307][ T4981] raw: 00fff00000000040 ffff88801b002000 dead000000000100 dead000000000122
[ 117.700904][ T4981] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[ 117.709611][ T4981] head: 00fff00000000040 ffff88801b002000 dead000000000100 dead000000000122
[ 117.718552][ T4981] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[ 117.727227][ T4981] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 117.736080][ T4981] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 117.745280][ T4981] page dumped because: kasan: bad access detected
[ 117.751693][ T4981] page_owner tracks the page as allocated
[ 117.757418][ T4981] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1132, tgid 1132 (kworker/1:2), ts 116336199187, free_ts 116256956123
[ 117.778957][ T4981] post_alloc_hook+0x1f9/0x250
[ 117.783733][ T4981] get_page_from_freelist+0x21fa/0x2270
[ 117.789300][ T4981] __alloc_frozen_pages_noprof+0x18d/0x380
[ 117.795201][ T4981] allocate_slab+0x79/0x5e0
[ 117.799794][ T4981] refill_objects+0x2d5/0x350
[ 117.804776][ T4981] __pcs_replace_empty_main+0x2bf/0x6b0
[ 117.810349][ T4981] __kmalloc_node_track_caller_noprof+0x557/0x730
[ 117.816803][ T4981] __alloc_skb+0x2bd/0x7a0
[ 117.821271][ T4981] mld_newpack+0x165/0xcb0
[ 117.825704][ T4981] add_grec+0x119f/0x19d0
[ 117.830263][ T4981] mld_send_initial_cr+0x288/0x550
[ 117.835922][ T4981] mld_dad_work+0x3d/0x480
[ 117.840445][ T4981] process_scheduled_works+0xa8e/0x14e0
[ 117.846005][ T4981] worker_thread+0xa47/0xfb0
[ 117.850682][ T4981] kthread+0x388/0x470
[ 117.854767][ T4981] ret_from_fork+0x514/0xb70
[ 117.859373][ T4981] page last free pid 1132 tgid 1132 stack trace:
[ 117.865785][ T4981] __free_frozen_pages+0xc1e/0xd10
[ 117.870918][ T4981] __slab_free+0x274/0x2c0
[ 117.875780][ T4981] qlist_free_all+0x99/0x100
[ 117.880385][ T4981] kasan_quarantine_reduce+0x148/0x160
[ 117.886119][ T4981] __kasan_slab_alloc+0x22/0x80
[ 117.891260][ T4981] kmem_cache_alloc_node_noprof+0x355/0x610
[ 117.897173][ T4981] __alloc_skb+0x1d7/0x7a0
[ 117.901687][ T4981] mld_newpack+0x165/0xcb0
[ 117.906384][ T4981] add_grec+0x119f/0x19d0
[ 117.912387][ T4981] mld_send_initial_cr+0x288/0x550
[ 117.917707][ T4981] mld_dad_work+0x3d/0x480
[ 117.922147][ T4981] process_scheduled_works+0xa8e/0x14e0
[ 117.928342][ T4981] worker_thread+0xa47/0xfb0
[ 117.933143][ T4981] kthread+0x388/0x470
[ 117.937220][ T4981] ret_from_fork+0x514/0xb70
[ 117.941839][ T4981] ret_from_fork_asm+0x1a/0x30
[ 117.946692][ T4981]
[ 117.949006][ T4981] Memory state around the buggy address:
[ 117.954648][ T4981] ffff88807f9f6600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.963257][ T4981] ffff88807f9f6680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.971505][ T4981] >ffff88807f9f6700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.979916][ T4981] ^
[ 117.987027][ T4981] ffff88807f9f6780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.995124][ T4981] ffff88807f9f6800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 118.003620][ T4981] ==================================================================
[ 118.021359][ T4981] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 118.028713][ T4981] CPU: 0 UID: 0 PID: 4981 Comm: udevd Not tainted syzkaller #0 PREEMPT(full)
[ 118.038035][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 118.049621][ T4981] Call Trace:
[ 118.053011][ T4981]
[ 118.055941][ T4981] vpanic+0x56c/0xa60
[ 118.059938][ T4981] ? __pfx_vpanic+0x10/0x10
[ 118.064805][ T4981] ? __pfx___schedule+0x10/0x10
[ 118.069852][ T4981] panic+0xc5/0xd0
[ 118.073704][ T4981] ? __pfx_panic+0x10/0x10
[ 118.078255][ T4981] ? preempt_schedule_thunk+0x16/0x40
[ 118.083927][ T4981] ? string+0x216/0x2d0
[ 118.088695][ T4981] check_panic_on_warn+0x89/0xb0
[ 118.093918][ T4981] ? string+0x216/0x2d0
[ 118.098361][ T4981] end_report+0x73/0x170
[ 118.102829][ T4981] ? string+0x216/0x2d0
[ 118.107200][ T4981] kasan_report+0x128/0x150
[ 118.111894][ T4981] ? string+0x216/0x2d0
[ 118.116206][ T4981] string+0x216/0x2d0
[ 118.120291][ T4981] vsnprintf+0x74a/0xef0
[ 118.124812][ T4981] add_uevent_var+0x1ce/0x460
[ 118.129610][ T4981] ? __pfx___mutex_lock+0x10/0x10
[ 118.134753][ T4981] ? __pfx_add_uevent_var+0x10/0x10
[ 118.140066][ T4981] rc_dev_uevent+0x164/0x1a0
[ 118.144755][ T4981] dev_uevent+0x537/0x870
[ 118.149384][ T4981] ? __pfx_dev_uevent+0x10/0x10
[ 118.154329][ T4981] ? __kmalloc_cache_noprof+0x32d/0x660
[ 118.159986][ T4981] ? __kmalloc_cache_noprof+0x150/0x660
[ 118.165541][ T4981] ? uevent_show+0x15c/0x310
[ 118.170380][ T4981] uevent_show+0x1a0/0x310
[ 118.174808][ T4981] dev_attr_show+0x58/0xc0
[ 118.179229][ T4981] ? __pfx_dev_attr_show+0x10/0x10
[ 118.184383][ T4981] sysfs_kf_seq_show+0x331/0x490
[ 118.189328][ T4981] seq_read_iter+0x463/0xca0
[ 118.193945][ T4981] vfs_read+0x595/0xa80
[ 118.198223][ T4981] ? __pfx_vfs_read+0x10/0x10
[ 118.202905][ T4981] ? do_sys_openat2+0x14e/0x200
[ 118.207768][ T4981] ksys_read+0x150/0x270
[ 118.212044][ T4981] ? __pfx_ksys_read+0x10/0x10
[ 118.217053][ T4981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.223446][ T4981] do_syscall_64+0x174/0x580
[ 118.228059][ T4981] ? clear_bhb_loop+0x70/0xc0
[ 118.232764][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.238833][ T4981] RIP: 0033:0x7f6f6b1ca407
[ 118.243308][ T4981] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 118.263783][ T4981] RSP: 002b:00007ffdf2a2a960 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 118.272216][ T4981] RAX: ffffffffffffffda RBX: 00007f6f6b13e880 RCX: 00007f6f6b1ca407
[ 118.280231][ T4981] RDX: 0000000000001000 RSI: 000055f3a0831560 RDI: 000000000000000c
[ 118.288301][ T4981] RBP: 00007f6f6b312ff0 R08: 0000000000000000 R09: 0000000000000000
[ 118.296272][ T4981] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 118.304244][ T4981] R13: 00007f6f6b312ea0 R14: 0000000000000000 R15: 000055f3a08270d0
[ 118.312332][ T4981]
[ 118.315718][ T4981] Kernel Offset: disabled
[ 118.320402][ T4981] Rebooting in 86400 seconds..