KASAN: use-after-free Read in path_init (2)