Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts.
2026/09/17 19:53:55 parsed 1 programs
[ 70.953702][ T30] kauditd_printk_skb: 1 callbacks suppressed
[ 70.953769][ T30] audit: type=1400 audit(1789674835.616:77): avc: denied { node_bind } for pid=2985 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 70.975871][ T30] audit: type=1400 audit(1789674835.616:78): avc: denied { module_request } for pid=2985 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
2026/09/17 19:53:55 serving rpc on tcp://46187
[ 74.438804][ T30] audit: type=1400 audit(1789674839.096:79): avc: denied { mounton } for pid=2996 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 74.463868][ T30] audit: type=1400 audit(1789674839.126:80): avc: denied { mount } for pid=2996 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 74.474668][ T2996] cgroup: Unknown subsys name 'net'
[ 74.484349][ T30] audit: type=1400 audit(1789674839.136:81): avc: denied { unmount } for pid=2996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 74.605730][ T2996] cgroup: Unknown subsys name 'cpuset'
[ 74.616984][ T2996] cgroup: Unknown subsys name 'rlimit'
[ 74.802830][ T30] audit: type=1400 audit(1789674839.466:82): avc: denied { setattr } for pid=2996 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 74.824762][ T30] audit: type=1400 audit(1789674839.486:83): avc: denied { create } for pid=2996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 74.826343][ T30] audit: type=1400 audit(1789674839.486:84): avc: denied { write } for pid=2996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 74.827742][ T30] audit: type=1400 audit(1789674839.486:85): avc: denied { read } for pid=2996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 74.902879][ T30] audit: type=1400 audit(1789674839.566:86): avc: denied { sys_module } for pid=2996 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 75.034056][ T3001] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 75.077005][ T2996] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 76.847783][ T30] kauditd_printk_skb: 8 callbacks suppressed
[ 76.847846][ T30] audit: type=1400 audit(1789674841.506:95): avc: denied { execmem } for pid=3002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 76.877394][ T30] audit: type=1400 audit(1789674841.536:96): avc: denied { read } for pid=3003 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 76.877483][ T30] audit: type=1400 audit(1789674841.536:97): avc: denied { open } for pid=3003 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 76.882986][ T30] audit: type=1400 audit(1789674841.536:98): avc: denied { mounton } for pid=3003 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 76.963705][ T30] audit: type=1400 audit(1789674841.626:99): avc: denied { create } for pid=3003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 77.190415][ T30] audit: type=1400 audit(1789674841.846:100): avc: denied { mounton } for pid=3007 comm="syz-executor" path="/root/syzkaller.psmHTY/syz-tmp" dev="sda1" ino=2032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 77.190545][ T30] audit: type=1400 audit(1789674841.846:101): avc: denied { mount } for pid=3007 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 77.200164][ T30] audit: type=1400 audit(1789674841.846:102): avc: denied { mounton } for pid=3007 comm="syz-executor" path="/root/syzkaller.psmHTY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 77.206369][ T30] audit: type=1400 audit(1789674841.846:103): avc: denied { mount } for pid=3007 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 77.213539][ T30] audit: type=1400 audit(1789674841.846:104): avc: denied { mounton } for pid=3007 comm="syz-executor" path="/root/syzkaller.psmHTY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 77.390830][ T3007] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 94.364567][ T3068] syz-executor (3068) used greatest stack depth: 22568 bytes left
2026/09/17 19:54:19 executed programs: 0
2026/09/17 19:54:33 executed programs: 2
[ 109.239661][ T30] kauditd_printk_skb: 17 callbacks suppressed
[ 109.239717][ T30] audit: type=1400 audit(1789674873.896:122): avc: denied { read write } for pid=3981 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 109.239789][ T30] audit: type=1400 audit(1789674873.896:123): avc: denied { open } for pid=3981 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 109.239844][ T30] audit: type=1400 audit(1789674873.896:124): avc: denied { ioctl } for pid=3981 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 109.482659][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 109.633539][ T9] usb 4-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=1.00
[ 109.642609][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 109.642721][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 109.642815][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 109.653682][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 109.653788][ T9] usb 4-1: Product: syz
[ 109.653862][ T9] usb 4-1: Manufacturer: syz
[ 109.700485][ T3981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 109.700603][ T3981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 109.700692][ T3981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 109.913737][ T9] redrat3 4-1:1.0: Problem fetching firmware ID
[ 109.925411][ T9] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 109.982406][ T9] rc_core: IR keymap rc-hauppauge not found
[ 109.982474][ T9] Registered IR keymap rc-empty
[ 109.991775][ T9] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0
[ 110.012120][ T9] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input5
[ 110.026480][ T9] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 110.027462][ T9] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 110.027630][ T9] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 110.051700][ T9] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 110.066446][ T9] usb 4-1: USB disconnect, device number 2
[ 110.682942][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 110.833352][ T9] usb 4-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=1.00
[ 110.835898][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 110.836026][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 110.836109][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 110.839869][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 110.839977][ T9] usb 4-1: Product: syz
[ 110.840032][ T9] usb 4-1: Manufacturer: syz
[ 110.877119][ T3987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 110.877347][ T3987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 110.877539][ T3987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 111.088113][ T9] redrat3 4-1:1.0: Problem fetching firmware ID
[ 111.097698][ T9] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 111.162403][ T9] rc_core: IR keymap rc-hauppauge not found
[ 111.162459][ T9] Registered IR keymap rc-empty
[ 111.166938][ T9] rc rc1: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc1
[ 111.178652][ T9] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc1/input6
[ 111.201384][ T9] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 111.202450][ T9] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 111.202600][ T9] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 111.223210][ T9] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 111.240309][ T9] usb 4-1: USB disconnect, device number 3
[ 111.852488][ T2998] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 112.002998][ T2998] usb 4-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=1.00
[ 112.005495][ T2998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 112.005601][ T2998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 112.005698][ T2998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 112.008893][ T2998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 112.009096][ T2998] usb 4-1: Product: syz
[ 112.009151][ T2998] usb 4-1: Manufacturer: syz
[ 112.033724][ T3991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 112.033954][ T3991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 112.034161][ T3991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 112.240757][ T2998] redrat3 4-1:1.0: Problem fetching firmware ID
[ 112.248362][ T2998] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 112.314394][ T2998] rc_core: IR keymap rc-hauppauge not found
[ 112.321305][ T2998] Registered IR keymap rc-empty
[ 112.328235][ T2998] rc rc2: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc2
[ 112.338559][ T2998] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc2/input7
[ 112.351358][ T2998] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 112.360600][ T2998] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 112.360673][ T2998] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 112.380876][ T2998] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 112.392073][ T2998] usb 4-1: USB disconnect, device number 4
[ 113.002490][ T2998] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 113.152994][ T2998] usb 4-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=1.00
[ 113.155215][ T2998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 113.155334][ T2998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 113.155433][ T2998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 113.158294][ T2998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 113.158391][ T2998] usb 4-1: Product: syz
[ 113.158468][ T2998] usb 4-1: Manufacturer: syz
[ 113.176140][ T3994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 113.176358][ T3994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 113.176578][ T3994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 113.384809][ T2998] redrat3 4-1:1.0: Problem fetching firmware ID
[ 113.392924][ T2998] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 113.452428][ T2998] rc_core: IR keymap rc-hauppauge not found
[ 113.452484][ T2998] Registered IR keymap rc-empty
[ 113.459743][ T2998] rc rc3: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc3
[ 113.466436][ T2998] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc3/input8
[ 113.481468][ T2998] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 113.483044][ T2998] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 113.483194][ T2998] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 113.499190][ T2998] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 113.520121][ T2998] usb 4-1: USB disconnect, device number 5
[ 114.142457][ T2998] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 114.293043][ T2998] usb 4-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=1.00
[ 114.303255][ T2998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 114.303313][ T2998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 114.303483][ T2998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 114.306954][ T2998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 114.307048][ T2998] usb 4-1: Product: syz
[ 114.307110][ T2998] usb 4-1: Manufacturer: syz
[ 114.335783][ T3997] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 114.336039][ T3997] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 114.336243][ T3997] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 114.545974][ T2998] redrat3 4-1:1.0: Problem fetching firmware ID
[ 114.553800][ T2998] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 114.612391][ T2998] rc_core: IR keymap rc-hauppauge not found
[ 114.612442][ T2998] Registered IR keymap rc-empty
[ 114.619675][ T2998] rc rc4: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc4
[ 114.628878][ T2998] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc4/input9
[ 114.639352][ T2998] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 114.640818][ T2998] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 114.640934][ T2998] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 114.673450][ T2998] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 114.685743][ T2998] usb 4-1: USB disconnect, device number 6
[ 114.697398][ T2865] ==================================================================
** replaying previous printk message **
[ 114.697398][ T2865] ==================================================================
[ 114.697419][ T2865] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[ 114.697467][ T2865] Read of size 1 at addr ffff8881062b3758 by task udevd/2865
[ 114.697493][ T2865]
[ 114.697520][ T2865] CPU: 1 UID: 0 PID: 2865 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy)
[ 114.697557][ T2865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 114.697589][ T2865] Call Trace:
[ 114.697600][ T2865]
[ 114.697613][ T2865] dump_stack_lvl+0x100/0x190
[ 114.697668][ T2865] print_report+0x13d/0x4b0
[ 114.697717][ T2865] ? __virt_addr_valid+0x239/0x430
[ 114.697772][ T2865] ? string+0x471/0x4d0
[ 114.697807][ T2865] kasan_report+0xdf/0x1c0
[ 114.697844][ T2865] ? string+0x471/0x4d0
[ 114.697885][ T2865] string+0x471/0x4d0
[ 114.697923][ T2865] ? __pfx_string+0x10/0x10
[ 114.697965][ T2865] vsnprintf+0x422/0x1300
[ 114.698010][ T2865] ? __pfx_vsnprintf+0x10/0x10
[ 114.698050][ T2865] ? ksys_read+0x12a/0x250
[ 114.698088][ T2865] ? do_syscall_64+0x119/0x710
[ 114.698131][ T2865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.698167][ T2865] add_uevent_var+0x183/0x3a0
[ 114.698203][ T2865] ? __pfx_add_uevent_var+0x10/0x10
[ 114.698234][ T2865] ? __pfx_rc_dev_uevent+0x10/0x10
[ 114.698260][ T2865] rc_dev_uevent+0x17d/0x1c0
[ 114.698284][ T2865] dev_uevent+0x2f1/0x870
[ 114.698312][ T2865] ? __pfx_dev_uevent+0x10/0x10
[ 114.698346][ T2865] ? kasan_save_track+0x14/0x30
[ 114.698367][ T2865] ? __kasan_kmalloc+0x8f/0xa0
[ 114.698404][ T2865] ? __kmalloc_cache_noprof+0x2d8/0x680
[ 114.698428][ T2865] ? uevent_show+0x166/0x3a0
[ 114.698465][ T2865] ? __pfx_uevent_show+0x10/0x10
[ 114.698499][ T2865] uevent_show+0x1ca/0x3a0
[ 114.698534][ T2865] ? __pfx_uevent_show+0x10/0x10
[ 114.698569][ T2865] dev_attr_show+0x52/0xa0
[ 114.698595][ T2865] ? __pfx_dev_attr_show+0x10/0x10
[ 114.698621][ T2865] sysfs_kf_seq_show+0x217/0x3f0
[ 114.698649][ T2865] seq_read_iter+0x32f/0x1270
[ 114.698687][ T2865] kernfs_fop_read_iter+0x46c/0x610
[ 114.698708][ T2865] ? security_file_permission+0x21/0x80
[ 114.698735][ T2865] ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 114.698758][ T2865] vfs_read+0x82e/0xb40
[ 114.698787][ T2865] ? __pfx_vfs_read+0x10/0x10
[ 114.698822][ T2865] ? __pfx___schedule+0x10/0x10
[ 114.698847][ T2865] ksys_read+0x12a/0x250
[ 114.698874][ T2865] ? __pfx_ksys_read+0x10/0x10
[ 114.698902][ T2865] ? trace_hardirqs_off+0x70/0x170
[ 114.698928][ T2865] do_syscall_64+0x119/0x710
[ 114.698960][ T2865] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.698988][ T2865] RIP: 0033:0x7f9edf13c407
[ 114.699010][ T2865] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 114.699033][ T2865] RSP: 002b:00007ffe6a548860 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 114.699055][ T2865] RAX: ffffffffffffffda RBX: 00007f9edf04e880 RCX: 00007f9edf13c407
[ 114.699071][ T2865] RDX: 0000000000001000 RSI: 0000556c052cb150 RDI: 000000000000000c
[ 114.699086][ T2865] RBP: 00007f9edf284ff0 R08: 0000000000000000 R09: 0000000000000000
[ 114.699100][ T2865] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 114.699114][ T2865] R13: 00007f9edf284ea0 R14: 0000000000000000 R15: 0000556c05327cd0
[ 114.699136][ T2865]
[ 114.699144][ T2865]
[ 114.699149][ T2865] Allocated by task 2998:
[ 114.699163][ T2865] kasan_save_stack+0x30/0x50
[ 114.699183][ T2865] kasan_save_track+0x14/0x30
[ 114.699201][ T2865] __kasan_kmalloc+0x8f/0xa0
[ 114.699235][ T2865] __kmalloc_cache_noprof+0x2d8/0x680
[ 114.699257][ T2865] redrat3_dev_probe+0x326/0x2b50
[ 114.699278][ T2865] usb_probe_interface+0x386/0x9b0
[ 114.699300][ T2865] really_probe+0x241/0xa60
[ 114.699325][ T2865] __driver_probe_device+0x210/0x460
[ 114.699346][ T2865] driver_probe_device+0x4a/0x140
[ 114.699366][ T2865] __device_attach_driver+0x1df/0x320
[ 114.699387][ T2865] bus_for_each_drv+0x159/0x1e0
[ 114.699416][ T2865] __device_attach+0x1e4/0x4d0
[ 114.699436][ T2865] device_initial_probe+0xaf/0xd0
[ 114.699458][ T2865] bus_probe_device+0x64/0x160
[ 114.699490][ T2865] device_add+0x121d/0x1970
[ 114.699517][ T2865] usb_set_configuration+0xd97/0x1c60
[ 114.699551][ T2865] usb_generic_driver_probe+0xa1/0xe0
[ 114.699580][ T2865] usb_probe_device+0xef/0x400
[ 114.699597][ T2865] really_probe+0x241/0xa60
[ 114.699616][ T2865] __driver_probe_device+0x210/0x460
[ 114.699635][ T2865] driver_probe_device+0x4a/0x140
[ 114.699655][ T2865] __device_attach_driver+0x1df/0x320
[ 114.699675][ T2865] bus_for_each_drv+0x159/0x1e0
[ 114.699703][ T2865] __device_attach+0x1e4/0x4d0
[ 114.699723][ T2865] device_initial_probe+0xaf/0xd0
[ 114.699744][ T2865] bus_probe_device+0x64/0x160
[ 114.699775][ T2865] device_add+0x121d/0x1970
[ 114.699798][ T2865] usb_new_device.part.0+0xcc2/0x1686
[ 114.699831][ T2865] hub_event.cold+0x51a/0xe9d
[ 114.699860][ T2865] process_one_work+0xac7/0x1b10
[ 114.699894][ T2865] worker_thread+0x5ef/0xe50
[ 114.699927][ T2865] kthread+0x373/0x450
[ 114.699956][ T2865] ret_from_fork+0x69f/0xc90
[ 114.699976][ T2865] ret_from_fork_asm+0x1a/0x30
[ 114.700000][ T2865]
[ 114.700004][ T2865] Freed by task 2998:
[ 114.700014][ T2865] kasan_save_stack+0x30/0x50
[ 114.700031][ T2865] kasan_save_track+0x14/0x30
[ 114.700049][ T2865] kasan_save_free_info+0x3b/0x70
[ 114.700077][ T2865] __kasan_slab_free+0x43/0x70
[ 114.700096][ T2865] kfree+0x20c/0x650
[ 114.700114][ T2865] redrat3_dev_probe+0x107a/0x2b50
[ 114.700134][ T2865] usb_probe_interface+0x386/0x9b0
[ 114.700155][ T2865] really_probe+0x241/0xa60
[ 114.700174][ T2865] __driver_probe_device+0x210/0x460
[ 114.700193][ T2865] driver_probe_device+0x4a/0x140
[ 114.700213][ T2865] __device_attach_driver+0x1df/0x320
[ 114.700233][ T2865] bus_for_each_drv+0x159/0x1e0
[ 114.700262][ T2865] __device_attach+0x1e4/0x4d0
[ 114.700281][ T2865] device_initial_probe+0xaf/0xd0
[ 114.700302][ T2865] bus_probe_device+0x64/0x160
[ 114.700339][ T2865] device_add+0x121d/0x1970
[ 114.700362][ T2865] usb_set_configuration+0xd97/0x1c60
[ 114.700396][ T2865] usb_generic_driver_probe+0xa1/0xe0
[ 114.700425][ T2865] usb_probe_device+0xef/0x400
[ 114.700444][ T2865] really_probe+0x241/0xa60
[ 114.700465][ T2865] __driver_probe_device+0x210/0x460
[ 114.700485][ T2865] driver_probe_device+0x4a/0x140
[ 114.700506][ T2865] __device_attach_driver+0x1df/0x320
[ 114.700527][ T2865] bus_for_each_drv+0x159/0x1e0
[ 114.700556][ T2865] __device_attach+0x1e4/0x4d0
[ 114.700576][ T2865] device_initial_probe+0xaf/0xd0
[ 114.700597][ T2865] bus_probe_device+0x64/0x160
[ 114.700629][ T2865] device_add+0x121d/0x1970
[ 114.700653][ T2865] usb_new_device.part.0+0xcc2/0x1686
[ 114.700684][ T2865] hub_event.cold+0x51a/0xe9d
[ 114.700714][ T2865] process_one_work+0xac7/0x1b10
[ 114.700748][ T2865] worker_thread+0x5ef/0xe50
[ 114.700782][ T2865] kthread+0x373/0x450
[ 114.700811][ T2865] ret_from_fork+0x69f/0xc90
[ 114.700833][ T2865] ret_from_fork_asm+0x1a/0x30
[ 114.700858][ T2865]
[ 114.700863][ T2865] The buggy address belongs to the object at ffff8881062b3000
[ 114.700863][ T2865] which belongs to the cache kmalloc-2k of size 2048
[ 114.700880][ T2865] The buggy address is located 1880 bytes inside of
[ 114.700880][ T2865] freed 2048-byte region [ffff8881062b3000, ffff8881062b3800)
[ 114.700903][ T2865]
[ 114.700908][ T2865] The buggy address belongs to the physical page:
[ 114.700925][ T2865] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1062b0
[ 114.700948][ T2865] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 114.700966][ T2865] flags: 0x200000000000040(head|node=0|zone=2)
[ 114.700986][ T2865] page_type: f5(slab)
[ 114.701006][ T2865] raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 114.701029][ T2865] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 114.701051][ T2865] head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 114.701071][ T2865] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 114.701092][ T2865] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 114.701112][ T2865] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 114.701125][ T2865] page dumped because: kasan: bad access detected
[ 114.701136][ T2865] page_owner tracks the page as allocated
[ 114.701143][ T2865] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2998, tgid 2998 (kworker/1:2), ts 114359376109
[ 114.701179][ T2865] post_alloc_hook+0xfd/0x120
[ 114.701214][ T2865] get_page_from_freelist+0xf4b/0x3440
[ 114.701236][ T2865] __alloc_frozen_pages_noprof+0x2d7/0x2f70
[ 114.701258][ T2865] new_slab+0xa9/0x6e0
[ 114.701279][ T2865] refill_objects+0xe3/0x410
[ 114.701301][ T2865] __pcs_replace_empty_main+0x35e/0x650
[ 114.701329][ T2865] __kmalloc_cache_noprof+0x4a1/0x680
[ 114.701350][ T2865] redrat3_dev_probe+0x326/0x2b50
[ 114.701371][ T2865] usb_probe_interface+0x386/0x9b0
[ 114.701393][ T2865] really_probe+0x241/0xa60
[ 114.701411][ T2865] __driver_probe_device+0x210/0x460
[ 114.701432][ T2865] driver_probe_device+0x4a/0x140
[ 114.701452][ T2865] __device_attach_driver+0x1df/0x320
[ 114.701473][ T2865] bus_for_each_drv+0x159/0x1e0
[ 114.701502][ T2865] __device_attach+0x1e4/0x4d0
[ 114.701522][ T2865] device_initial_probe+0xaf/0xd0
[ 114.701544][ T2865] page last free pid 2865 tgid 2865 ts 110445233033 stack trace:
[ 114.701558][ T2865] __free_frozen_pages+0x714/0xfc0
[ 114.701591][ T2865] qlist_free_all+0x47/0xf0
[ 114.701622][ T2865] kasan_quarantine_reduce+0x1a0/0x1f0
[ 114.701655][ T2865] __kasan_slab_alloc+0x4e/0x70
[ 114.701675][ T2865] __kvmalloc_node_noprof+0x2f7/0x950
[ 114.701702][ T2865] seq_read_iter+0x819/0x1270
[ 114.701730][ T2865] kernfs_fop_read_iter+0x46c/0x610
[ 114.701749][ T2865] vfs_read+0x82e/0xb40
[ 114.701773][ T2865] ksys_read+0x12a/0x250
[ 114.701798][ T2865] do_syscall_64+0x119/0x710
[ 114.701829][ T2865] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.701852][ T2865]
[ 114.701856][ T2865] Memory state around the buggy address:
[ 114.701867][ T2865] ffff8881062b3600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 114.701883][ T2865] ffff8881062b3680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 114.701899][ T2865] >ffff8881062b3700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 114.701911][ T2865] ^
[ 114.701923][ T2865] ffff8881062b3780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 114.701939][ T2865] ffff8881062b3800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 114.701951][ T2865] ==================================================================
[ 114.710011][ T2865] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 115.761376][ T2865] CPU: 1 UID: 0 PID: 2865 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy)
[ 115.770288][ T2865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 115.780597][ T2865] Call Trace:
[ 115.783926][ T2865]
[ 115.786912][ T2865] dump_stack_lvl+0x100/0x190
[ 115.791710][ T2865] vpanic+0x553/0x970
[ 115.795852][ T2865] ? __pfx_vpanic+0x10/0x10
[ 115.800545][ T2865] ? string+0x471/0x4d0
[ 115.804779][ T2865] panic+0xd1/0xe0
[ 115.808559][ T2865] ? __pfx_panic+0x10/0x10
[ 115.813040][ T2865] ? string+0x471/0x4d0
[ 115.817264][ T2865] ? preempt_schedule_common+0x3c/0xb0
[ 115.822797][ T2865] check_panic_on_warn.cold+0x19/0x34
[ 115.828242][ T2865] end_report.part.0+0x3a/0x90
[ 115.833095][ T2865] kasan_report.cold+0xe/0x18
[ 115.838037][ T2865] ? string+0x471/0x4d0
[ 115.842295][ T2865] string+0x471/0x4d0
[ 115.846345][ T2865] ? __pfx_string+0x10/0x10
[ 115.850913][ T2865] vsnprintf+0x422/0x1300
[ 115.855317][ T2865] ? __pfx_vsnprintf+0x10/0x10
[ 115.860127][ T2865] ? ksys_read+0x12a/0x250
[ 115.864574][ T2865] ? do_syscall_64+0x119/0x710
[ 115.869369][ T2865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.875497][ T2865] add_uevent_var+0x183/0x3a0
[ 115.880212][ T2865] ? __pfx_add_uevent_var+0x10/0x10
[ 115.885447][ T2865] ? __pfx_rc_dev_uevent+0x10/0x10
[ 115.890585][ T2865] rc_dev_uevent+0x17d/0x1c0
[ 115.895212][ T2865] dev_uevent+0x2f1/0x870
[ 115.899583][ T2865] ? __pfx_dev_uevent+0x10/0x10
[ 115.904475][ T2865] ? kasan_save_track+0x14/0x30
[ 115.909454][ T2865] ? __kasan_kmalloc+0x8f/0xa0
[ 115.914256][ T2865] ? __kmalloc_cache_noprof+0x2d8/0x680
[ 115.919933][ T2865] ? uevent_show+0x166/0x3a0
[ 115.924575][ T2865] ? __pfx_uevent_show+0x10/0x10
[ 115.929646][ T2865] uevent_show+0x1ca/0x3a0
[ 115.934110][ T2865] ? __pfx_uevent_show+0x10/0x10
[ 115.939094][ T2865] dev_attr_show+0x52/0xa0
[ 115.943536][ T2865] ? __pfx_dev_attr_show+0x10/0x10
[ 115.948678][ T2865] sysfs_kf_seq_show+0x217/0x3f0
[ 115.953657][ T2865] seq_read_iter+0x32f/0x1270
[ 115.958393][ T2865] kernfs_fop_read_iter+0x46c/0x610
[ 115.963887][ T2865] ? security_file_permission+0x21/0x80
[ 115.969468][ T2865] ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 115.976025][ T2865] vfs_read+0x82e/0xb40
[ 115.980327][ T2865] ? __pfx_vfs_read+0x10/0x10
[ 115.985042][ T2865] ? __pfx___schedule+0x10/0x10
[ 115.989938][ T2865] ksys_read+0x12a/0x250
[ 115.994210][ T2865] ? __pfx_ksys_read+0x10/0x10
[ 115.999090][ T2865] ? trace_hardirqs_off+0x70/0x170
[ 116.004225][ T2865] do_syscall_64+0x119/0x710
[ 116.008859][ T2865] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.014775][ T2865] RIP: 0033:0x7f9edf13c407
[ 116.019207][ T2865] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 116.038927][ T2865] RSP: 002b:00007ffe6a548860 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 116.047366][ T2865] RAX: ffffffffffffffda RBX: 00007f9edf04e880 RCX: 00007f9edf13c407
[ 116.055364][ T2865] RDX: 0000000000001000 RSI: 0000556c052cb150 RDI: 000000000000000c
[ 116.063361][ T2865] RBP: 00007f9edf284ff0 R08: 0000000000000000 R09: 0000000000000000
[ 116.071350][ T2865] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 116.079342][ T2865] R13: 00007f9edf284ea0 R14: 0000000000000000 R15: 0000556c05327cd0
[ 116.087433][ T2865]
[ 116.091054][ T2865] Kernel Offset: disabled
[ 116.095405][ T2865] Rebooting in 86400 seconds..