Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts.
2026/09/29 05:51:56 parsed 1 programs
[ 50.727038][ T29] kauditd_printk_skb: 1 callbacks suppressed
[ 50.727128][ T29] audit: type=1400 audit(1790661116.923:77): avc: denied { node_bind } for pid=2989 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
2026/09/29 05:51:57 serving rpc on tcp://39893
[ 50.756433][ T29] audit: type=1400 audit(1790661116.953:78): avc: denied { module_request } for pid=2989 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 53.212945][ T29] audit: type=1400 audit(1790661119.403:79): avc: denied { mounton } for pid=2999 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 53.237733][ T29] audit: type=1400 audit(1790661119.433:80): avc: denied { mount } for pid=2999 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 53.241248][ T2999] cgroup: Unknown subsys name 'net'
[ 53.243566][ T29] audit: type=1400 audit(1790661119.433:81): avc: denied { unmount } for pid=2999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 53.416853][ T2999] cgroup: Unknown subsys name 'cpuset'
[ 53.425132][ T2999] cgroup: Unknown subsys name 'rlimit'
[ 53.604561][ T29] audit: type=1400 audit(1790661119.793:82): avc: denied { setattr } for pid=2999 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 53.628779][ T29] audit: type=1400 audit(1790661119.823:83): avc: denied { create } for pid=2999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 53.649476][ T29] audit: type=1400 audit(1790661119.823:84): avc: denied { write } for pid=2999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 53.649549][ T29] audit: type=1400 audit(1790661119.823:85): avc: denied { read } for pid=2999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 53.670574][ T29] audit: type=1400 audit(1790661119.843:86): avc: denied { sys_module } for pid=2999 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 53.783537][ T3003] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 53.839878][ T2999] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 55.635709][ T3006] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 55.747173][ T29] kauditd_printk_skb: 23 callbacks suppressed
[ 55.747248][ T29] audit: type=1400 audit(1790661121.943:110): avc: denied { create } for pid=3013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 55.755977][ T29] audit: type=1400 audit(1790661121.943:111): avc: denied { mount } for pid=3013 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 55.758485][ T29] audit: type=1400 audit(1790661121.943:112): avc: denied { mounton } for pid=3013 comm="syz-executor" path="/root/syzkaller.Nz6F2N/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 57.070041][ T29] audit: type=1400 audit(1790661123.253:113): avc: denied { create } for pid=3044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 57.070143][ T29] audit: type=1400 audit(1790661123.263:114): avc: denied { sys_admin } for pid=3044 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 57.138784][ T29] audit: type=1400 audit(1790661123.333:115): avc: denied { sys_chroot } for pid=3045 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 57.343881][ T29] audit: type=1401 audit(1790661123.533:116): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 58.142568][ T3073] modprobe (3073) used greatest stack depth: 22568 bytes left
[ 70.039574][ T29] audit: type=1400 audit(1790661136.233:117): avc: denied { create } for pid=3513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 70.309526][ T29] audit: type=1400 audit(1790661136.503:118): avc: denied { create } for pid=3523 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 70.310811][ T29] audit: type=1400 audit(1790661136.503:119): avc: denied { setattr } for pid=3523 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 70.310871][ T29] audit: type=1400 audit(1790661136.503:120): avc: denied { read write } for pid=3523 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 70.310923][ T29] audit: type=1400 audit(1790661136.503:121): avc: denied { open } for pid=3523 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
2026/09/29 05:52:16 executed programs: 0
2026/09/29 05:52:29 executed programs: 2
[ 82.939492][ T29] audit: type=1400 audit(1790661149.133:122): avc: denied { read write } for pid=3980 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 82.939798][ T29] audit: type=1400 audit(1790661149.133:123): avc: denied { open } for pid=3980 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 82.941146][ T29] audit: type=1400 audit(1790661149.133:124): avc: denied { ioctl } for pid=3980 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 83.174586][ T1127] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 83.325876][ T1127] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 83.327725][ T1127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 83.327787][ T1127] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 83.327836][ T1127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 84.144912][ T1127] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -110
[ 85.942883][ T1127] usb 4-1: USB disconnect, device number 2
[ 86.284594][ T1127] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 86.435538][ T1127] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 86.436766][ T1127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 86.436823][ T1127] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 86.436871][ T1127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
2026/09/29 05:52:35 executed programs: 4
[ 88.977601][ T24] usb 4-1: USB disconnect, device number 3
[ 89.324323][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 89.474848][ T24] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 89.476002][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 89.476069][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 89.476117][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 90.294884][ T24] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -110
[ 91.999023][ T24] usb 4-1: USB disconnect, device number 4
[ 92.344352][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 92.494973][ T24] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 92.496139][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 92.496196][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 92.496245][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
2026/09/29 05:52:41 executed programs: 6
[ 95.030057][ T9] usb 4-1: USB disconnect, device number 5
[ 95.364333][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 95.514846][ T9] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 95.516034][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 95.516089][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 95.516137][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 98.338754][ T39] usb 4-1: USB disconnect, device number 6
[ 98.684373][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 98.835047][ T39] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 98.836139][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 98.836194][ T39] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 98.836241][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
2026/09/29 05:52:47 executed programs: 8
[ 101.364226][ T9] usb 4-1: USB disconnect, device number 7
[ 101.714377][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 101.864853][ T9] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 101.865936][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 101.865991][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 101.866039][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 102.674650][ T9] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -110
[ 104.381593][ T1127] usb 4-1: USB disconnect, device number 8
[ 104.704408][ T1127] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 104.855399][ T1127] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 104.856502][ T1127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 104.856564][ T1127] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 104.856612][ T1127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
2026/09/29 05:52:53 executed programs: 10
[ 107.401351][ T39] usb 4-1: USB disconnect, device number 9
[ 107.744410][ T39] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 107.894928][ T39] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 107.896124][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 107.896185][ T39] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 107.896234][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 110.714641][ T39] ==================================================================
[ 110.714666][ T39] BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x173b/0x1a00
[ 110.714708][ T39] Write of size 4 at addr ffff888122fbb074 by task kworker/1:1/39
[ 110.714732][ T39]
[ 110.714743][ T39] CPU: 1 UID: 0 PID: 39 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(lazy)
[ 110.714775][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 110.714794][ T39] Workqueue: events rtsx_usb_ms_handle_req
[ 110.714827][ T39] Call Trace:
[ 110.714838][ T39]
[ 110.714848][ T39] dump_stack_lvl+0x100/0x190
[ 110.714886][ T39] print_report+0x13d/0x4b0
[ 110.714913][ T39] ? __virt_addr_valid+0x239/0x430
[ 110.714942][ T39] ? rtsx_usb_ms_handle_req+0x173b/0x1a00
[ 110.714961][ T39] kasan_report+0xdf/0x1c0
[ 110.714980][ T39] ? rtsx_usb_ms_handle_req+0x173b/0x1a00
[ 110.715002][ T39] rtsx_usb_ms_handle_req+0x173b/0x1a00
[ 110.715024][ T39] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10
[ 110.715043][ T39] ? process_one_work+0xa2c/0x1b10
[ 110.715072][ T39] ? process_one_work+0x906/0x1b10
[ 110.715098][ T39] ? process_one_work+0x906/0x1b10
[ 110.715127][ T39] process_one_work+0xac7/0x1b10
[ 110.715158][ T39] ? __pfx_process_one_work+0x10/0x10
[ 110.715187][ T39] ? lock_acquire+0x1d1/0x380
[ 110.715206][ T39] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10
[ 110.715227][ T39] worker_thread+0x5ef/0xe50
[ 110.715256][ T39] ? __pfx_worker_thread+0x10/0x10
[ 110.715284][ T39] ? kthread+0x13a/0x450
[ 110.715308][ T39] ? __pfx_worker_thread+0x10/0x10
[ 110.715334][ T39] kthread+0x373/0x450
[ 110.715359][ T39] ? __pfx_kthread+0x10/0x10
[ 110.715391][ T39] ret_from_fork+0x69f/0xc90
[ 110.715409][ T39] ? __pfx_ret_from_fork+0x10/0x10
[ 110.715427][ T39] ? __switch_to+0x7f6/0x10e0
[ 110.715449][ T39] ? __switch_to_asm+0x39/0x70
[ 110.715469][ T39] ? __pfx_kthread+0x10/0x10
[ 110.715494][ T39] ret_from_fork_asm+0x1a/0x30
[ 110.715518][ T39]
[ 110.715524][ T39]
[ 110.715528][ T39] Allocated by task 44:
[ 110.715537][ T39] kasan_save_stack+0x30/0x50
[ 110.715551][ T39] kasan_save_track+0x14/0x30
[ 110.715565][ T39] __kasan_kmalloc+0x8f/0xa0
[ 110.715591][ T39] __kmalloc_cache_noprof+0x2d8/0x680
[ 110.715608][ T39] memstick_check+0x2c1/0x10d0
[ 110.715623][ T39] process_one_work+0xac7/0x1b10
[ 110.715648][ T39] worker_thread+0x5ef/0xe50
[ 110.715673][ T39] kthread+0x373/0x450
[ 110.715695][ T39] ret_from_fork+0x69f/0xc90
[ 110.715710][ T39] ret_from_fork_asm+0x1a/0x30
[ 110.715728][ T39]
[ 110.715731][ T39] Freed by task 44:
[ 110.715738][ T39] kasan_save_stack+0x30/0x50
[ 110.715752][ T39] kasan_save_track+0x14/0x30
[ 110.715766][ T39] kasan_save_free_info+0x3b/0x70
[ 110.715787][ T39] __kasan_slab_free+0x43/0x70
[ 110.715802][ T39] kfree+0x20c/0x650
[ 110.715816][ T39] memstick_check+0x72b/0x10d0
[ 110.715831][ T39] process_one_work+0xac7/0x1b10
[ 110.715857][ T39] worker_thread+0x5ef/0xe50
[ 110.715902][ T39] kthread+0x373/0x450
[ 110.715934][ T39] ret_from_fork+0x69f/0xc90
[ 110.715956][ T39] ret_from_fork_asm+0x1a/0x30
[ 110.715977][ T39]
[ 110.715981][ T39] The buggy address belongs to the object at ffff888122fbb000
[ 110.715981][ T39] which belongs to the cache kmalloc-2k of size 2048
[ 110.715995][ T39] The buggy address is located 116 bytes inside of
[ 110.715995][ T39] freed 2048-byte region [ffff888122fbb000, ffff888122fbb800)
[ 110.716011][ T39]
[ 110.716015][ T39] The buggy address belongs to the physical page:
[ 110.716023][ T39] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888122fbf000 pfn:0x122fb8
[ 110.716039][ T39] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 110.716052][ T39] flags: 0x200000000000240(workingset|head|node=0|zone=2)
[ 110.716067][ T39] page_type: f5(slab)
[ 110.716082][ T39] raw: 0200000000000240 ffff888100042000 ffffea000413ac10 ffff888100040948
[ 110.716097][ T39] raw: ffff888122fbf000 0000000000080007 00000000f5000000 0000000000000000
[ 110.716113][ T39] head: 0200000000000240 ffff888100042000 ffffea000413ac10 ffff888100040948
[ 110.716127][ T39] head: ffff888122fbf000 0000000000080007 00000000f5000000 0000000000000000
[ 110.716142][ T39] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 110.716157][ T39] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 110.716166][ T39] page dumped because: kasan: bad access detected
[ 110.716174][ T39] page_owner tracks the page as allocated
[ 110.716180][ T39] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 44, tgid 44 (kworker/u8:3), ts 108906902817
[ 110.716208][ T39] post_alloc_hook+0xfd/0x120
[ 110.716235][ T39] get_page_from_freelist+0xf4b/0x3440
[ 110.716251][ T39] __alloc_frozen_pages_noprof+0x2d7/0x2f70
[ 110.716268][ T39] new_slab+0xa9/0x6e0
[ 110.716283][ T39] refill_objects+0xe3/0x410
[ 110.716300][ T39] __pcs_replace_empty_main+0x35e/0x650
[ 110.716316][ T39] __kmalloc_cache_noprof+0x4a1/0x680
[ 110.716332][ T39] device_create_groups_vargs+0x8a/0x270
[ 110.716354][ T39] device_create_with_groups+0xf4/0x130
[ 110.716377][ T39] led_classdev_register_ext+0x4d2/0x990
[ 110.716403][ T39] rtsx_usb_sdmmc_drv_probe+0x622/0x9a0
[ 110.716428][ T39] platform_probe+0x106/0x1d0
[ 110.716450][ T39] really_probe+0x241/0xa60
[ 110.716465][ T39] __driver_probe_device+0x210/0x460
[ 110.716480][ T39] driver_probe_device+0x4a/0x140
[ 110.716495][ T39] __device_attach_driver+0x1df/0x320
[ 110.716511][ T39] page last free pid 3982 tgid 3982 ts 107449464156 stack trace:
[ 110.716522][ T39] __free_frozen_pages+0x714/0xfc0
[ 110.716547][ T39] qlist_free_all+0x47/0xf0
[ 110.716570][ T39] kasan_quarantine_reduce+0x1a0/0x1f0
[ 110.716595][ T39] __kasan_slab_alloc+0x4e/0x70
[ 110.716610][ T39] kmem_cache_alloc_lru_noprof+0x260/0x650
[ 110.716631][ T39] shmem_alloc_inode+0x25/0x50
[ 110.716656][ T39] alloc_inode+0x68/0x250
[ 110.716675][ T39] new_inode+0x22/0x1c0
[ 110.716693][ T39] __shmem_get_inode+0x1df/0xec0
[ 110.716708][ T39] shmem_mknod+0xcb/0x2e0
[ 110.716721][ T39] lookup_open+0x1255/0x1990
[ 110.716740][ T39] path_openat+0xa2c/0x2440
[ 110.716763][ T39] do_file_open+0x20e/0x430
[ 110.716787][ T39] do_sys_openat2+0x10f/0x1e0
[ 110.716801][ T39] __x64_sys_openat+0x12d/0x210
[ 110.716816][ T39] do_syscall_64+0x119/0x710
[ 110.716840][ T39]
[ 110.716843][ T39] Memory state around the buggy address:
[ 110.716851][ T39] ffff888122fbaf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 110.716863][ T39] ffff888122fbaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 110.716883][ T39] >ffff888122fbb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.716892][ T39] ^
[ 110.716901][ T39] ffff888122fbb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.716913][ T39] ffff888122fbb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.716922][ T39] ==================================================================
[ 110.716969][ T39] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 111.414883][ T39] CPU: 1 UID: 0 PID: 39 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(lazy)
[ 111.424098][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 111.434282][ T39] Workqueue: events rtsx_usb_ms_handle_req
[ 111.440144][ T39] Call Trace:
[ 111.443445][ T39]
[ 111.446389][ T39] dump_stack_lvl+0x100/0x190
[ 111.451099][ T39] vpanic+0x553/0x970
[ 111.455105][ T39] ? __pfx_vpanic+0x10/0x10
[ 111.459817][ T39] ? mark_held_locks+0x40/0x70
[ 111.465321][ T39] ? irqentry_exit+0x222/0x7b0
[ 111.470125][ T39] ? rtsx_usb_ms_handle_req+0x173b/0x1a00
[ 111.475871][ T39] panic+0xd1/0xe0
[ 111.479622][ T39] ? __pfx_panic+0x10/0x10
[ 111.484088][ T39] check_panic_on_warn.cold+0x19/0x34
[ 111.489487][ T39] end_report.part.0+0x3a/0x90
[ 111.494302][ T39] kasan_report.cold+0xe/0x18
[ 111.499038][ T39] ? rtsx_usb_ms_handle_req+0x173b/0x1a00
[ 111.504803][ T39] rtsx_usb_ms_handle_req+0x173b/0x1a00
[ 111.510382][ T39] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10
[ 111.516302][ T39] ? process_one_work+0xa2c/0x1b10
[ 111.521449][ T39] ? process_one_work+0x906/0x1b10
[ 111.526591][ T39] ? process_one_work+0x906/0x1b10
[ 111.531736][ T39] process_one_work+0xac7/0x1b10
[ 111.536725][ T39] ? __pfx_process_one_work+0x10/0x10
[ 111.542154][ T39] ? lock_acquire+0x1d1/0x380
[ 111.546853][ T39] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10
[ 111.552787][ T39] worker_thread+0x5ef/0xe50
[ 111.557433][ T39] ? __pfx_worker_thread+0x10/0x10
[ 111.562578][ T39] ? kthread+0x13a/0x450
[ 111.566869][ T39] ? __pfx_worker_thread+0x10/0x10
[ 111.572013][ T39] kthread+0x373/0x450
[ 111.576119][ T39] ? __pfx_kthread+0x10/0x10
[ 111.580743][ T39] ret_from_fork+0x69f/0xc90
[ 111.585356][ T39] ? __pfx_ret_from_fork+0x10/0x10
[ 111.590485][ T39] ? __switch_to+0x7f6/0x10e0
[ 111.595191][ T39] ? __switch_to_asm+0x39/0x70
[ 111.600012][ T39] ? __pfx_kthread+0x10/0x10
[ 111.604660][ T39] ret_from_fork_asm+0x1a/0x30
[ 111.609455][ T39]
[ 111.612823][ T39] Kernel Offset: disabled
[ 111.617171][ T39] Rebooting in 86400 seconds..