Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts.
2026/08/05 15:10:21 parsed 1 programs
2026/08/05 15:10:21 serving rpc on tcp://41581
[ 79.470527][ T5785] cgroup: Unknown subsys name 'net'
[ 79.570283][ T5785] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 80.972031][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 83.012269][ T5803] chnl_net:caif_netlink_parms(): no params data found
[ 83.067637][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.075187][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.082341][ T5803] bridge_slave_0: entered allmulticast mode
[ 83.089376][ T5803] bridge_slave_0: entered promiscuous mode
[ 83.098894][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.106420][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.113660][ T5803] bridge_slave_1: entered allmulticast mode
[ 83.120269][ T5803] bridge_slave_1: entered promiscuous mode
[ 83.146178][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.157177][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.181763][ T5803] team0: Port device team_slave_0 added
[ 83.189092][ T5803] team0: Port device team_slave_1 added
[ 83.208151][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.215170][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.241112][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.254788][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.261736][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.287703][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.324672][ T5803] hsr_slave_0: entered promiscuous mode
[ 83.330916][ T5803] hsr_slave_1: entered promiscuous mode
[ 83.450499][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.460980][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.470510][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.482112][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.506002][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.513197][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.521005][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.528150][ T5803] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.578228][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.596829][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.605489][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.620353][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.635276][ T66] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.642410][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.668345][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.675488][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.709097][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 83.834882][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.870002][ T5803] veth0_vlan: entered promiscuous mode
[ 83.881711][ T5803] veth1_vlan: entered promiscuous mode
[ 83.907312][ T5803] veth0_macvtap: entered promiscuous mode
[ 83.916384][ T5803] veth1_macvtap: entered promiscuous mode
[ 83.935981][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.951759][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.962567][ T5803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.972372][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.982299][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.991156][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.129687][ T5803] syz-executor (5803) used greatest stack depth: 20584 bytes left
[ 84.173464][ T2915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.729739][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.737766][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.766846][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.775083][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.398025][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.406237][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.416117][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.425602][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.433209][ T5863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 86.441143][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.650376][ T2915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.817913][ T9] cfg80211: failed to load regulatory.db
2026/08/05 15:10:30 executed programs: 0
[ 87.221847][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.230249][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.239232][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.247368][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.254941][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 87.262176][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 87.372898][ T5887] chnl_net:caif_netlink_parms(): no params data found
[ 87.426849][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.434221][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.441341][ T5887] bridge_slave_0: entered allmulticast mode
[ 87.448592][ T5887] bridge_slave_0: entered promiscuous mode
[ 87.457207][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.464739][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.471919][ T5887] bridge_slave_1: entered allmulticast mode
[ 87.478765][ T5887] bridge_slave_1: entered promiscuous mode
[ 87.499949][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.512319][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.538841][ T5887] team0: Port device team_slave_0 added
[ 87.547770][ T5887] team0: Port device team_slave_1 added
[ 87.567939][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.574940][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.600894][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.612688][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.620091][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.647116][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.680328][ T5887] hsr_slave_0: entered promiscuous mode
[ 87.686548][ T5887] hsr_slave_1: entered promiscuous mode
[ 87.692593][ T5887] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 87.701817][ T5887] Cannot create hsr debugfs directory
[ 89.294756][ T5863] Bluetooth: hci0: command tx timeout
[ 89.308278][ T2915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 89.354861][ T2915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.198400][ T2915] hsr_slave_0: left promiscuous mode
[ 90.204829][ T2915] hsr_slave_1: left promiscuous mode
[ 90.210796][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 90.218254][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 90.227513][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 90.234968][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 90.242477][ T2915] bridge_slave_1: left allmulticast mode
[ 90.248256][ T2915] bridge_slave_1: left promiscuous mode
[ 90.254710][ T2915] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.265488][ T2915] bridge_slave_0: left allmulticast mode
[ 90.271121][ T2915] bridge_slave_0: left promiscuous mode
[ 90.277319][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.297405][ T2915] veth1_macvtap: left promiscuous mode
[ 90.303043][ T2915] veth0_macvtap: left promiscuous mode
[ 90.308694][ T2915] veth1_vlan: left promiscuous mode
[ 90.315132][ T2915] veth0_vlan: left promiscuous mode
[ 90.650655][ T2915] team0 (unregistering): Port device team_slave_1 removed
[ 90.676703][ T2915] team0 (unregistering): Port device team_slave_0 removed
[ 90.706477][ T2915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 90.740142][ T2915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 90.916552][ T2915] bond0 (unregistering): Released all slaves
[ 90.991787][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.001947][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.011389][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.020190][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.108660][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.126544][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.146474][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.153647][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.172147][ T66] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.179261][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.349178][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.376234][ T5863] Bluetooth: hci0: command tx timeout
[ 91.407549][ T5887] veth0_vlan: entered promiscuous mode
[ 91.427712][ T5887] veth1_vlan: entered promiscuous mode
[ 91.463167][ T5887] veth0_macvtap: entered promiscuous mode
[ 91.486478][ T5887] veth1_macvtap: entered promiscuous mode
[ 91.510532][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.530022][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.541476][ T5887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.550496][ T5887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.559651][ T5887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.568620][ T5887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.671041][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.680101][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.724890][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.732771][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.093783][ T5796] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 92.321559][ T5796] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 92.331685][ T5796] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 92.344576][ T5796] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 92.357002][ T5796] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 92.367112][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 92.375261][ T5796] usb 1-1: Product: syz
[ 92.379505][ T5796] usb 1-1: Manufacturer: syz
[ 92.384659][ T5796] usb 1-1: SerialNumber: syz
[ 92.404197][ T5926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 92.411727][ T5926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 92.419417][ T5926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 92.631705][ T5796] redrat3 1-1:1.0: Problem fetching firmware ID
[ 92.645903][ T5796] redrat3 1-1:1.0: Failed to read timeout from hardware
[ 92.727118][ T5796] rc_core: IR keymap rc-hauppauge not found
[ 92.733074][ T5796] Registered IR keymap rc-empty
[ 92.744994][ T5796] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0
[ 92.761722][ T5796] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc0/input5
[ 92.779772][ T5796] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 92.789125][ T5796] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 92.797879][ T5796] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 92.812569][ T5796] redrat3: probe of 1-1:1.0 failed with error -5
[ 92.824445][ T5796] usb 1-1: USB disconnect, device number 2
2026/08/05 15:10:36 executed programs: 3
[ 93.453797][ T5796] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 93.453841][ T5863] Bluetooth: hci0: command tx timeout
[ 93.644950][ T5796] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 93.655030][ T5796] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 93.664918][ T5796] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 93.677255][ T5796] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00
[ 93.686366][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 93.694624][ T5796] usb 1-1: Product: syz
[ 93.698875][ T5796] usb 1-1: Manufacturer: syz
[ 93.703475][ T5796] usb 1-1: SerialNumber: syz
[ 93.710644][ T5929] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 93.717959][ T5929] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 93.726061][ T5929] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 93.939185][ T5796] redrat3 1-1:1.0: Problem fetching firmware ID
[ 93.948764][ T5796] redrat3 1-1:1.0: Failed to read timeout from hardware
[ 94.023772][ T5796] rc_core: IR keymap rc-hauppauge not found
[ 94.029712][ T5796] Registered IR keymap rc-empty
[ 94.036285][ T5796] rc rc1: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc1
[ 94.049575][ T5796] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/rc/rc1/input6
[ 94.065044][ T5796] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 94.074030][ T5796] redrat3 1-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0
[ 94.082987][ T5796] redrat3 1-1:1.0: redrat3_enable_detector: detector status: -5, should be 1
[ 94.094123][ T5796] redrat3: probe of 1-1:1.0 failed with error -5
[ 94.104046][ T5796] usb 1-1: USB disconnect, device number 3
[ 94.112228][ T5141] ==================================================================
[ 94.120303][ T5141] BUG: KASAN: slab-use-after-free in string+0x204/0x290
[ 94.127235][ T5141] Read of size 1 at addr ffff88807e30c760 by task udevd/5141
[ 94.134579][ T5141]
[ 94.136890][ T5141] CPU: 1 PID: 5141 Comm: udevd Not tainted syzkaller #0
[ 94.143802][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 94.153853][ T5141] Call Trace:
[ 94.157129][ T5141]
[ 94.160044][ T5141] dump_stack_lvl+0x18c/0x250
[ 94.164705][ T5141] ? __lock_acquire+0x7d80/0x7d80
[ 94.169797][ T5141] ? show_regs_print_info+0x20/0x20
[ 94.174976][ T5141] ? load_image+0x420/0x420
[ 94.179475][ T5141] ? __virt_addr_valid+0x10c/0x380
[ 94.184590][ T5141] ? __virt_addr_valid+0x10c/0x380
[ 94.189684][ T5141] ? __virt_addr_valid+0x10c/0x380
[ 94.194777][ T5141] print_report+0xa8/0x210
[ 94.199175][ T5141] ? string+0x204/0x290
[ 94.203313][ T5141] kasan_report+0x117/0x150
[ 94.207802][ T5141] ? string+0x204/0x290
[ 94.211953][ T5141] string+0x204/0x290
[ 94.215931][ T5141] vsnprintf+0xf72/0x1ba0
[ 94.220253][ T5141] add_uevent_var+0x1d1/0x460
[ 94.224923][ T5141] ? vfs_read+0x486/0x990
[ 94.229244][ T5141] ? kobject_uevent_env+0x890/0x890
[ 94.234437][ T5141] rc_dev_uevent+0x15f/0x190
[ 94.239017][ T5141] dev_uevent+0x53a/0x7c0
[ 94.243338][ T5141] ? dev_uevent_name+0xa0/0xa0
[ 94.248094][ T5141] uevent_show+0x196/0x300
[ 94.252499][ T5141] dev_attr_show+0x54/0xc0
[ 94.256909][ T5141] sysfs_kf_seq_show+0x34d/0x4c0
[ 94.261833][ T5141] ? device_get_ownership+0xb0/0xb0
[ 94.267027][ T5141] seq_read_iter+0x464/0xc50
[ 94.271604][ T5141] ? common_file_perm+0x198/0x1f0
[ 94.276618][ T5141] vfs_read+0x486/0x990
[ 94.280765][ T5141] ? kernel_read+0x1e0/0x1e0
[ 94.285347][ T5141] ? __x64_sys_newfstat+0x1c4/0x250
[ 94.290535][ T5141] ? do_sys_openat2+0x170/0x1d0
[ 94.295375][ T5141] ? __fdget_pos+0x2ba/0x330
[ 94.299954][ T5141] ksys_read+0x151/0x260
[ 94.304189][ T5141] ? vfs_write+0x9a0/0x9a0
[ 94.308593][ T5141] ? lockdep_hardirqs_on+0x98/0x150
[ 94.313782][ T5141] do_syscall_64+0x55/0xb0
[ 94.318187][ T5141] ? clear_bhb_loop+0x40/0x90
[ 94.322850][ T5141] ? clear_bhb_loop+0x40/0x90
[ 94.327513][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 94.333393][ T5141] RIP: 0033:0x7f68166a7407
[ 94.337811][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 94.357403][ T5141] RSP: 002b:00007ffc5fddaf40 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 94.365806][ T5141] RAX: ffffffffffffffda RBX: 00007f6816e45880 RCX: 00007f68166a7407
[ 94.373762][ T5141] RDX: 0000000000001000 RSI: 0000563be9274560 RDI: 000000000000000c
[ 94.381720][ T5141] RBP: 00007f68167efff0 R08: 0000000000000000 R09: 0000000000000000
[ 94.389677][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 94.397634][ T5141] R13: 00007f68167efea0 R14: 0000000000000000 R15: 0000563be92729e0
[ 94.405609][ T5141]
[ 94.408639][ T5141]
[ 94.410950][ T5141] Allocated by task 5796:
[ 94.415262][ T5141] kasan_set_track+0x4e/0x70
[ 94.419874][ T5141] __kasan_kmalloc+0x8f/0xa0
[ 94.424453][ T5141] redrat3_dev_probe+0x3f9/0x23d0
[ 94.429509][ T5141] usb_probe_interface+0x5c2/0xaf0
[ 94.434627][ T5141] really_probe+0x247/0xae0
[ 94.439121][ T5141] __driver_probe_device+0x1f5/0x390
[ 94.444406][ T5141] driver_probe_device+0x4f/0x420
[ 94.449436][ T5141] __device_attach_driver+0x2ca/0x510
[ 94.454809][ T5141] bus_for_each_drv+0x252/0x2e0
[ 94.459667][ T5141] __device_attach+0x2c1/0x420
[ 94.464452][ T5141] bus_probe_device+0x180/0x260
[ 94.469302][ T5141] device_add+0x87c/0xc40
[ 94.473619][ T5141] usb_set_configuration+0x1ad0/0x2150
[ 94.479068][ T5141] usb_generic_driver_probe+0x8d/0x150
[ 94.484521][ T5141] usb_probe_device+0x12a/0x260
[ 94.489371][ T5141] really_probe+0x247/0xae0
[ 94.493867][ T5141] __driver_probe_device+0x1f5/0x390
[ 94.499148][ T5141] driver_probe_device+0x4f/0x420
[ 94.504168][ T5141] __device_attach_driver+0x2ca/0x510
[ 94.509532][ T5141] bus_for_each_drv+0x252/0x2e0
[ 94.514375][ T5141] __device_attach+0x2c1/0x420
[ 94.519131][ T5141] bus_probe_device+0x180/0x260
[ 94.523983][ T5141] device_add+0x87c/0xc40
[ 94.528299][ T5141] usb_new_device+0x995/0x1550
[ 94.533053][ T5141] hub_event+0x29d5/0x4a80
[ 94.537455][ T5141] process_scheduled_works+0xa60/0x1600
[ 94.542989][ T5141] worker_thread+0xa5e/0xfe0
[ 94.547570][ T5141] kthread+0x2fa/0x390
[ 94.551641][ T5141] ret_from_fork+0x48/0x80
[ 94.556056][ T5141] ret_from_fork_asm+0x11/0x20
[ 94.560814][ T5141]
[ 94.563125][ T5141] Freed by task 5796:
[ 94.567097][ T5141] kasan_set_track+0x4e/0x70
[ 94.571680][ T5141] kasan_save_free_info+0x28/0x40
[ 94.576704][ T5141] ____kasan_slab_free+0x126/0x1f0
[ 94.581806][ T5141] slab_free_freelist_hook+0x130/0x1a0
[ 94.587253][ T5141] __kmem_cache_free+0xba/0x1f0
[ 94.592095][ T5141] redrat3_dev_probe+0x1b73/0x23d0
[ 94.597198][ T5141] usb_probe_interface+0x5c2/0xaf0
[ 94.602298][ T5141] really_probe+0x247/0xae0
[ 94.606790][ T5141] __driver_probe_device+0x1f5/0x390
[ 94.612069][ T5141] driver_probe_device+0x4f/0x420
[ 94.617082][ T5141] __device_attach_driver+0x2ca/0x510
[ 94.622442][ T5141] bus_for_each_drv+0x252/0x2e0
[ 94.627279][ T5141] __device_attach+0x2c1/0x420
[ 94.632032][ T5141] bus_probe_device+0x180/0x260
[ 94.636871][ T5141] device_add+0x87c/0xc40
[ 94.641186][ T5141] usb_set_configuration+0x1ad0/0x2150
[ 94.646632][ T5141] usb_generic_driver_probe+0x8d/0x150
[ 94.652078][ T5141] usb_probe_device+0x12a/0x260
[ 94.656914][ T5141] really_probe+0x247/0xae0
[ 94.661399][ T5141] __driver_probe_device+0x1f5/0x390
[ 94.666671][ T5141] driver_probe_device+0x4f/0x420
[ 94.671694][ T5141] __device_attach_driver+0x2ca/0x510
[ 94.677052][ T5141] bus_for_each_drv+0x252/0x2e0
[ 94.681891][ T5141] __device_attach+0x2c1/0x420
[ 94.686641][ T5141] bus_probe_device+0x180/0x260
[ 94.691487][ T5141] device_add+0x87c/0xc40
[ 94.695811][ T5141] usb_new_device+0x995/0x1550
[ 94.700558][ T5141] hub_event+0x29d5/0x4a80
[ 94.704957][ T5141] process_scheduled_works+0xa60/0x1600
[ 94.710496][ T5141] worker_thread+0xa5e/0xfe0
[ 94.715071][ T5141] kthread+0x2fa/0x390
[ 94.719125][ T5141] ret_from_fork+0x48/0x80
[ 94.723528][ T5141] ret_from_fork_asm+0x11/0x20
[ 94.728286][ T5141]
[ 94.730593][ T5141] Last potentially related work creation:
[ 94.736294][ T5141] kasan_save_stack+0x3e/0x60
[ 94.740958][ T5141] __kasan_record_aux_stack+0xaf/0xc0
[ 94.746323][ T5141] insert_work+0x3d/0x310
[ 94.750638][ T5141] __queue_work+0xbfd/0xfd0
[ 94.755123][ T5141] queue_work_on+0x128/0x1f0
[ 94.759694][ T5141] __seccomp_filter_release+0x155/0x1e0
[ 94.765228][ T5141] release_task+0x1504/0x1690
[ 94.769909][ T5141] wait_consider_task+0x19d9/0x2e80
[ 94.775103][ T5141] do_wait+0x501/0xab0
[ 94.779162][ T5141] kernel_wait4+0x22f/0x2b0
[ 94.783653][ T5141] __x64_sys_wait4+0x167/0x240
[ 94.788408][ T5141] do_syscall_64+0x55/0xb0
[ 94.792844][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 94.798734][ T5141]
[ 94.801043][ T5141] The buggy address belongs to the object at ffff88807e30c000
[ 94.801043][ T5141] which belongs to the cache kmalloc-2k of size 2048
[ 94.815082][ T5141] The buggy address is located 1888 bytes inside of
[ 94.815082][ T5141] freed 2048-byte region [ffff88807e30c000, ffff88807e30c800)
[ 94.829035][ T5141]
[ 94.831346][ T5141] The buggy address belongs to the physical page:
[ 94.837753][ T5141] page:ffffea0001f8c200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e308
[ 94.847891][ T5141] head:ffffea0001f8c200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 94.856810][ T5141] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 94.864780][ T5141] page_type: 0xffffffff()
[ 94.869101][ T5141] raw: 00fff00000000840 ffff888017c42000 ffffea000507a600 dead000000000002
[ 94.877669][ T5141] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[ 94.886232][ T5141] page dumped because: kasan: bad access detected
[ 94.892635][ T5141] page_owner tracks the page as allocated
[ 94.898332][ T5141] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5130, tgid 5130 (klogd), ts 26590534158, free_ts 24588741336
[ 94.919065][ T5141] post_alloc_hook+0x1c1/0x200
[ 94.923825][ T5141] get_page_from_freelist+0x2181/0x22a0
[ 94.929356][ T5141] __alloc_pages+0x1f0/0x460
[ 94.933927][ T5141] alloc_slab_page+0x5d/0x180
[ 94.938588][ T5141] new_slab+0x87/0x2d0
[ 94.942639][ T5141] ___slab_alloc+0xc5c/0x12f0
[ 94.947298][ T5141] __kmem_cache_alloc_node+0x11f/0x250
[ 94.952749][ T5141] kmalloc_trace+0x2a/0xe0
[ 94.957156][ T5141] syslog_print+0x104/0x630
[ 94.961643][ T5141] do_syslog+0x575/0x820
[ 94.965873][ T5141] __x64_sys_syslog+0x7c/0x90
[ 94.970534][ T5141] do_syscall_64+0x55/0xb0
[ 94.974934][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 94.980810][ T5141] page last free stack trace:
[ 94.985463][ T5141] free_unref_page_prepare+0x7d7/0x8f0
[ 94.990904][ T5141] free_unref_page+0x32/0x2e0
[ 94.995567][ T5141] free_contig_range+0xa1/0x150
[ 95.000405][ T5141] destroy_args+0x7d/0x840
[ 95.004815][ T5141] debug_vm_pgtable+0x411/0x440
[ 95.009656][ T5141] do_one_initcall+0x242/0x790
[ 95.014411][ T5141] do_initcall_level+0x13d/0x1f0
[ 95.019336][ T5141] do_initcalls+0x69/0xd0
[ 95.023653][ T5141] kernel_init_freeable+0x3d9/0x560
[ 95.028843][ T5141] kernel_init+0x1d/0x1c0
[ 95.033173][ T5141] ret_from_fork+0x48/0x80
[ 95.037578][ T5141] ret_from_fork_asm+0x11/0x20
[ 95.042330][ T5141]
[ 95.044639][ T5141] Memory state around the buggy address:
[ 95.050251][ T5141] ffff88807e30c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 95.058297][ T5141] ffff88807e30c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 95.066343][ T5141] >ffff88807e30c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 95.074383][ T5141] ^
[ 95.081555][ T5141] ffff88807e30c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 95.089599][ T5141] ffff88807e30c800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 95.097641][ T5141] ==================================================================
[ 95.121016][ T5141] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 95.128233][ T5141] CPU: 1 PID: 5141 Comm: udevd Not tainted syzkaller #0
[ 95.135149][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 95.145209][ T5141] Call Trace:
[ 95.148469][ T5141]
[ 95.151378][ T5141] dump_stack_lvl+0x18c/0x250
[ 95.156039][ T5141] ? show_regs_print_info+0x20/0x20
[ 95.161217][ T5141] ? load_image+0x420/0x420
[ 95.165703][ T5141] panic+0x2ca/0x720
[ 95.169580][ T5141] ? bpf_jit_dump+0xd0/0xd0
[ 95.174067][ T5141] ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 95.180027][ T5141] ? _raw_spin_unlock+0x40/0x40
[ 95.184859][ T5141] ? print_memory_metadata+0x314/0x400
[ 95.190296][ T5141] ? string+0x204/0x290
[ 95.194433][ T5141] check_panic_on_warn+0x84/0xa0
[ 95.199356][ T5141] ? string+0x204/0x290
[ 95.203504][ T5141] end_report+0x6f/0x130
[ 95.207749][ T5141] kasan_report+0x128/0x150
[ 95.212236][ T5141] ? string+0x204/0x290
[ 95.216374][ T5141] string+0x204/0x290
[ 95.220338][ T5141] vsnprintf+0xf72/0x1ba0
[ 95.224663][ T5141] add_uevent_var+0x1d1/0x460
[ 95.229357][ T5141] ? vfs_read+0x486/0x990
[ 95.233776][ T5141] ? kobject_uevent_env+0x890/0x890
[ 95.238973][ T5141] rc_dev_uevent+0x15f/0x190
[ 95.243546][ T5141] dev_uevent+0x53a/0x7c0
[ 95.247875][ T5141] ? dev_uevent_name+0xa0/0xa0
[ 95.252619][ T5141] uevent_show+0x196/0x300
[ 95.257016][ T5141] dev_attr_show+0x54/0xc0
[ 95.261413][ T5141] sysfs_kf_seq_show+0x34d/0x4c0
[ 95.266327][ T5141] ? device_get_ownership+0xb0/0xb0
[ 95.271504][ T5141] seq_read_iter+0x464/0xc50
[ 95.276072][ T5141] ? common_file_perm+0x198/0x1f0
[ 95.281093][ T5141] vfs_read+0x486/0x990
[ 95.285240][ T5141] ? kernel_read+0x1e0/0x1e0
[ 95.289810][ T5141] ? __x64_sys_newfstat+0x1c4/0x250
[ 95.294988][ T5141] ? do_sys_openat2+0x170/0x1d0
[ 95.299818][ T5141] ? __fdget_pos+0x2ba/0x330
[ 95.304388][ T5141] ksys_read+0x151/0x260
[ 95.308616][ T5141] ? vfs_write+0x9a0/0x9a0
[ 95.313016][ T5141] ? lockdep_hardirqs_on+0x98/0x150
[ 95.318215][ T5141] do_syscall_64+0x55/0xb0
[ 95.322611][ T5141] ? clear_bhb_loop+0x40/0x90
[ 95.327271][ T5141] ? clear_bhb_loop+0x40/0x90
[ 95.331929][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 95.337809][ T5141] RIP: 0033:0x7f68166a7407
[ 95.342209][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 95.361807][ T5141] RSP: 002b:00007ffc5fddaf40 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 95.370200][ T5141] RAX: ffffffffffffffda RBX: 00007f6816e45880 RCX: 00007f68166a7407
[ 95.378173][ T5141] RDX: 0000000000001000 RSI: 0000563be9274560 RDI: 000000000000000c
[ 95.386123][ T5141] RBP: 00007f68167efff0 R08: 0000000000000000 R09: 0000000000000000
[ 95.394074][ T5141] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 95.402026][ T5141] R13: 00007f68167efea0 R14: 0000000000000000 R15: 0000563be92729e0
[ 95.409983][ T5141]
[ 95.413255][ T5141] Kernel Offset: disabled
[ 95.417563][ T5141] Rebooting in 86400 seconds..