Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts.
2026/09/18 04:03:15 parsed 1 programs
2026/09/18 04:03:15 serving rpc on tcp://42569
[ 90.219965][ T29] audit: type=1400 audit(1789704195.088:77): avc: denied { node_bind } for pid=2984 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 90.221607][ T29] audit: type=1400 audit(1789704195.088:78): avc: denied { module_request } for pid=2984 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 92.626364][ T29] audit: type=1400 audit(1789704197.498:79): avc: denied { mounton } for pid=2992 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 92.650251][ T29] audit: type=1400 audit(1789704197.518:80): avc: denied { mount } for pid=2992 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 92.653741][ T2992] cgroup: Unknown subsys name 'net'
[ 92.658086][ T29] audit: type=1400 audit(1789704197.528:81): avc: denied { unmount } for pid=2992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 92.806497][ T2992] cgroup: Unknown subsys name 'cpuset'
[ 92.813751][ T2992] cgroup: Unknown subsys name 'rlimit'
[ 92.963585][ T29] audit: type=1400 audit(1789704197.828:82): avc: denied { setattr } for pid=2992 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 92.965888][ T29] audit: type=1400 audit(1789704197.838:83): avc: denied { create } for pid=2992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 92.965945][ T29] audit: type=1400 audit(1789704197.838:84): avc: denied { write } for pid=2992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 92.965993][ T29] audit: type=1400 audit(1789704197.838:85): avc: denied { read } for pid=2992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 93.002756][ T29] audit: type=1400 audit(1789704197.868:86): avc: denied { sys_module } for pid=2992 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 93.152715][ T2998] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 93.265050][ T2992] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.312587][ T29] kauditd_printk_skb: 20 callbacks suppressed
[ 95.312634][ T29] audit: type=1400 audit(1789704200.178:107): avc: denied { mount } for pid=3012 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 95.361655][ T29] audit: type=1400 audit(1789704200.228:108): avc: denied { mounton } for pid=3012 comm="syz-executor" path="/root/syzkaller.ZMAQeB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 95.480601][ T3004] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 95.550865][ T29] audit: type=1400 audit(1789704200.418:109): avc: denied { read write } for pid=3004 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 95.575423][ T29] audit: type=1400 audit(1789704200.418:110): avc: denied { open } for pid=3004 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 95.575495][ T29] audit: type=1400 audit(1789704200.418:111): avc: denied { ioctl } for pid=3004 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 96.710493][ T29] audit: type=1401 audit(1789704201.578:112): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 96.729456][ T29] audit: type=1400 audit(1789704201.598:113): avc: denied { create } for pid=3052 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 96.764028][ T29] audit: type=1400 audit(1789704201.628:114): avc: denied { setattr } for pid=3052 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 96.773333][ T29] audit: type=1400 audit(1789704201.638:115): avc: denied { read write } for pid=3052 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 96.773395][ T29] audit: type=1400 audit(1789704201.638:116): avc: denied { open } for pid=3052 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
2026/09/18 04:03:34 executed programs: 0
[ 109.980591][ T3006] syz-executor (3006) used greatest stack depth: 22616 bytes left
2026/09/18 04:04:28 executed programs: 10
[ 164.017294][ T29] kauditd_printk_skb: 5 callbacks suppressed
[ 164.017341][ T29] audit: type=1400 audit(1789704268.888:122): avc: denied { read write } for pid=5774 comm="syz.7.22" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 164.022185][ T29] audit: type=1400 audit(1789704268.888:123): avc: denied { open } for pid=5774 comm="syz.7.22" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 164.022864][ T29] audit: type=1400 audit(1789704268.888:124): avc: denied { ioctl } for pid=5774 comm="syz.7.22" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 164.264636][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 164.415254][ T9] usb 8-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 164.417597][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 164.417663][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 164.417712][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 164.464066][ T3027] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 164.534384][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 164.614698][ T3027] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 164.616209][ T3027] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 164.616263][ T3027] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 164.616310][ T3027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 164.634103][ T722] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 164.634172][ T5790] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 164.684593][ T24] usb 2-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 164.686001][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 164.686055][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 164.686102][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 164.784636][ T5790] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 164.785933][ T5790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 164.786022][ T5790] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 164.786070][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 164.825509][ T722] usb 7-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 164.835006][ T722] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 164.835099][ T722] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 164.835149][ T722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 167.006438][ T5831] usb 8-1: USB disconnect, device number 2
[ 167.208775][ T38] usb 1-1: USB disconnect, device number 2
[ 167.294539][ T11] usb 2-1: USB disconnect, device number 2
[ 167.381843][ T722] usb 7-1: USB disconnect, device number 2
[ 167.416009][ T3054] usb 4-1: USB disconnect, device number 2
[ 167.429339][ T56] rtsx_usb_ms rtsx_usb_ms.8.auto: Runtime PM usage count underflow!
[ 167.824051][ T5831] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 167.844050][ T38] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 167.844050][ T3054] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 167.851736][ T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 167.867001][ T722] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 167.974672][ T5831] usb 8-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 167.975688][ T5831] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 167.975741][ T5831] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 167.975816][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 167.994942][ T38] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 167.996414][ T38] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 167.996497][ T38] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 167.996543][ T38] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 168.045292][ T722] usb 7-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 168.045903][ T3054] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 168.046968][ T722] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 168.047020][ T722] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 168.047094][ T722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 168.048616][ T3054] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 168.048665][ T3054] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 168.048710][ T3054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 168.057715][ T11] usb 2-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 168.060971][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 168.061026][ T11] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 168.061083][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
2026/09/18 04:04:34 executed programs: 20
[ 170.038273][ T5790] usb 8-1: USB disconnect, device number 3
[ 170.243583][ T24] usb 1-1: USB disconnect, device number 3
[ 170.330662][ T3027] usb 2-1: USB disconnect, device number 3
[ 170.424997][ T3054] usb 7-1: USB disconnect, device number 3
[ 170.465914][ T9] usb 4-1: USB disconnect, device number 3
[ 170.475533][ T32] rtsx_usb_ms rtsx_usb_ms.5.auto: Runtime PM usage count underflow!
[ 170.844048][ T3054] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 170.874067][ T5790] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 170.874610][ T3027] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 170.904085][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 170.934049][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 170.994596][ T3054] usb 7-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 170.995659][ T3054] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 170.995713][ T3054] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 170.995759][ T3054] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 171.045116][ T5790] usb 8-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 171.055492][ T3027] usb 2-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 171.055585][ T9] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 171.056658][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 171.056709][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 171.056756][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 171.084614][ T5790] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 171.084737][ T5790] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 171.084786][ T5790] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 171.092422][ T3027] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 171.092477][ T3027] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 171.092552][ T3027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 171.184571][ T24] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 171.185631][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 171.185684][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 171.185730][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 173.064629][ T11] usb 8-1: USB disconnect, device number 4
[ 173.279947][ T5885] usb 1-1: USB disconnect, device number 4
[ 173.366030][ T5790] usb 2-1: USB disconnect, device number 4
[ 173.461938][ T722] usb 7-1: USB disconnect, device number 4
[ 173.511047][ T5795] usb 4-1: USB disconnect, device number 4
[ 173.914176][ T5795] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 173.934082][ T722] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 173.934289][ T5885] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 173.949272][ T5790] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 173.954034][ T11] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 174.064554][ T5795] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 174.065586][ T5795] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 174.065639][ T5795] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 174.065686][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 174.114909][ T722] usb 7-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 174.115157][ T11] usb 8-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 174.115546][ T5885] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 174.116831][ T11] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 174.116967][ T11] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 174.117014][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 174.119440][ T722] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 174.119505][ T722] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 174.119581][ T722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 174.121890][ T5885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 174.121939][ T5885] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 174.121982][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 174.185248][ T5790] usb 2-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 174.207369][ T5790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 174.207427][ T5790] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 174.207510][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
2026/09/18 04:04:41 executed programs: 30
[ 176.101562][ T5790] usb 8-1: USB disconnect, device number 5
[ 176.311848][ T11] usb 1-1: USB disconnect, device number 5
[ 176.397624][ T9] usb 2-1: USB disconnect, device number 5
[ 176.479469][ T5795] usb 7-1: USB disconnect, device number 5
[ 176.544717][ T5832] usb 4-1: USB disconnect, device number 5
[ 176.954059][ T5790] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 176.954059][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 176.984124][ T5795] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 176.984802][ T5832] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 177.004065][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 177.114757][ T11] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 177.115937][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 177.115991][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 177.116037][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 177.124084][ T5790] usb 8-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 177.148814][ T5795] usb 7-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 177.149029][ T5790] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 177.149158][ T5790] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 177.149206][ T5790] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 177.151187][ T5832] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 177.152969][ T5795] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 177.153019][ T5795] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 177.153065][ T5795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 177.155869][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 177.155926][ T5832] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 177.155972][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 177.217448][ T9] usb 2-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 177.249732][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 177.249789][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 177.249866][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 179.127795][ T5971] usb 8-1: USB disconnect, device number 6
[ 179.336927][ T5828] usb 1-1: USB disconnect, device number 6
[ 179.425696][ T24] usb 2-1: USB disconnect, device number 6
[ 179.510350][ T5834] usb 7-1: USB disconnect, device number 6
[ 179.575696][ T9] usb 4-1: USB disconnect, device number 6
[ 179.914092][ T5828] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 179.964064][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 179.974076][ T5971] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 179.994052][ T5834] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 180.064074][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 180.074634][ T5828] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 180.075885][ T5828] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 180.075940][ T5828] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 180.075987][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 180.135301][ T5971] usb 8-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 180.135445][ T24] usb 2-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 180.136544][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 180.136598][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 180.136675][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 180.174781][ T5834] usb 7-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 180.175844][ T5834] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 180.175896][ T5834] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 180.175984][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 180.194408][ T5971] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 180.194476][ T5971] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 180.194529][ T5971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 180.253232][ T9] usb 4-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 180.254310][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 180.254362][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 180.254437][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
2026/09/18 04:04:47 executed programs: 40
[ 182.168773][ T5790] usb 8-1: USB disconnect, device number 7
** replaying previous printk message **
[ 182.304208][ T3054] ==================================================================
[ 182.304226][ T3054] BUG: KASAN: slab-use-after-free in rtsx_usb_ms_handle_req+0x17ff/0x1a00
[ 182.304268][ T3054] Read of size 1 at addr ffff888116597071 by task kworker/0:3/3054
[ 182.304293][ T3054]
[ 182.304306][ T3054] CPU: 0 UID: 0 PID: 3054 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(lazy)
[ 182.304331][ T3054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 182.304343][ T3054] Workqueue: events rtsx_usb_ms_handle_req
[ 182.304364][ T3054] Call Trace:
[ 182.304371][ T3054]
[ 182.304378][ T3054] dump_stack_lvl+0x100/0x190
[ 182.304406][ T3054] print_report+0x13d/0x4b0
[ 182.304440][ T3054] ? __virt_addr_valid+0x239/0x430
[ 182.304469][ T3054] ? rtsx_usb_ms_handle_req+0x17ff/0x1a00
[ 182.304487][ T3054] kasan_report+0xdf/0x1c0
[ 182.304507][ T3054] ? rtsx_usb_ms_handle_req+0x17ff/0x1a00
[ 182.304528][ T3054] rtsx_usb_ms_handle_req+0x17ff/0x1a00
[ 182.304550][ T3054] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10
[ 182.304570][ T3054] ? process_one_work+0xa2c/0x1b10
[ 182.304598][ T3054] ? process_one_work+0x906/0x1b10
[ 182.304625][ T3054] ? process_one_work+0x906/0x1b10
[ 182.304653][ T3054] process_one_work+0xac7/0x1b10
[ 182.304684][ T3054] ? __pfx_process_one_work+0x10/0x10
[ 182.304711][ T3054] ? lock_acquire+0x1d1/0x380
[ 182.304731][ T3054] ? __pfx_rtsx_usb_ms_handle_req+0x10/0x10
[ 182.304751][ T3054] worker_thread+0x5ef/0xe50
[ 182.304780][ T3054] ? __pfx_worker_thread+0x10/0x10
[ 182.304808][ T3054] ? kthread+0x13a/0x450
[ 182.304832][ T3054] ? __pfx_worker_thread+0x10/0x10
[ 182.304858][ T3054] kthread+0x373/0x450
[ 182.304882][ T3054] ? __pfx_kthread+0x10/0x10
[ 182.304907][ T3054] ret_from_fork+0x69f/0xc90
[ 182.304928][ T3054] ? __pfx_ret_from_fork+0x10/0x10
[ 182.304946][ T3054] ? __switch_to+0x7f6/0x10e0
[ 182.304968][ T3054] ? __switch_to_asm+0x39/0x70
[ 182.304991][ T3054] ? __pfx_kthread+0x10/0x10
[ 182.305016][ T3054] ret_from_fork_asm+0x1a/0x30
[ 182.305040][ T3054]
[ 182.305046][ T3054]
[ 182.305050][ T3054] Allocated by task 347:
[ 182.305058][ T3054] kasan_save_stack+0x30/0x50
[ 182.305073][ T3054] kasan_save_track+0x14/0x30
[ 182.305089][ T3054] __kasan_kmalloc+0x8f/0xa0
[ 182.305127][ T3054] __kmalloc_cache_noprof+0x2d8/0x680
[ 182.305154][ T3054] memstick_check+0x2c1/0x10d0
[ 182.305174][ T3054] process_one_work+0xac7/0x1b10
[ 182.305199][ T3054] worker_thread+0x5ef/0xe50
[ 182.305224][ T3054] kthread+0x373/0x450
[ 182.305246][ T3054] ret_from_fork+0x69f/0xc90
[ 182.305260][ T3054] ret_from_fork_asm+0x1a/0x30
[ 182.305278][ T3054]
[ 182.305282][ T3054] Freed by task 347:
[ 182.305289][ T3054] kasan_save_stack+0x30/0x50
[ 182.305303][ T3054] kasan_save_track+0x14/0x30
[ 182.305317][ T3054] kasan_save_free_info+0x3b/0x70
[ 182.305340][ T3054] __kasan_slab_free+0x43/0x70
[ 182.305364][ T3054] kfree+0x20c/0x650
[ 182.305386][ T3054] memstick_check+0x72b/0x10d0
[ 182.305410][ T3054] process_one_work+0xac7/0x1b10
[ 182.305446][ T3054] worker_thread+0x5ef/0xe50
[ 182.305470][ T3054] kthread+0x373/0x450
[ 182.305492][ T3054] ret_from_fork+0x69f/0xc90
[ 182.305507][ T3054] ret_from_fork_asm+0x1a/0x30
[ 182.305525][ T3054]
[ 182.305528][ T3054] The buggy address belongs to the object at ffff888116597000
[ 182.305528][ T3054] which belongs to the cache kmalloc-2k of size 2048
[ 182.305542][ T3054] The buggy address is located 113 bytes inside of
[ 182.305542][ T3054] freed 2048-byte region [ffff888116597000, ffff888116597800)
[ 182.305558][ T3054]
[ 182.305562][ T3054] The buggy address belongs to the physical page:
[ 182.305569][ T3054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116590
[ 182.305585][ T3054] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 182.305597][ T3054] flags: 0x200000000000040(head|node=0|zone=2)
[ 182.305611][ T3054] page_type: f5(slab)
[ 182.305625][ T3054] raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 182.305640][ T3054] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 182.305655][ T3054] head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 182.305670][ T3054] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 182.305685][ T3054] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 182.305699][ T3054] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 182.305709][ T3054] page dumped because: kasan: bad access detected
[ 182.305717][ T3054] page_owner tracks the page as allocated
[ 182.305722][ T3054] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (kworker/1:5), ts 181253812514
[ 182.305750][ T3054] post_alloc_hook+0xfd/0x120
[ 182.305776][ T3054] get_page_from_freelist+0xf4b/0x3440
[ 182.305799][ T3054] __alloc_frozen_pages_noprof+0x2d7/0x2f70
[ 182.305816][ T3054] new_slab+0xa9/0x6e0
[ 182.305831][ T3054] refill_objects+0xe3/0x410
[ 182.305848][ T3054] __pcs_replace_empty_main+0x35e/0x650
[ 182.305864][ T3054] __kmalloc_cache_noprof+0x4a1/0x680
[ 182.305880][ T3054] usb_create_ep_devs+0x4d/0x2b0
[ 182.305897][ T3054] create_intf_ep_devs.isra.0+0x161/0x200
[ 182.305924][ T3054] usb_set_configuration+0xdb9/0x1c60
[ 182.305949][ T3054] usb_generic_driver_probe+0xa1/0xe0
[ 182.305971][ T3054] usb_probe_device+0xef/0x400
[ 182.305985][ T3054] really_probe+0x241/0xa60
[ 182.305999][ T3054] __driver_probe_device+0x210/0x460
[ 182.306014][ T3054] driver_probe_device+0x4a/0x140
[ 182.306029][ T3054] __device_attach_driver+0x1df/0x320
[ 182.306045][ T3054] page last free pid 3080 tgid 3080 ts 97599771423 stack trace:
[ 182.306056][ T3054] __free_frozen_pages+0x714/0xfc0
[ 182.306081][ T3054] qlist_free_all+0x47/0xf0
[ 182.306104][ T3054] kasan_quarantine_reduce+0x1a0/0x1f0
[ 182.306129][ T3054] __kasan_slab_alloc+0x4e/0x70
[ 182.306144][ T3054] kmem_cache_alloc_noprof+0x264/0x650
[ 182.306163][ T3054] do_getname+0x35/0x390
[ 182.306180][ T3054] do_sys_openat2+0xc7/0x1e0
[ 182.306196][ T3054] __x64_sys_openat+0x12d/0x210
[ 182.306219][ T3054] do_syscall_64+0x119/0x710
[ 182.306255][ T3054] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 182.306279][ T3054]
[ 182.306283][ T3054] Memory state around the buggy address:
[ 182.306291][ T3054] ffff888116596f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 182.306302][ T3054] ffff888116596f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 182.306314][ T3054] >ffff888116597000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 182.306323][ T3054] ^
[ 182.306332][ T3054] ffff888116597080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 182.306344][ T3054] ffff888116597100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 182.306352][ T3054] ==================================================================
[ 182.306424][ T3054] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 182.975995][ T3054] CPU: 0 UID: 0 PID: 3054 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(lazy)
[ 182.985395][ T3054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 182.995465][ T3054] Workqueue: events rtsx_usb_ms_handle_req
[ 183.001302][ T3054] Call Trace:
[ 183.004593][ T3054]
[ 183.007535][ T3054] dump_stack_lvl+0x100/0x190
[ 183.012246][ T3054] vpanic+0x553/0x970
[ 183.016248][ T3054] ? __pfx_vpanic+0x10/0x10
[ 183.020772][ T3054] ? mark_held_locks+0x40/0x70
[ 183.025552][ T3054] ? irqentry_exit+0x222/0x7b0
[ 183.030348][ T3054] ? rtsx_usb_ms_handle_req+0x17ff/0x1a00
[ 183.036089][ T3054] panic+0xd1/0xe0
[ 183.039839][ T3054] ? __pfx_panic+0x10/0x10
[ 183.044286][ T3054] check_panic_on_warn.cold+0x19/0x34
[ 183.049679][ T3054] end_report.part.0+0x3a/0x90
[ 183.054476][ T3054] kasan_report.cold+0xe/0x18
[ 183.05