Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts.
2026/09/15 16:29:35 parsed 1 programs
2026/09/15 16:29:35 serving rpc on tcp://41951
[ 48.901847][ T30] kauditd_printk_skb: 1 callbacks suppressed
[ 48.901917][ T30] audit: type=1400 audit(1789489775.586:77): avc: denied { node_bind } for pid=2981 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 48.928831][ T30] audit: type=1400 audit(1789489775.586:78): avc: denied { module_request } for pid=2981 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 50.871395][ T30] audit: type=1400 audit(1789489777.556:79): avc: denied { mounton } for pid=2989 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 50.895111][ T30] audit: type=1400 audit(1789489777.576:80): avc: denied { mount } for pid=2989 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 50.899043][ T2989] cgroup: Unknown subsys name 'net'
[ 50.901630][ T30] audit: type=1400 audit(1789489777.576:81): avc: denied { unmount } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 51.037482][ T2989] cgroup: Unknown subsys name 'cpuset'
[ 51.044757][ T2989] cgroup: Unknown subsys name 'rlimit'
[ 51.167867][ T30] audit: type=1400 audit(1789489777.856:82): avc: denied { setattr } for pid=2989 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 51.170046][ T30] audit: type=1400 audit(1789489777.856:83): avc: denied { create } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 51.170103][ T30] audit: type=1400 audit(1789489777.856:84): avc: denied { write } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 51.170150][ T30] audit: type=1400 audit(1789489777.856:85): avc: denied { read } for pid=2989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 51.205882][ T30] audit: type=1400 audit(1789489777.886:86): avc: denied { sys_module } for pid=2989 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 51.340237][ T2996] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 51.407835][ T2989] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 53.016323][ T3001] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 54.345097][ T30] kauditd_printk_skb: 28 callbacks suppressed
[ 54.345165][ T30] audit: type=1400 audit(1789489781.026:115): avc: denied { create } for pid=3039 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 54.353106][ T30] audit: type=1400 audit(1789489781.036:116): avc: denied { sys_admin } for pid=3039 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 54.396557][ T30] audit: type=1400 audit(1789489781.086:117): avc: denied { sys_chroot } for pid=3040 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[ 54.529984][ T30] audit: type=1400 audit(1789489781.216:118): avc: denied { create } for pid=3046 comm="syz-executor" name="tun" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 54.531326][ T30] audit: type=1400 audit(1789489781.216:119): avc: denied { setattr } for pid=3046 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 54.531382][ T30] audit: type=1400 audit(1789489781.216:120): avc: denied { read write } for pid=3046 comm="syz-executor" name="tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 54.531432][ T30] audit: type=1400 audit(1789489781.216:121): avc: denied { open } for pid=3046 comm="syz-executor" path="/dev/net/tun" dev="devtmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=chr_file permissive=1
[ 58.034907][ T3201] modprobe (3201) used greatest stack depth: 24328 bytes left
[ 64.589541][ T3049] syz-executor (3049) used greatest stack depth: 22504 bytes left
2026/09/15 16:29:52 executed programs: 0
2026/09/15 16:30:02 executed programs: 2
[ 75.490280][ T30] audit: type=1400 audit(1789489802.176:122): avc: denied { read write } for pid=3972 comm="syz.3.17" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 75.516818][ T30] audit: type=1400 audit(1789489802.176:123): avc: denied { open } for pid=3972 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 75.546245][ T30] audit: type=1400 audit(1789489802.176:124): avc: denied { ioctl } for pid=3972 comm="syz.3.17" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 75.725614][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 75.876346][ T11] usb 4-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=1.00
[ 75.878155][ T11] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 75.878189][ T11] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 75.878217][ T11] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 75.879866][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 75.879893][ T11] usb 4-1: Product: syz
[ 75.879915][ T11] usb 4-1: Manufacturer: syz
[ 75.892434][ T3972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 75.892495][ T3972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 75.892567][ T3972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 76.101432][ T11] redrat3 4-1:1.0: Problem fetching firmware ID
[ 76.111879][ T11] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 76.165379][ T11] rc_core: IR keymap rc-hauppauge not found
[ 76.165404][ T11] Registered IR keymap rc-empty
[ 76.169439][ T11] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0
[ 76.171833][ T11] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input5
[ 76.177534][ T11] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 76.177956][ T11] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 76.178007][ T11] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 76.181943][ T11] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 76.191483][ T11] usb 4-1: USB disconnect, device number 2
[ 76.855397][ T11] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 77.005777][ T11] usb 4-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=1.00
[ 77.006856][ T11] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 77.006889][ T11] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 77.006918][ T11] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 77.008474][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 77.008500][ T11] usb 4-1: Product: syz
[ 77.008517][ T11] usb 4-1: Manufacturer: syz
[ 77.016005][ T3978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 77.016054][ T3978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 77.016117][ T3978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 77.221010][ T11] redrat3 4-1:1.0: Problem fetching firmware ID
[ 77.228448][ T11] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 77.275368][ T11] rc_core: IR keymap rc-hauppauge not found
[ 77.275394][ T11] Registered IR keymap rc-empty
[ 77.278021][ T11] rc rc1: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc1
[ 77.280396][ T11] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc1/input6
[ 77.284893][ T11] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 77.286852][ T11] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 77.286901][ T11] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 77.300211][ T11] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 77.309369][ T11] usb 4-1: USB disconnect, device number 3
[ 77.965338][ T748] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 78.115831][ T748] usb 4-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=1.00
[ 78.116932][ T748] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 78.116965][ T748] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 78.117000][ T748] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 78.118555][ T748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 78.118581][ T748] usb 4-1: Product: syz
[ 78.118599][ T748] usb 4-1: Manufacturer: syz
[ 78.126190][ T3981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 78.126238][ T3981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 78.126286][ T3981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 78.331210][ T748] redrat3 4-1:1.0: Problem fetching firmware ID
[ 78.341862][ T748] redrat3 4-1:1.0: Failed to read timeout from hardware
[ 78.395333][ T748] rc_core: IR keymap rc-hauppauge not found
[ 78.395368][ T748] Registered IR keymap rc-empty
[ 78.397255][ T748] rc rc2: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc2
[ 78.401244][ T748] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc2/input7
[ 78.404370][ T748] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 78.404771][ T748] redrat3 4-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 78.404818][
** replaying previous printk message **
[ 78.404818][ T748] redrat3 4-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 78.408785][ T748] redrat3 4-1:1.0: probe with driver redrat3 failed with error -5
[ 78.424310][ T748] usb 4-1: USB disconnect, device number 4
[ 78.432628][ T2860] ==================================================================
[ 78.432644][ T2860] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[ 78.432692][ T2860] Read of size 1 at addr ffff88810d68d758 by task udevd/2860
[ 78.432730][ T2860]
[ 78.432753][ T2860] CPU: 1 UID: 0 PID: 2860 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy)
[ 78.432782][ T2860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 78.432804][ T2860] Call Trace:
[ 78.432813][ T2860]
[ 78.432822][ T2860] dump_stack_lvl+0x100/0x190
[ 78.432868][ T2860] print_report+0x13d/0x4b0
[ 78.432905][ T2860] ? __virt_addr_valid+0x239/0x430
[ 78.432947][ T2860] ? string+0x471/0x4d0
[ 78.432974][ T2860] kasan_report+0xdf/0x1c0
[ 78.433002][ T2860] ? string+0x471/0x4d0
[ 78.433033][ T2860] string+0x471/0x4d0
[ 78.433061][ T2860] ? __pfx_string+0x10/0x10
[ 78.433093][ T2860] vsnprintf+0x422/0x1300
[ 78.433132][ T2860] ? __pfx_vsnprintf+0x10/0x10
[ 78.433164][ T2860] ? ksys_read+0x12a/0x250
[ 78.433193][ T2860] ? do_syscall_64+0x119/0x710
[ 78.433226][ T2860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.433256][ T2860] add_uevent_var+0x183/0x3a0
[ 78.433283][ T2860] ? __pfx_add_uevent_var+0x10/0x10
[ 78.433318][ T2860] ? __pfx_rc_dev_uevent+0x10/0x10
[ 78.433345][ T2860] rc_dev_uevent+0x17d/0x1c0
[ 78.433371][ T2860] dev_uevent+0x2f1/0x870
[ 78.433402][ T2860] ? __pfx_dev_uevent+0x10/0x10
[ 78.433431][ T2860] ? kasan_save_track+0x14/0x30
[ 78.433454][ T2860] ? __kasan_kmalloc+0x8f/0xa0
[ 78.433499][ T2860] ? __kmalloc_cache_noprof+0x2d8/0x680
[ 78.433527][ T2860] ? uevent_show+0x166/0x3a0
[ 78.433567][ T2860] ? __pfx_uevent_show+0x10/0x10
[ 78.433603][ T2860] uevent_show+0x1ca/0x3a0
[ 78.433642][ T2860] ? __pfx_uevent_show+0x10/0x10
[ 78.433679][ T2860] dev_attr_show+0x52/0xa0
[ 78.433708][ T2860] ? __pfx_dev_attr_show+0x10/0x10
[ 78.433737][ T2860] sysfs_kf_seq_show+0x217/0x3f0
[ 78.433769][ T2860] seq_read_iter+0x32f/0x1270
[ 78.433802][ T2860] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 78.433840][ T2860] kernfs_fop_read_iter+0x46c/0x610
[ 78.433864][ T2860] ? security_file_permission+0x21/0x80
[ 78.433893][ T2860] ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 78.433919][ T2860] vfs_read+0x82e/0xb40
[ 78.433952][ T2860] ? __pfx_vfs_read+0x10/0x10
[ 78.433983][ T2860] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 78.434019][ T2860] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 78.434058][ T2860] ? count_memcg_events_mm.constprop.0+0x109/0x2a0
[ 78.434094][ T2860] ? find_held_lock+0x2b/0x80
[ 78.434129][ T2860] ksys_read+0x12a/0x250
[ 78.434160][ T2860] ? __pfx_ksys_read+0x10/0x10
[ 78.434195][ T2860] do_syscall_64+0x119/0x710
[ 78.434230][ T2860] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.434260][ T2860] RIP: 0033:0x7f8b0bdd9407
[ 78.434285][ T2860] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 78.434308][ T2860] RSP: 002b:00007fff87f4d100 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 78.434333][ T2860] RAX: ffffffffffffffda RBX: 00007f8b0bceb880 RCX: 00007f8b0bdd9407
[ 78.434351][ T2860] RDX: 0000000000001000 RSI: 000055be7119c270 RDI: 000000000000000c
[ 78.434368][ T2860] RBP: 00007f8b0bf21ff0 R08: 0000000000000000 R09: 0000000000000000
[ 78.434384][ T2860] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 78.434399][ T2860] R13: 00007f8b0bf21ea0 R14: 0000000000000000 R15: 000055be71129cb0
[ 78.434424][ T2860]
[ 78.434433][ T2860]
[ 78.434438][ T2860] Allocated by task 748:
[ 78.434453][ T2860] kasan_save_stack+0x30/0x50
[ 78.434479][ T2860] kasan_save_track+0x14/0x30
[ 78.434500][ T2860] __kasan_kmalloc+0x8f/0xa0
[ 78.434535][ T2860] __kmalloc_cache_noprof+0x2d8/0x680
[ 78.434559][ T2860] redrat3_dev_probe+0x326/0x2b50
[ 78.434582][ T2860] usb_probe_interface+0x386/0x9b0
[ 78.434606][ T2860] really_probe+0x241/0xa60
[ 78.434626][ T2860] __driver_probe_device+0x210/0x460
[ 78.434649][ T2860] driver_probe_device+0x4a/0x140
[ 78.434671][ T2860] __device_attach_driver+0x1df/0x320
[ 78.434694][ T2860] bus_for_each_drv+0x159/0x1e0
[ 78.434725][ T2860] __device_attach+0x1e4/0x4d0
[ 78.434746][ T2860] device_initial_probe+0xaf/0xd0
[ 78.434770][ T2860] bus_probe_device+0x64/0x160
[ 78.434803][ T2860] device_add+0x121d/0x1970
[ 78.434829][ T2860] usb_set_configuration+0xd97/0x1c60
[ 78.434865][ T2860] usb_generic_driver_probe+0xa1/0xe0
[ 78.434896][ T2860] usb_probe_device+0xef/0x400
[ 78.434916][ T2860] really_probe+0x241/0xa60
[ 78.434936][ T2860] __driver_probe_device+0x210/0x460
[ 78.434959][ T2860] driver_probe_device+0x4a/0x140
[ 78.434980][ T2860] __device_attach_driver+0x1df/0x320
[ 78.435004][ T2860] bus_for_each_drv+0x159/0x1e0
[ 78.435035][ T2860] __device_attach+0x1e4/0x4d0
[ 78.435057][ T2860] device_initial_probe+0xaf/0xd0
[ 78.435080][ T2860] bus_probe_device+0x64/0x160
[ 78.435113][ T2860] device_add+0x121d/0x1970
[ 78.435139][ T2860] usb_new_device.part.0+0xcc2/0x1686
[ 78.435171][ T2860] hub_event.cold+0x51a/0xe9d
[ 78.435203][ T2860] process_one_work+0xac7/0x1b10
[ 78.435239][ T2860] worker_thread+0x5ef/0xe50
[ 78.435274][ T2860] kthread+0x373/0x450
[ 78.435305][ T2860] ret_from_fork+0x69f/0xc90
[ 78.435326][ T2860] ret_from_fork_asm+0x1a/0x30
[ 78.435352][ T2860]
[ 78.435357][ T2860] Freed by task 748:
[ 78.435368][ T2860] kasan_save_stack+0x30/0x50
[ 78.435388][ T2860] kasan_save_track+0x14/0x30
[ 78.435408][ T2860] kasan_save_free_info+0x3b/0x70
[ 78.435437][ T2860] __kasan_slab_free+0x43/0x70
[ 78.435459][ T2860] kfree+0x20c/0x650
[ 78.435485][ T2860] redrat3_dev_probe+0x107a/0x2b50
[ 78.435508][ T2860] usb_probe_interface+0x386/0x9b0
[ 78.435531][ T2860] really_probe+0x241/0xa60
[ 78.435552][ T2860] __driver_probe_device+0x210/0x460
[ 78.435574][ T2860] driver_probe_device+0x4a/0x140
[ 78.435596][ T2860] __device_attach_driver+0x1df/0x320
[ 78.435619][ T2860] bus_for_each_drv+0x159/0x1e0
[ 78.435650][ T2860] __device_attach+0x1e4/0x4d0
[ 78.435671][ T2860] device_initial_probe+0xaf/0xd0
[ 78.435695][ T2860] bus_probe_device+0x64/0x160
[ 78.435727][ T2860] device_add+0x121d/0x1970
[ 78.435753][ T2860] usb_set_configuration+0xd97/0x1c60
[ 78.435788][ T2860] usb_generic_driver_probe+0xa1/0xe0
[ 78.435819][ T2860] usb_probe_device+0xef/0x400
[ 78.435839][ T2860] really_probe+0x241/0xa60
[ 78.435859][ T2860] __driver_probe_device+0x210/0x460
[ 78.435882][ T2860] driver_probe_device+0x4a/0x140
[ 78.435904][ T2860] __device_attach_driver+0x1df/0x320
[ 78.435926][ T2860] bus_for_each_drv+0x159/0x1e0
[ 78.435957][ T2860] __device_attach+0x1e4/0x4d0
[ 78.435979][ T2860] device_initial_probe+0xaf/0xd0
[ 78.436002][ T2860] bus_probe_device+0x64/0x160
[ 78.436035][ T2860] device_add+0x121d/0x1970
[ 78.436060][ T2860] usb_new_device.part.0+0xcc2/0x1686
[ 78.436093][ T2860] hub_event.cold+0x51a/0xe9d
[ 78.436123][ T2860] process_one_work+0xac7/0x1b10
[ 78.436158][ T2860] worker_thread+0x5ef/0xe50
[ 78.436193][ T2860] kthread+0x373/0x450
[ 78.436224][ T2860] ret_from_fork+0x69f/0xc90
[ 78.436245][ T2860] ret_from_fork_asm+0x1a/0x30
[ 78.436271][ T2860]
[ 78.436276][ T2860] The buggy address belongs to the object at ffff88810d68d000
[ 78.436276][ T2860] which belongs to the cache kmalloc-2k of size 2048
[ 78.436295][ T2860] The buggy address is located 1880 bytes inside of
[ 78.436295][ T2860] freed 2048-byte region [ffff88810d68d000, ffff88810d68d800)
[ 78.436319][ T2860]
[ 78.436324][ T2860] The buggy address belongs to the physical page:
[ 78.436341][ T2860] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d688
[ 78.436366][ T2860] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 78.436385][ T2860] flags: 0x200000000000040(head|node=0|zone=2)
[ 78.436408][ T2860] page_type: f5(slab)
[ 78.436430][ T2860] raw: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 78.436456][ T2860] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 78.436485][ T2860] head: 0200000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 78.436508][ T2860] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 78.436531][ T2860] head: 0200000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 78.436554][ T2860] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 78.436568][ T2860] page dumped because: kasan: bad access detected
[ 78.436579][ T2860] page_owner tracks the page as allocated
[ 78.436587][ T2860] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11, tgid 11 (kworker/0:1), ts 77300878133
[ 78.436630][ T2860] post_alloc_hook+0xfd/0x120
[ 78.436666][ T2860] get_page_from_freelist+0xf4b/0x3440
[ 78.436689][ T2860] __alloc_frozen_pages_noprof+0x2d7/0x2f70
[ 78.436714][ T2860] new_slab+0xa9/0x6e0
[ 78.436736][ T2860] refill_objects+0xe3/0x410
[ 78.436759][ T2860] __pcs_replace_empty_main+0x35e/0x650
[ 78.436783][ T2860] __kmalloc_cache_noprof+0x4a1/0x680
[ 78.436807][ T2860] usb_create_ep_devs+0x4d/0x2b0
[ 78.436830][ T2860] create_intf_ep_devs.isra.0+0x161/0x200
[ 78.436863][ T2860] usb_set_configuration+0xdb9/0x1c60
[ 78.436899][ T2860] usb_generic_driver_probe+0xa1/0xe0
[ 78.436929][ T2860] usb_probe_device+0xef/0x400
[ 78.436949][ T2860] really_probe+0x241/0xa60
[ 78.436969][ T2860] __driver_probe_device+0x210/0x460
[ 78.436999][ T2860] driver_probe_device+0x4a/0x140
[ 78.437021][ T2860] __device_attach_driver+0x1df/0x320
[ 78.437044][ T2860] page last free pid 11 tgid 11 ts 77287691217 stack trace:
[ 78.437059][ T2860] __free_frozen_pages+0x714/0xfc0
[ 78.437093][ T2860] qlist_free_all+0x47/0xf0
[ 78.437126][ T2860] kasan_quarantine_reduce+0x1a0/0x1f0
[ 78.437162][ T2860] __kasan_slab_alloc+0x4e/0x70
[ 78.437184][ T2860] __kmalloc_node_track_caller_noprof+0x2db/0x820
[ 78.437216][ T2860] kvasprintf+0xbc/0x150
[ 78.437240][ T2860] kasprintf+0xc7/0x100
[ 78.437263][ T2860] led_trigger_set+0x716/0xbe0
[ 78.437286][ T2860] led_classdev_unregister+0xb0/0x340
[ 78.437321][ T2860] redrat3_dev_probe+0x276a/0x2b50
[ 78.437344][ T2860] usb_probe_interface+0x386/0x9b0
[ 78.437367][ T2860] really_probe+0x241/0xa60
[ 78.437387][ T2860] __driver_probe_device+0x210/0x460
[ 78.437409][ T2860] driver_probe_device+0x4a/0x140
[ 78.437430][ T2860] __device_attach_driver+0x1df/0x320
[ 78.437451][ T2860] bus_for_each_drv+0x159/0x1e0
[ 78.437489][ T2860]
[ 78.437495][ T2860] Memory state around the buggy address:
[ 78.437506][ T2860] ffff88810d68d600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 78.437523][ T2860] ffff88810d68d680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 78.437541][ T2860] >ffff88810d68d700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 78.437555][ T2860] ^
[ 78.437568][ T2860] ffff88810d68d780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 78.437586][ T2860] ffff88810d68d800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 78.437599][ T2860] ==================================================================
[ 78.446418][ T2860] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 79.549177][ T2860] CPU: 1 UID: 0 PID: 2860 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy)
[ 79.558030][ T2860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 79.568069][ T2860] Call Trace:
[ 79.571332][ T2860]
[ 79.574246][ T2860] dump_stack_lvl+0x100/0x190
[ 79.578916][ T2860] vpanic+0x553/0x970
[ 79.582894][ T2860] ? __pfx_vpanic+0x10/0x10
[ 79.587382][ T2860] ? string+0x471/0x4d0
[ 79.591528][ T2860] panic+0xd1/0xe0
[ 79.595238][ T2860] ? __pfx_panic+0x10/0x10
[ 79.599662][ T2860] ? string+0x471/0x4d0
[ 79.603818][ T2860] ? preempt_schedule_common+0x3c/0xb0
[ 79.609267][ T2860] check_panic_on_warn.cold+0x19/0x34
[ 79.614630][ T2860] end_report.part.0+0x3a/0x90
[ 79.619397][ T2860] kasan_report.cold+0xe/0x18
[ 79.624061][ T2860] ? string+0x471/0x4d0
[ 79.628201][ T2860] string+0x471/0x4d0
[ 79.632168][ T2860] ? __pfx_string+0x10/0x10
[ 79.636654][ T2860] vsnprintf+0x422/0x1300
[ 79.640975][ T2860] ? __pfx_vsnprintf+0x10/0x10
[ 79.645741][ T2860] ? ksys_read+0x12a/0x250
[ 79.650140][ T2860] ? do_syscall_64+0x119/0x710
[ 79.654888][ T2860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.660938][ T2860] add_uevent_var+0x183/0x3a0
[ 79.665607][ T2860] ? __pfx_add_uevent_var+0x10/0x10
[ 79.670791][ T2860] ? __pfx_rc_dev_uevent+0x10/0x10
[ 79.675886][ T2860] rc_dev_uevent+0x17d/0x1c0
[ 79.680461][ T2860] dev_uevent+0x2f1/0x870
[ 79.684776][ T2860] ? __pfx_dev_uevent+0x10/0x10
[ 79.689612][ T2860] ? kasan_save_track+0x14/0x30
[ 79.694445][ T2860] ? __kasan_kmalloc+0x8f/0xa0
[ 79.699201][ T2860] ? __kmalloc_cache_noprof+0x2d8/0x680
[ 79.704734][ T2860] ? uevent_show+0x166/0x3a0
[ 79.709336][ T2860] ? __pfx_uevent_show+0x10/0x10
[ 79.714266][ T2860] uevent_show+0x1ca/0x3a0
[ 79.718673][ T2860] ? __pfx_uevent_show+0x10/0x10
[ 79.723600][ T2860] dev_attr_show+0x52/0xa0
[ 79.727999][ T2860] ? __pfx_dev_attr_show+0x10/0x10
[ 79.733112][ T2860] sysfs_kf_seq_show+0x217/0x3f0
[ 79.738054][ T2860] seq_read_iter+0x32f/0x1270
[ 79.742720][ T2860] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 79.748081][ T2860] kernfs_fop_read_iter+0x46c/0x610
[ 79.753267][ T2860] ? security_file_permission+0x21/0x80
[ 79.758802][ T2860] ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 79.764506][ T2860] vfs_read+0x82e/0xb40
[ 79.768653][ T2860] ? __pfx_vfs_read+0x10/0x10
[ 79.773319][ T2860] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 79.779720][ T2860] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[ 79.786124][ T2860] ? count_memcg_events_mm.constprop.0+0x109/0x2a0
[ 79.792611][ T2860] ? find_held_lock+0x2b/0x80
[ 79.797275][ T2860] ksys_read+0x12a/0x250
[ 79.801505][ T2860] ? __pfx_ksys_read+0x10/0x10
[ 79.806260][ T2860] do_syscall_64+0x119/0x710
[ 79.810838][ T2860] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.816713][ T2860] RIP: 0033:0x7f8b0bdd9407
[ 79.821113][ T2860] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 79.840702][ T2860] RSP: 002b:00007fff87f4d100 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 79.849098][ T2860] RAX: ffffffffffffffda RBX: 00007f8b0bceb880 RCX: 00007f8b0bdd9407
[ 79.857154][ T2860] RDX: 0000000000001000 RSI: 000055be7119c270 RDI: 000000000000000c
[ 79.865117][ T2860] RBP: 00007f8b0bf21ff0 R08: 0000000000000000 R09: 0000000000000000
[ 79.873076][ T2860] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 79.881032][ T2860] R13: 00007f8b0bf21ea0 R14: 0000000000000000 R15: 000055be71129cb0
[ 79.889012][ T2860]
[ 79.892249][ T2860] Kernel Offset: disabled
[ 79.896569][ T2860] Rebooting in 86400 seconds..