Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. 2026/08/10 03:13:49 parsed 1 programs 2026/08/10 03:13:49 serving rpc on tcp://35857 [ 66.035663][ T4284] cgroup: Unknown subsys name 'net' [ 66.158646][ T4284] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.462310][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.927215][ T4329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.936304][ T4329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.943817][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.952771][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.960579][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.968053][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.138960][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.151013][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.160531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.185059][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.192885][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.200679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.524989][ T4351] chnl_net:caif_netlink_parms(): no params data found [ 70.562785][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.570559][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.578642][ T4351] device bridge_slave_0 entered promiscuous mode [ 70.586930][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.594079][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.601898][ T4351] device bridge_slave_1 entered promiscuous mode [ 70.619842][ T4351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.631077][ T4351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.659249][ T4351] team0: Port device team_slave_0 added [ 70.667649][ T4351] team0: Port device team_slave_1 added [ 70.681552][ T4351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.688983][ T4351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.715501][ T4351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.737834][ T4351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.744825][ T4351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.771062][ T4351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.808766][ T4351] device hsr_slave_0 entered promiscuous mode [ 70.815400][ T4351] device hsr_slave_1 entered promiscuous mode [ 70.906593][ T4351] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.926086][ T4351] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.935105][ T4351] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.943388][ T4351] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.963193][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.970416][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.978058][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.985150][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.033270][ T4351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.058826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.068273][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.076642][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.098066][ T4351] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.107978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.117639][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.124776][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.138559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.147057][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.154177][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.177123][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.183558][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.191491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.200697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.210793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.221384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.229834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.265487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.274520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.291121][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.301069][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.330987][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.340008][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.350374][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.547744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.555389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.567544][ T4351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.587675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.596621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.622931][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.631266][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.641548][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.650120][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.660034][ T4351] device veth0_vlan entered promiscuous mode [ 71.671080][ T4351] device veth1_vlan entered promiscuous mode [ 71.687352][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.695525][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.703349][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.712304][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.725531][ T4351] device veth0_macvtap entered promiscuous mode [ 71.734005][ T4351] device veth1_macvtap entered promiscuous mode [ 71.747813][ T4351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.757804][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.765870][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.773635][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.782211][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.793037][ T4351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.801041][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.810518][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.828753][ T4351] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.837940][ T4351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.846927][ T4351] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.856264][ T4351] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.947759][ T4351] syz-executor (4351) used greatest stack depth: 20560 bytes left [ 72.357019][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/10 03:13:57 executed programs: 0 [ 72.923701][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.931368][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.939840][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.948025][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.956463][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.963633][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.065644][ T4381] chnl_net:caif_netlink_parms(): no params data found [ 73.105765][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.112890][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.121202][ T4381] device bridge_slave_0 entered promiscuous mode [ 73.130476][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.137667][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.145689][ T4381] device bridge_slave_1 entered promiscuous mode [ 73.163037][ T4381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.173446][ T4381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.198440][ T4381] team0: Port device team_slave_0 added [ 73.205922][ T4381] team0: Port device team_slave_1 added [ 73.221484][ T4381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.228550][ T4381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.254933][ T4381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.268262][ T4381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.275264][ T4381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.301216][ T4381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.329216][ T4381] device hsr_slave_0 entered promiscuous mode [ 73.335902][ T4381] device hsr_slave_1 entered promiscuous mode [ 73.342348][ T4381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.350272][ T4381] Cannot create hsr debugfs directory [ 74.453145][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.014661][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 76.642917][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.683371][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.104681][ T4331] Bluetooth: hci0: command 0x041b tx timeout [ 77.561739][ T46] device hsr_slave_0 left promiscuous mode [ 77.569672][ T46] device hsr_slave_1 left promiscuous mode [ 77.577249][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.584784][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.592618][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.600090][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.607720][ T46] device bridge_slave_1 left promiscuous mode [ 77.614555][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.624189][ T46] device bridge_slave_0 left promiscuous mode [ 77.630323][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.646914][ T46] device veth1_macvtap left promiscuous mode [ 77.653036][ T46] device veth0_macvtap left promiscuous mode [ 77.659318][ T46] device veth1_vlan left promiscuous mode [ 77.665224][ T46] device veth0_vlan left promiscuous mode [ 77.929894][ T46] team0 (unregistering): Port device team_slave_1 removed [ 77.958325][ T46] team0 (unregistering): Port device team_slave_0 removed [ 77.980207][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.004723][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.143137][ T46] bond0 (unregistering): Released all slaves [ 78.206546][ T4381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.218010][ T4381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.226384][ T4381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.235648][ T4381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.292605][ T4381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.303838][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.312705][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.323062][ T4381] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.344591][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.353579][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.362239][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.369374][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.377602][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.387622][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.396854][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.405351][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.412404][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.432368][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.441360][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.452524][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.461611][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.470047][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.485960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.495442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.503716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.512365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.524422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.532756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.543067][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.704889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.712337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.732083][ T4381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.755089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.763674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.782121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.790192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.798619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.806588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.816566][ T4381] device veth0_vlan entered promiscuous mode [ 78.830554][ T4381] device veth1_vlan entered promiscuous mode [ 78.847380][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.856574][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.865381][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.873658][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.884181][ T4381] device veth0_macvtap entered promiscuous mode [ 78.892370][ T4381] device veth1_macvtap entered promiscuous mode [ 78.911874][ T4381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.920401][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.928350][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.936776][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.945737][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.956911][ T4381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.967475][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.976415][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.987332][ T4381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.996151][ T4381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.005219][ T4381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.013941][ T4381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.061668][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.072778][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.086634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.101871][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/08/10 03:14:03 executed programs: 2 [ 79.115754][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.123210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.174868][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 79.444039][ T130] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.626694][ T130] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 79.636774][ T130] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 79.646681][ T130] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 79.658774][ T130] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 79.668364][ T130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.676472][ T130] usb 1-1: Product: syz [ 79.680631][ T130] usb 1-1: Manufacturer: syz [ 79.685267][ T130] usb 1-1: SerialNumber: syz [ 79.694440][ T4430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.701817][ T4430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.709056][ T4430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.921746][ T130] redrat3 1-1:1.0: Problem fetching firmware ID [ 79.930924][ T130] redrat3 1-1:1.0: Failed to read timeout from hardware [ 80.003996][ T130] rc_core: IR keymap rc-hauppauge not found [ 80.009932][ T130] Registered IR keymap rc-empty [ 80.017173][ T130] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0 [ 80.029545][ T130] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0/input5 [ 80.044987][ T130] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 80.053803][ T130] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 80.062499][ T130] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 80.074823][ T130] redrat3: probe of 1-1:1.0 failed with error -5 [ 80.083860][ T130] usb 1-1: USB disconnect, device number 2 [ 80.714014][ T130] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.895845][ T130] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 80.905758][ T130] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 80.915660][ T130] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 80.927191][ T130] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 80.936316][ T130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.944781][ T130] usb 1-1: Product: syz [ 80.948967][ T130] usb 1-1: Manufacturer: syz [ 80.953558][ T130] usb 1-1: SerialNumber: syz [ 80.960858][ T4433] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.968416][ T4433] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.975803][ T4433] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.187895][ T130] redrat3 1-1:1.0: Problem fetching firmware ID [ 81.196009][ T130] redrat3 1-1:1.0: Failed to read timeout from hardware [ 81.254240][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 81.263947][ T130] rc_core: IR keymap rc-hauppauge not found [ 81.269884][ T130] Registered IR keymap rc-empty [ 81.276030][ T130] rc rc1: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc1 [ 81.287851][ T130] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc1/input6 [ 81.301864][ T130] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 81.310852][ T130] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 81.319541][ T130] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 81.329229][ T130] redrat3: probe of 1-1:1.0 failed with error -5 [ 81.337548][ T130] usb 1-1: USB disconnect, device number 3 [ 81.415048][ T14] cfg80211: failed to load regulatory.db [ 82.003960][ T4347] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.195343][ T4347] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 82.205217][ T4347] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 82.215249][ T4347] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 82.228354][ T4347] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 82.237461][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.245500][ T4347] usb 1-1: Product: syz [ 82.249685][ T4347] usb 1-1: Manufacturer: syz [ 82.254332][ T4347] usb 1-1: SerialNumber: syz [ 82.261571][ T4436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.269020][ T4436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.276778][ T4436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.489940][ T4347] redrat3 1-1:1.0: Problem fetching firmware ID [ 82.497333][ T4347] redrat3 1-1:1.0: Failed to read timeout from hardware [ 82.563997][ T4347] rc_core: IR keymap rc-hauppauge not found [ 82.569985][ T4347] Registered IR keymap rc-empty [ 82.576115][ T4347] rc rc2: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc2 [ 82.588037][ T4347] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc2/input7 [ 82.601725][ T4347] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 82.610575][ T4347] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 82.619346][ T4347] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 82.629006][ T4347] redrat3: probe of 1-1:1.0 failed with error -5 [ 82.637012][ T4347] usb 1-1: USB disconnect, device number 4 [ 83.273957][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.455294][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 83.465215][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 83.475313][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 83.486908][ T14] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 83.496259][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.504441][ T14] usb 1-1: Product: syz [ 83.508605][ T14] usb 1-1: Manufacturer: syz [ 83.513180][ T14] usb 1-1: SerialNumber: syz [ 83.520622][ T4439] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.527949][ T4439] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.535212][ T4439] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.749119][ T14] redrat3 1-1:1.0: Problem fetching firmware ID [ 83.756801][ T14] redrat3 1-1:1.0: Failed to read timeout from hardware [ 83.824016][ T14] rc_core: IR keymap rc-hauppauge not found [ 83.829937][ T14] Registered IR keymap rc-empty [ 83.835726][ T14] rc rc3: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc3 [ 83.847533][ T14] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc3/input8 [ 83.861107][ T14] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 83.869951][ T14] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 83.878670][ T14] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 83.889379][ T14] redrat3: probe of 1-1:1.0 failed with error -5 [ 83.897901][ T14] usb 1-1: USB disconnect, device number 5 2026/08/10 03:14:08 executed programs: 6 [ 84.564051][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.745799][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 84.755690][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.765522][ T14] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 84.776882][ T14] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 84.785970][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.793970][ T14] usb 1-1: Product: syz [ 84.798108][ T14] usb 1-1: Manufacturer: syz [ 84.802679][ T14] usb 1-1: SerialNumber: syz [ 84.809748][ T4442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.817109][ T4442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.824368][ T4442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.035058][ T14] redrat3 1-1:1.0: Problem fetching firmware ID [ 85.043661][ T14] redrat3 1-1:1.0: Failed to read timeout from hardware [ 85.113991][ T14] rc_core: IR keymap rc-hauppauge not found [ 85.119917][ T14] Registered IR keymap rc-empty [ 85.126578][ T14] rc rc4: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc4 [ 85.138369][ T14] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc4/input9 [ 85.152098][ T14] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 85.161034][ T14] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 85.169678][ T14] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 85.179676][ T14] redrat3: probe of 1-1:1.0 failed with error -5 [ 85.187853][ T14] usb 1-1: USB disconnect, device number 6 [ 85.813994][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.005516][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 86.015421][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 86.026016][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 86.037479][ T26] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 86.046582][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.054595][ T26] usb 1-1: Product: syz [ 86.058739][ T26] usb 1-1: Manufacturer: syz [ 86.063309][ T26] usb 1-1: SerialNumber: syz [ 86.070630][ T4445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.077923][ T4445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.085171][ T4445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.298586][ T26] redrat3 1-1:1.0: Problem fetching firmware ID [ 86.306963][ T26] redrat3 1-1:1.0: Failed to read timeout from hardware [ 86.374784][ T26] rc_core: IR keymap rc-hauppauge not found [ 86.380715][ T26] Registered IR keymap rc-empty [ 86.386695][ T26] rc rc5: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc5 [ 86.399175][ T26] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc5/input10 [ 86.412456][ T26] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 86.421362][ T26] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 86.430012][ T26] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 86.439893][ T26] redrat3: probe of 1-1:1.0 failed with error -5 [ 86.448016][ T26] usb 1-1: USB disconnect, device number 7 [ 87.073976][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 87.255313][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 87.265241][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 87.275092][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 87.286469][ T26] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 87.295675][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.303657][ T26] usb 1-1: Product: syz [ 87.307850][ T26] usb 1-1: Manufacturer: syz [ 87.312434][ T26] usb 1-1: SerialNumber: syz [ 87.319391][ T4448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.326737][ T4448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.334305][ T4448] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.545675][ T26] redrat3 1-1:1.0: Problem fetching firmware ID [ 87.552948][ T26] redrat3 1-1:1.0: Failed to read timeout from hardware [ 87.624015][ T26] rc_core: IR keymap rc-hauppauge not found [ 87.629957][ T26] Registered IR keymap rc-empty [ 87.636065][ T26] rc rc6: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc6 [ 87.647888][ T26] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc6/input11 [ 87.662542][ T26] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 87.671546][ T26] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 87.680185][ T26] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 87.690086][ T26] redrat3: probe of 1-1:1.0 failed with error -5 [ 87.698313][ T26] usb 1-1: USB disconnect, device number 8 [ 88.343974][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 88.535223][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 88.545132][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 88.554993][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 88.566324][ T26] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 88.575406][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.583381][ T26] usb 1-1: Product: syz [ 88.587573][ T26] usb 1-1: Manufacturer: syz [ 88.592156][ T26] usb 1-1: SerialNumber: syz [ 88.598577][ T4451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.605908][ T4451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.613068][ T4451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.825550][ T26] redrat3 1-1:1.0: Problem fetching firmware ID [ 88.833646][ T26] redrat3 1-1:1.0: Failed to read timeout from hardware [ 88.904009][ T26] rc_core: IR keymap rc-hauppauge not found [ 88.909933][ T26] Registered IR keymap rc-empty [ 88.916576][ T26] rc rc7: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc7 [ 88.928458][ T26] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc7/input12 [ 88.942062][ T26] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 88.950932][ T26] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 88.959608][ T26] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 88.969156][ T26] redrat3: probe of 1-1:1.0 failed with error -5 [ 88.977875][ T26] usb 1-1: USB disconnect, device number 9 [ 88.985569][ T3639] ================================================================== [ 88.993633][ T3639] BUG: KASAN: use-after-free in string+0x204/0x290 [ 89.000125][ T3639] Read of size 1 at addr ffff88802ffea728 by task udevd/3639 [ 89.007468][ T3639] [ 89.009779][ T3639] CPU: 0 PID: 3639 Comm: udevd Not tainted syzkaller #0 [ 89.016687][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.026725][ T3639] Call Trace: [ 89.029989][ T3639] [ 89.032901][ T3639] dump_stack_lvl+0x188/0x24e [ 89.037563][ T3639] ? __lock_acquire+0x7c40/0x7c40 [ 89.042567][ T3639] ? show_regs_print_info+0x12/0x12 [ 89.047745][ T3639] ? load_image+0x410/0x410 [ 89.052227][ T3639] ? __virt_addr_valid+0x467/0x540 [ 89.057319][ T3639] ? string+0x204/0x290 [ 89.061449][ T3639] print_report+0xa8/0x210 [ 89.065843][ T3639] kasan_report+0x10b/0x140 [ 89.070326][ T3639] ? string+0x204/0x290 [ 89.074467][ T3639] string+0x204/0x290 [ 89.078439][ T3639] vsnprintf+0x10db/0x1c20 [ 89.082831][ T3639] add_uevent_var+0x1cd/0x460 [ 89.087487][ T3639] ? kobject_uevent_env+0x890/0x890 [ 89.092663][ T3639] ? trace_contention_end+0x5f/0x170 [ 89.097926][ T3639] ? __mutex_lock+0x1ab/0xae0 [ 89.102582][ T3639] rc_dev_uevent+0x15b/0x190 [ 89.107151][ T3639] dev_uevent+0x4d6/0x740 [ 89.111461][ T3639] ? dev_uevent_name+0xa0/0xa0 [ 89.116207][ T3639] uevent_show+0x1a8/0x320 [ 89.120602][ T3639] dev_attr_show+0x50/0xb0 [ 89.124997][ T3639] sysfs_kf_seq_show+0x349/0x4b0 [ 89.129912][ T3639] ? device_get_ownership+0xa0/0xa0 [ 89.135093][ T3639] seq_read_iter+0x460/0xc50 [ 89.139668][ T3639] vfs_read+0x471/0x960 [ 89.143805][ T3639] ? kernel_read+0x1e0/0x1e0 [ 89.148377][ T3639] ? __x64_sys_newfstat+0x19a/0x220 [ 89.153553][ T3639] ? __fdget_pos+0x2b5/0x360 [ 89.158121][ T3639] ksys_read+0x14d/0x260 [ 89.162342][ T3639] ? vfs_write+0x9a0/0x9a0 [ 89.166740][ T3639] ? lockdep_hardirqs_on+0x94/0x140 [ 89.171923][ T3639] do_syscall_64+0x4c/0xa0 [ 89.176318][ T3639] ? clear_bhb_loop+0x60/0xb0 [ 89.180972][ T3639] ? clear_bhb_loop+0x60/0xb0 [ 89.185629][ T3639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.191507][ T3639] RIP: 0033:0x7fbd63aa7407 [ 89.195909][ T3639] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 89.215491][ T3639] RSP: 002b:00007ffd9876dd00 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 89.223888][ T3639] RAX: ffffffffffffffda RBX: 00007fbd6422a880 RCX: 00007fbd63aa7407 [ 89.231851][ T3639] RDX: 0000000000001000 RSI: 0000557d77d5bb40 RDI: 000000000000000c [ 89.239804][ T3639] RBP: 00007fbd63befff0 R08: 0000000000000000 R09: 0000000000000000 [ 89.247753][ T3639] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 89.255708][ T3639] R13: 00007fbd63befea0 R14: 0000000000000000 R15: 0000557d77cd5490 [ 89.263675][ T3639] [ 89.266673][ T3639] [ 89.268974][ T3639] Allocated by task 26: [ 89.273102][ T3639] kasan_set_track+0x4b/0x70 [ 89.277685][ T3639] __kasan_kmalloc+0x8e/0xa0 [ 89.282254][ T3639] redrat3_dev_probe+0x3ef/0x23c0 [ 89.287258][ T3639] usb_probe_interface+0x5be/0xae0 [ 89.292347][ T3639] really_probe+0x24a/0xb40 [ 89.296827][ T3639] __driver_probe_device+0x1f5/0x390 [ 89.302097][ T3639] driver_probe_device+0x4f/0x420 [ 89.307097][ T3639] __device_attach_driver+0x2c6/0x510 [ 89.312443][ T3639] bus_for_each_drv+0x184/0x210 [ 89.317271][ T3639] __device_attach+0x2a7/0x480 [ 89.322008][ T3639] bus_probe_device+0xba/0x1d0 [ 89.326753][ T3639] device_add+0xbcf/0x1050 [ 89.331145][ T3639] usb_set_configuration+0x19d5/0x2030 [ 89.336579][ T3639] usb_generic_driver_probe+0x89/0x150 [ 89.342027][ T3639] usb_probe_device+0x126/0x250 [ 89.346861][ T3639] really_probe+0x24a/0xb40 [ 89.351363][ T3639] __driver_probe_device+0x1f5/0x390 [ 89.356625][ T3639] driver_probe_device+0x4f/0x420 [ 89.361630][ T3639] __device_attach_driver+0x2c6/0x510 [ 89.366980][ T3639] bus_for_each_drv+0x184/0x210 [ 89.371811][ T3639] __device_attach+0x2a7/0x480 [ 89.376550][ T3639] bus_probe_device+0xba/0x1d0 [ 89.381290][ T3639] device_add+0xbcf/0x1050 [ 89.385686][ T3639] usb_new_device+0xa01/0x15e0 [ 89.390425][ T3639] hub_event+0x2b2f/0x5200 [ 89.394828][ T3639] process_one_work+0x8ab/0x1160 [ 89.399757][ T3639] worker_thread+0xaf5/0x12a0 [ 89.404409][ T3639] kthread+0x29d/0x330 [ 89.408450][ T3639] ret_from_fork+0x1f/0x30 [ 89.412858][ T3639] [ 89.415162][ T3639] Freed by task 26: [ 89.418942][ T3639] kasan_set_track+0x4b/0x70 [ 89.423512][ T3639] kasan_save_free_info+0x27/0x40 [ 89.428511][ T3639] ____kasan_slab_free+0x126/0x1f0 [ 89.433600][ T3639] slab_free_freelist_hook+0x133/0x1b0 [ 89.439038][ T3639] __kmem_cache_free+0xb6/0x200 [ 89.443870][ T3639] redrat3_dev_probe+0x1b69/0x23c0 [ 89.448977][ T3639] usb_probe_interface+0x5be/0xae0 [ 89.454073][ T3639] really_probe+0x24a/0xb40 [ 89.458567][ T3639] __driver_probe_device+0x1f5/0x390 [ 89.463827][ T3639] driver_probe_device+0x4f/0x420 [ 89.468826][ T3639] __device_attach_driver+0x2c6/0x510 [ 89.474186][ T3639] bus_for_each_drv+0x184/0x210 [ 89.479026][ T3639] __device_attach+0x2a7/0x480 [ 89.483760][ T3639] bus_probe_device+0xba/0x1d0 [ 89.488497][ T3639] device_add+0xbcf/0x1050 [ 89.492891][ T3639] usb_set_configuration+0x19d5/0x2030 [ 89.498324][ T3639] usb_generic_driver_probe+0x89/0x150 [ 89.503760][ T3639] usb_probe_device+0x126/0x250 [ 89.508583][ T3639] really_probe+0x24a/0xb40 [ 89.513060][ T3639] __driver_probe_device+0x1f5/0x390 [ 89.518318][ T3639] driver_probe_device+0x4f/0x420 [ 89.523315][ T3639] __device_attach_driver+0x2c6/0x510 [ 89.528672][ T3639] bus_for_each_drv+0x184/0x210 [ 89.533502][ T3639] __device_attach+0x2a7/0x480 [ 89.538243][ T3639] bus_probe_device+0xba/0x1d0 [ 89.542984][ T3639] device_add+0xbcf/0x1050 [ 89.547383][ T3639] usb_new_device+0xa01/0x15e0 [ 89.552126][ T3639] hub_event+0x2b2f/0x5200 [ 89.556520][ T3639] process_one_work+0x8ab/0x1160 [ 89.561435][ T3639] worker_thread+0xaf5/0x12a0 [ 89.566088][ T3639] kthread+0x29d/0x330 [ 89.570131][ T3639] ret_from_fork+0x1f/0x30 [ 89.574531][ T3639] [ 89.576846][ T3639] The buggy address belongs to the object at ffff88802ffea000 [ 89.576846][ T3639] which belongs to the cache kmalloc-2k of size 2048 [ 89.590871][ T3639] The buggy address is located 1832 bytes inside of [ 89.590871][ T3639] 2048-byte region [ffff88802ffea000, ffff88802ffea800) [ 89.604293][ T3639] [ 89.606609][ T3639] The buggy address belongs to the physical page: [ 89.613005][ T3639] page:ffffea0000bffa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802ffef000 pfn:0x2ffe8 [ 89.624436][ T3639] head:ffffea0000bffa00 order:3 compound_mapcount:0 compound_pincount:0 [ 89.632737][ T3639] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 89.640700][ T3639] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017442000 [ 89.649263][ T3639] raw: ffff88802ffef000 0000000080080006 00000001ffffffff 0000000000000000 [ 89.657821][ T3639] page dumped because: kasan: bad access detected [ 89.664211][ T3639] page_owner tracks the page as allocated [ 89.669896][ T3639] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4328, tgid 4328 (syz-executor), ts 70004195715, free_ts 69838244029 [ 89.692613][ T3639] post_alloc_hook+0x173/0x1a0 [ 89.697361][ T3639] get_page_from_freelist+0x206b/0x2180 [ 89.702886][ T3639] __alloc_pages+0x1ec/0x4f0 [ 89.707455][ T3639] alloc_slab_page+0x5d/0x180 [ 89.712108][ T3639] new_slab+0x87/0x2d0 [ 89.716154][ T3639] ___slab_alloc+0xbc5/0x1240 [ 89.720805][ T3639] __kmem_cache_alloc_node+0x126/0x270 [ 89.726239][ T3639] __kmalloc_node+0xa2/0x240 [ 89.730809][ T3639] kvmalloc_node+0x6c/0x180 [ 89.735290][ T3639] __alloc_bucket_spinlocks+0x58/0x150 [ 89.740723][ T3639] ila_xlat_init_net+0x73/0x110 [ 89.745566][ T3639] ops_init+0x360/0x5e0 [ 89.749698][ T3639] setup_net+0x4f2/0xbd0 [ 89.753923][ T3639] copy_net_ns+0x33e/0x5b0 [ 89.758341][ T3639] create_new_namespaces+0x3ce/0x700 [ 89.763600][ T3639] unshare_nsproxy_namespaces+0x116/0x160 [ 89.769296][ T3639] page last free stack trace: [ 89.773961][ T3639] free_unref_page_prepare+0x8e5/0x9e0 [ 89.779415][ T3639] free_unref_page+0x2e/0x3f0 [ 89.784083][ T3639] qlist_free_all+0x76/0xe0 [ 89.788567][ T3639] kasan_quarantine_reduce+0x144/0x160 [ 89.794010][ T3639] __kasan_slab_alloc+0x1e/0x80 [ 89.798852][ T3639] slab_post_alloc_hook+0x4b/0x490 [ 89.803948][ T3639] kmem_cache_alloc_node+0x1ad/0x310 [ 89.809226][ T3639] __alloc_skb+0xf9/0x7d0 [ 89.813543][ T3639] inet_netconf_notify_devconf+0x16f/0x230 [ 89.819331][ T3639] inetdev_event+0x6fa/0x13f0 [ 89.823997][ T3639] raw_notifier_call_chain+0xcb/0x160 [ 89.829347][ T3639] unregister_netdevice_many_notify+0x10b1/0x1990 [ 89.835742][ T3639] ip6_tnl_exit_batch_net+0x5d6/0x620 [ 89.841090][ T3639] cleanup_net+0x78e/0xba0 [ 89.845484][ T3639] process_one_work+0x8ab/0x1160 [ 89.850398][ T3639] worker_thread+0xaf5/0x12a0 [ 89.855065][ T3639] [ 89.857369][ T3639] Memory state around the buggy address: [ 89.862977][ T3639] ffff88802ffea600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.871011][ T3639] ffff88802ffea680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.879050][ T3639] >ffff88802ffea700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.887083][ T3639] ^ [ 89.892425][ T3639] ffff88802ffea780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.900492][ T3639] ffff88802ffea800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.908535][ T3639] ================================================================== [ 89.919609][ T3639] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.926811][ T3639] CPU: 0 PID: 3639 Comm: udevd Not tainted syzkaller #0 [ 89.933735][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.943770][ T3639] Call Trace: [ 89.947044][ T3639] [ 89.949966][ T3639] dump_stack_lvl+0x188/0x24e [ 89.954641][ T3639] ? memcpy+0x3c/0x60 [ 89.958617][ T3639] ? show_regs_print_info+0x12/0x12 [ 89.963794][ T3639] ? load_image+0x410/0x410 [ 89.968276][ T3639] panic+0x2d3/0x710 [ 89.972147][ T3639] ? bpf_jit_dump+0xd0/0xd0 [ 89.976626][ T3639] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 89.982585][ T3639] ? _raw_spin_unlock+0x40/0x40 [ 89.987426][ T3639] ? print_memory_metadata+0x314/0x400 [ 89.992863][ T3639] check_panic_on_warn+0x80/0xa0 [ 89.997780][ T3639] ? string+0x204/0x290 [ 90.001910][ T3639] end_report+0x66/0x110 [ 90.006144][ T3639] kasan_report+0x118/0x140 [ 90.010626][ T3639] ? string+0x204/0x290 [ 90.014766][ T3639] string+0x204/0x290 [ 90.018741][ T3639] vsnprintf+0x10db/0x1c20 [ 90.023133][ T3639] add_uevent_var+0x1cd/0x460 [ 90.027794][ T3639] ? kobject_uevent_env+0x890/0x890 [ 90.032980][ T3639] ? trace_contention_end+0x5f/0x170 [ 90.038254][ T3639] ? __mutex_lock+0x1ab/0xae0 [ 90.042920][ T3639] rc_dev_uevent+0x15b/0x190 [ 90.047496][ T3639] dev_uevent+0x4d6/0x740 [ 90.051822][ T3639] ? dev_uevent_name+0xa0/0xa0 [ 90.056575][ T3639] uevent_show+0x1a8/0x320 [ 90.060981][ T3639] dev_attr_show+0x50/0xb0 [ 90.065390][ T3639] sysfs_kf_seq_show+0x349/0x4b0 [ 90.070314][ T3639] ? device_get_ownership+0xa0/0xa0 [ 90.075506][ T3639] seq_read_iter+0x460/0xc50 [ 90.080084][ T3639] vfs_read+0x471/0x960 [ 90.084229][ T3639] ? kernel_read+0x1e0/0x1e0 [ 90.088808][ T3639] ? __x64_sys_newfstat+0x19a/0x220 [ 90.093995][ T3639] ? __fdget_pos+0x2b5/0x360 [ 90.098572][ T3639] ksys_read+0x14d/0x260 [ 90.102803][ T3639] ? vfs_write+0x9a0/0x9a0 [ 90.107207][ T3639] ? lockdep_hardirqs_on+0x94/0x140 [ 90.112387][ T3639] do_syscall_64+0x4c/0xa0 [ 90.116792][ T3639] ? clear_bhb_loop+0x60/0xb0 [ 90.121457][ T3639] ? clear_bhb_loop+0x60/0xb0 [ 90.126124][ T3639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.132001][ T3639] RIP: 0033:0x7fbd63aa7407 [ 90.136401][ T3639] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 90.155988][ T3639] RSP: 002b:00007ffd9876dd00 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 90.164387][ T3639] RAX: ffffffffffffffda RBX: 00007fbd6422a880 RCX: 00007fbd63aa7407 [ 90.172346][ T3639] RDX: 0000000000001000 RSI: 0000557d77d5bb40 RDI: 000000000000000c [ 90.180301][ T3639] RBP: 00007fbd63befff0 R08: 0000000000000000 R09: 0000000000000000 [ 90.188256][ T3639] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 90.196210][ T3639] R13: 00007fbd63befea0 R14: 0000000000000000 R15: 0000557d77cd5490 [ 90.204170][ T3639] [ 90.207405][ T3639] Kernel Offset: disabled [ 90.211710][ T3639] Rebooting in 86400 seconds..