syzkaller login: [ 92.164875][ T36] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts.
2026/02/17 16:45:17 parsed 1 programs
[ 100.285960][ T5801] cgroup: Unknown subsys name 'net'
[ 100.529599][ T5801] cgroup: Unknown subsys name 'cpuset'
[ 100.602310][ T5801] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 102.572707][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 106.267892][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.267917][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.418643][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.418666][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.691761][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 107.697009][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 107.718638][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 107.719900][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 107.720665][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 108.196082][ T5843] chnl_net:caif_netlink_parms(): no params data found
[ 109.535039][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.536394][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.536560][ T5843] bridge_slave_0: entered allmulticast mode
[ 109.538575][ T5843] bridge_slave_0: entered promiscuous mode
[ 109.591238][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.591360][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.601922][ T5843] bridge_slave_1: entered allmulticast mode
[ 109.609130][ T5843] bridge_slave_1: entered promiscuous mode
[ 109.726525][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.754961][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 109.843942][ T5843] team0: Port device team_slave_0 added
[ 109.848258][ T5843] team0: Port device team_slave_1 added
[ 109.957684][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 109.957704][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.957731][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 109.977447][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.977501][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.977577][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.255065][ T5843] hsr_slave_0: entered promiscuous mode
[ 110.256912][ T5843] hsr_slave_1: entered promiscuous mode
[ 111.828410][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 111.869870][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 111.907259][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 111.947038][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 112.300554][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[ 112.345947][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[ 112.368548][ T159] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.368861][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 112.406232][ T159] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.406618][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 112.749229][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 112.927287][ T5843] veth0_vlan: entered promiscuous mode
[ 112.943333][ T5843] veth1_vlan: entered promiscuous mode
[ 112.994911][ T5843] veth0_macvtap: entered promiscuous mode
[ 113.013608][ T5843] veth1_macvtap: entered promiscuous mode
[ 113.037174][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.058527][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.079790][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.093276][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.098124][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.098175][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/02/17 16:45:34 executed programs: 0
[ 113.487968][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 113.501916][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 113.527844][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 113.542648][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 113.544223][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 113.657162][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 113.659824][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 113.661147][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 113.705602][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 113.709537][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 113.746674][ T5921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 113.760781][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 113.795103][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 113.801047][ T5926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 113.812778][ T5926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 113.848529][ T5926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 113.858531][ T5926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 113.865658][ T5926] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 113.869644][ T5926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 113.872727][ T5926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 113.906729][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 113.909810][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 113.910803][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 113.925165][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 113.928021][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 114.397620][ T1477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.694438][ T1477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.968788][ T1477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.274969][ T1477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.593464][ T5114] Bluetooth: hci0: command tx timeout
[ 115.831692][ T5114] Bluetooth: hci1: command tx timeout
[ 115.911637][ T5114] Bluetooth: hci3: command tx timeout
[ 115.911791][ T5114] Bluetooth: hci2: command tx timeout
[ 115.973695][ T5923] chnl_net:caif_netlink_parms(): no params data found
[ 115.991131][ T5919] chnl_net:caif_netlink_parms(): no params data found
[ 115.993066][ T60] Bluetooth: hci4: command tx timeout
[ 116.122542][ T5922] chnl_net:caif_netlink_parms(): no params data found
[ 116.157964][ T5917] chnl_net:caif_netlink_parms(): no params data found
[ 116.170984][ T1477] bridge_slave_1: left allmulticast mode
[ 116.171194][ T1477] bridge_slave_1: left promiscuous mode
[ 116.179578][ T1477] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.262890][ T1477] bridge_slave_0: left allmulticast mode
[ 116.262914][ T1477] bridge_slave_0: left promiscuous mode
[ 116.263133][ T1477] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.602616][ T1477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 117.663707][ T1477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 117.671871][ T60] Bluetooth: hci0: command tx timeout
[ 117.687547][ T1477] bond0 (unregistering): Released all slaves
[ 117.777600][ T5912] chnl_net:caif_netlink_parms(): no params data found
[ 117.913391][ T60] Bluetooth: hci1: command tx timeout
[ 117.991721][ T5114] Bluetooth: hci3: command tx timeout
[ 117.991816][ T60] Bluetooth: hci2: command tx timeout
[ 118.071717][ T60] Bluetooth: hci4: command tx timeout
[ 118.211869][ T1477] hsr_slave_0: left promiscuous mode
[ 118.261781][ T1477] hsr_slave_1: left promiscuous mode
[ 118.263328][ T1477] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 118.263393][ T1477] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 118.293808][ T1477] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 118.293843][ T1477] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 118.405504][ T1477] veth1_macvtap: left promiscuous mode
[ 118.405665][ T1477] veth0_macvtap: left promiscuous mode
[ 118.405850][ T1477] veth1_vlan: left promiscuous mode
[ 118.406898][ T1477] veth0_vlan: left promiscuous mode
[ 119.751772][ T60] Bluetooth: hci0: command tx timeout
[ 119.991738][ T60] Bluetooth: hci1: command tx timeout
[ 120.071891][ T5114] Bluetooth: hci3: command tx timeout
[ 120.078729][ T60] Bluetooth: hci2: command tx timeout
[ 120.151786][ T60] Bluetooth: hci4: command tx timeout
[ 120.702565][ T1477] team0 (unregistering): Port device team_slave_1 removed
[ 120.902375][ T1477] team0 (unregistering): Port device team_slave_0 removed
[ 121.831790][ T60] Bluetooth: hci0: command tx timeout
[ 122.076085][ T60] Bluetooth: hci1: command tx timeout
[ 122.151834][ T60] Bluetooth: hci2: command tx timeout
[ 122.151843][ T5114] Bluetooth: hci3: command tx timeout
[ 122.231754][ T60] Bluetooth: hci4: command tx timeout
[ 122.750880][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state
[ 122.751037][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.751188][ T5923] bridge_slave_0: entered allmulticast mode
[ 122.771301][ T5923] bridge_slave_0: entered promiscuous mode
[ 122.809832][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state
[ 122.809919][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.810079][ T5919] bridge_slave_0: entered allmulticast mode
[ 122.832823][ T5919] bridge_slave_0: entered promiscuous mode
[ 122.865882][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state
[ 122.866012][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state
[ 122.866173][ T5923] bridge_slave_1: entered allmulticast mode
[ 122.868173][ T5923] bridge_slave_1: entered promiscuous mode
[ 122.917948][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state
[ 122.918074][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[ 122.918271][ T5919] bridge_slave_1: entered allmulticast mode
[ 122.921092][ T5919] bridge_slave_1: entered promiscuous mode
[ 123.031977][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.032074][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[ 123.032265][ T5922] bridge_slave_0: entered allmulticast mode
[ 123.034506][ T5922] bridge_slave_0: entered promiscuous mode
[ 123.091179][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.091286][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[ 123.091438][ T5917] bridge_slave_0: entered allmulticast mode
[ 123.100198][ T5917] bridge_slave_0: entered promiscuous mode
[ 123.141678][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.141819][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[ 123.142008][ T5922] bridge_slave_1: entered allmulticast mode
[ 123.144115][ T5922] bridge_slave_1: entered promiscuous mode
[ 123.146783][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.146872][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[ 123.147009][ T5912] bridge_slave_0: entered allmulticast mode
[ 123.148896][ T5912] bridge_slave_0: entered promiscuous mode
[ 123.174923][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 123.176606][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.176949][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[ 123.177485][ T5917] bridge_slave_1: entered allmulticast mode
[ 123.191448][ T5917] bridge_slave_1: entered promiscuous mode
[ 123.223222][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 123.271064][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 123.293924][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.294096][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[ 123.294238][ T5912] bridge_slave_1: entered allmulticast mode
[ 123.296161][ T5912] bridge_slave_1: entered promiscuous mode
[ 123.303900][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 123.424490][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 123.454627][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 123.506393][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 123.508635][ T5923] team0: Port device team_slave_0 added
[ 123.529252][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 123.532845][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 123.558004][ T5919] team0: Port device team_slave_0 added
[ 123.581044][ T5923] team0: Port device team_slave_1 added
[ 123.606492][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 123.608998][ T5919] team0: Port device team_slave_1 added
[ 123.696894][ T5922] team0: Port device team_slave_0 added
[ 123.724647][ T5917] team0: Port device team_slave_0 added
[ 123.772947][ T5922] team0: Port device team_slave_1 added
[ 123.773988][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 123.774004][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.774030][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 123.776741][ T5917] team0: Port device team_slave_1 added
[ 123.778911][ T5912] team0: Port device team_slave_0 added
[ 123.779797][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 123.779812][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.779840][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 123.875834][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.875890][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.875965][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.938338][ T5912] team0: Port device team_slave_1 added
[ 123.941846][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.941862][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.941883][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 124.684067][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 124.684082][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.684102][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 124.736174][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 124.736188][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.736209][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 124.780912][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 124.780968][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.781045][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 124.812640][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 124.812702][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.812778][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 124.830034][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 124.830079][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.830161][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 124.935882][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 124.935902][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.935931][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 125.068477][ T5923] hsr_slave_0: entered promiscuous mode
[ 125.069563][ T5923] hsr_slave_1: entered promiscuous mode
[ 125.093425][ T5919] hsr_slave_0: entered promiscuous mode
[ 125.094807][ T5919] hsr_slave_1: entered promiscuous mode
[ 125.095899][ T5919] debugfs: 'hsr0' already exists in 'hsr'
[ 125.095987][ T5919] Cannot create hsr debugfs directory
[ 125.252084][ T5922] hsr_slave_0: entered promiscuous mode
[ 125.253658][ T5922] hsr_slave_1: entered promiscuous mode
[ 125.254689][ T5922] debugfs: 'hsr0' already exists in 'hsr'
[ 125.254808][ T5922] Cannot create hsr debugfs directory
[ 125.324271][ T5917] hsr_slave_0: entered promiscuous mode
[ 125.325687][ T5917] hsr_slave_1: entered promiscuous mode
[ 125.326689][ T5917] debugfs: 'hsr0' already exists in 'hsr'
[ 125.326714][ T5917] Cannot create hsr debugfs directory
[ 125.389921][ T5912] hsr_slave_0: entered promiscuous mode
[ 125.391368][ T5912] hsr_slave_1: entered promiscuous mode
[ 125.396387][ T5912] debugfs: 'hsr0' already exists in 'hsr'
[ 125.396470][ T5912] Cannot create hsr debugfs directory
[ 127.095544][ T5923] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 127.155348][ T5923] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 127.294342][ T5923] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 127.331725][ T5923] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 127.938903][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0
[ 127.971333][ T5923] 8021q: adding VLAN 0 to HW filter on device team0
[ 127.995653][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.002972][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 128.040469][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.040754][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 128.327773][ T5919] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 128.388161][ T5919] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 128.442944][ T5919] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 128.557250][ T5919] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 128.756594][ T5922] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 128.793049][ T5922] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 128.842916][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 128.850797][ T5922] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 128.929251][ T5922] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 129.240647][ T5917] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 129.287455][ T5917] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 129.375883][ T5917] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 129.468340][ T5917] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 129.688100][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 129.725001][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 129.766797][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 129.831911][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 130.009820][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0
[ 130.077351][ T5923] veth0_vlan: entered promiscuous mode
[ 130.176884][ T5923] veth1_vlan: entered promiscuous mode
[ 130.189505][ T5919] 8021q: adding VLAN 0 to HW filter on device team0
[ 130.216900][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0
[ 130.257453][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 130.257900][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 130.320200][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state
[ 130.320361][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 130.369081][ T5922] 8021q: adding VLAN 0 to HW filter on device team0
[ 130.429478][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 130.429662][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 130.469151][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0
[ 130.480124][ T5923] veth0_macvtap: entered promiscuous mode
[ 130.495807][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state
[ 130.495916][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 130.527034][ T5923] veth1_macvtap: entered promiscuous mode
[ 130.592920][ T5917] 8021q: adding VLAN 0 to HW filter on device team0
[ 130.617822][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0
[ 130.619903][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 130.651426][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state
[ 130.663252][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 130.697273][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 130.719433][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state
[ 130.719607][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 130.781272][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.796701][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.804373][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.833176][ T5912] 8021q: adding VLAN 0 to HW filter on device team0
[ 130.833486][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.957655][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 130.963052][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 131.052754][ T159] bridge0: port 2(bridge_slave_1) entered blocking state
[ 131.052870][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 131.247887][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 131.269154][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 131.269177][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 131.438931][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 131.446735][ T1477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 131.446757][ T1477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/02/17 16:45:52 executed programs: 10
[ 131.667823][ T5919] veth0_vlan: entered promiscuous mode
[ 131.743059][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 131.744866][ T5919] veth1_vlan: entered promiscuous mode
[ 131.811578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 131.821563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 131.827511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 131.831530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 131.841539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 131.851554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 131.861537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 131.871538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 131.881541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 131.891574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[ 132.484974][ T5922] veth0_vlan: entered promiscuous mode
[ 132.897287][ T5922] veth1_vlan: entered promiscuous mode
[ 133.604461][ T5919] veth0_macvtap: entered promiscuous mode
[ 133.636775][ T5919] veth1_macvtap: entered promiscuous mode
[ 134.259788][ T5917] veth0_vlan: entered promiscuous mode
[ 134.274454][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 134.609370][ T5922] veth0_macvtap: entered promiscuous mode
[ 134.636751][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 134.637397][ T5917] veth1_vlan: entered promiscuous mode
[ 134.641384][ T5922] veth1_macvtap: entered promiscuous mode
[ 134.948665][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 135.290592][ T993] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 135.309170][ T993] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 135.501600][ T993] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 135.627736][ T159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 135.630208][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 136.160038][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 136.656468][ T1477] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.944286][ T1477] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
2026/02/17 16:45:57 executed programs: 25
[ 137.282104][ T5917] veth0_macvtap: entered promiscuous mode
[ 137.614818][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.643162][ T5912] veth0_vlan: entered promiscuous mode
[ 137.646868][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.864339][ T5917] veth1_macvtap: entered promiscuous mode
[ 138.302563][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 138.302678][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 138.998541][ T5912] veth1_vlan: entered promiscuous mode
[ 139.297132][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 139.297167][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 139.677967][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 140.360341][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 141.301307][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.301330][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 141.347391][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.366145][ T1477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.366168][ T1477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 141.368650][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.403183][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.628867][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.679680][ T5912] veth0_macvtap: entered promiscuous mode
[ 141.784871][ T5912] veth1_macvtap: entered promiscuous mode
2026/02/17 16:46:03 executed programs: 40
[ 142.113708][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 142.113732][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 143.136323][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 143.794431][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 144.725099][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 144.725122][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 146.564884][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 146.570950][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 146.590138][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 146.610561][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/02/17 16:46:08 executed programs: 59
[ 149.549353][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 149.549378][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/02/17 16:46:13 executed programs: 76
[ 155.499828][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 155.499852][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/02/17 16:46:18 executed programs: 95
[ 158.063334][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 158.063354][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/02/17 16:46:25 executed programs: 114
2026/02/17 16:46:30 executed programs: 132
[ 174.980372][ T6608] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[ 174.981031][ T6612] ==================================================================
[ 174.981052][ T6612] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x360
[ 174.981102][ T6612] Read of size 8 at addr ffff88802b56c418 by task syz.1.154/6612
[ 174.981120][ T6612]
[ 174.981149][ T6612] CPU: 1 UID: 0 PID: 6612 Comm: syz.1.154 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 174.981174][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 174.981195][ T6612] Call Trace:
[ 174.981207][ T6612]
[ 174.981217][ T6612] dump_stack_lvl+0xe8/0x150
[ 174.981251][ T6612] print_report+0xba/0x230
[ 174.981278][ T6612] ? dvb_device_open+0xc4/0x360
[ 174.981306][ T6612] kasan_report+0x117/0x150
[ 174.981334][ T6612] ? dvb_device_open+0xc4/0x360
[ 174.981368][ T6612] dvb_device_open+0xc4/0x360
[ 174.981398][ T6612] ? rt_spin_unlock+0x160/0x200
[ 174.981423][ T6612] chrdev_open+0x4d0/0x5f0
[ 174.981453][ T6612] ? __pfx_chrdev_open+0x10/0x10
[ 174.981475][ T6612] ? fsnotify_open_perm_and_set_mode+0x138/0x6e0
[ 174.981510][ T6612] ? __pfx_chrdev_open+0x10/0x10
[ 174.981542][ T6612] do_dentry_open+0x83d/0x13e0
[ 174.981577][ T6612] vfs_open+0x3b/0x350
[ 174.981610][ T6612] ? path_openat+0x2e25/0x38a0
[ 174.981636][ T6612] path_openat+0x2e3d/0x38a0
[ 174.981674][ T6612] ? __pfx_path_openat+0x10/0x10
[ 174.981697][ T6612] ? kasan_save_track+0x4f/0x80
[ 174.981716][ T6612] ? kasan_save_track+0x3e/0x80
[ 174.981735][ T6612] ? __kasan_slab_alloc+0x6c/0x80
[ 174.981756][ T6612] ? kmem_cache_alloc_noprof+0x33b/0x680
[ 174.981783][ T6612] ? do_raw_spin_lock+0x12b/0x2f0
[ 174.981814][ T6612] do_file_open+0x23e/0x4a0
[ 174.981834][ T6612] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 174.981867][ T6612] ? __pfx_do_file_open+0x10/0x10
[ 174.981886][ T6612] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 174.981921][ T6612] ? alloc_fd+0x64e/0x6c0
[ 174.981954][ T6612] do_sys_openat2+0x113/0x200
[ 174.981985][ T6612] ? __pfx_do_sys_openat2+0x10/0x10
[ 174.982016][ T6612] ? exc_page_fault+0x6a/0xc0
[ 174.982044][ T6612] ? do_user_addr_fault+0xc7c/0x1360
[ 174.982073][ T6612] __x64_sys_openat+0x138/0x170
[ 174.982106][ T6612] do_syscall_64+0x14d/0xf80
[ 174.982135][ T6612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 174.982156][ T6612] ? trace_irq_disable+0x37/0x100
[ 174.982176][ T6612] ? clear_bhb_loop+0x40/0x90
[ 174.982201][ T6612] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 174.982223][ T6612] RIP: 0033:0x7fc2b1c6c84e
[ 174.982248][ T6612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 174.982267][ T6612] RSP: 002b:00007fc2b12ecb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 174.982296][ T6612] RAX: ffffffffffffffda RBX: 00007fc2b12ed6c0 RCX: 00007fc2b1c6c84e
[ 174.982313][ T6612] RDX: 0000000000000002 RSI: 00007fc2b12ecc00 RDI: ffffffffffffff9c
[ 174.982328][ T6612] RBP: 00007fc2b12ecc00 R08: 0000000000000000 R09: 0000000000000000
[ 174.982342][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 174.982356][ T6612] R13: 00007fc2b1f26128 R14: 00007fc2b1f26090 R15: 00007ffe99c645b8
[ 174.982382][ T6612]
[ 174.982389][ T6612]
[ 174.982395][ T6612] Allocated by task 1:
[ 174.982405][ T6612] kasan_save_track+0x3e/0x80
[ 174.982423][ T6612] __kasan_kmalloc+0x93/0xb0
[ 174.982442][ T6612] __kmalloc_cache_noprof+0x3a6/0x690
[ 174.982463][ T6612] dvb_register_device+0x2fd/0x2210
[ 174.982489][ T6612] dvb_register_frontend+0x665/0x970
[ 174.982513][ T6612] vidtv_bridge_probe+0x9aa/0xf80
[ 174.982548][ T6612] platform_probe+0xf9/0x190
[ 174.982577][ T6612] really_probe+0x267/0xaf0
[ 174.982597][ T6612] __driver_probe_device+0x18c/0x320
[ 174.982616][ T6612] driver_probe_device+0x4f/0x240
[ 174.982637][ T6612] __driver_attach+0x349/0x640
[ 174.982655][ T6612] bus_for_each_dev+0x23e/0x2c0
[ 174.982680][ T6612] bus_add_driver+0x348/0x670
[ 174.982705][ T6612] driver_register+0x23a/0x320
[ 174.982727][ T6612] vidtv_bridge_init+0x28/0x50
[ 174.982759][ T6612] do_one_initcall+0x250/0x840
[ 174.982787][ T6612] do_initcall_level+0x104/0x190
[ 174.982809][ T6612] do_initcalls+0x59/0xa0
[ 174.982830][ T6612] kernel_init_freeable+0x2a6/0x3d0
[ 174.982852][ T6612] kernel_init+0x1d/0x1d0
[ 174.982869][ T6612] ret_from_fork+0x51e/0xb90
[ 174.982894][ T6612] ret_from_fork_asm+0x1a/0x30
[ 174.982925][ T6612]
[ 174.982931][ T6612] Freed by task 6608:
[ 174.982941][ T6612] kasan_save_track+0x3e/0x80
[ 174.982958][ T6612] kasan_save_free_info+0x46/0x50
[ 174.982985][ T6612] __kasan_slab_free+0x5c/0x80
[ 174.983003][ T6612] kfree+0x1c1/0x690
[ 174.983020][ T6612] dvb_device_open+0x2d6/0x360
[ 174.983047][ T6612] chrdev_open+0x4d0/0x5f0
[ 174.983067][ T6612] do_dentry_open+0x83d/0x13e0
[ 174.983092][ T6612] vfs_open+0x3b/0x350
[ 174.983115][ T6612] path_openat+0x2e3d/0x38a0
[ 174.983133][ T6612] do_file_open+0x23e/0x4a0
[ 174.983150][ T6612] do_sys_openat2+0x113/0x200
[ 174.983176][ T6612] __x64_sys_openat+0x138/0x170
[ 174.983202][ T6612] do_syscall_64+0x14d/0xf80
[ 174.983227][ T6612] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 174.983247][ T6612]
[ 174.983252][ T6612] The buggy address belongs to the object at ffff88802b56c400
[ 174.983252][ T6612] which belongs to the cache kmalloc-512 of size 512
[ 174.983270][ T6612] The buggy address is located 24 bytes inside of
[ 174.983270][ T6612] freed 512-byte region [ffff88802b56c400, ffff88802b56c600)
[ 174.983293][ T6612]
[ 174.983298][ T6612] The buggy address belongs to the physical page:
[ 174.983314][ T6612] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b56c
[ 174.983338][ T6612] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 174.983356][ T6612] flags: 0x80000000000040(head|node=0|zone=1)
[ 174.983382][ T6612] page_type: f5(slab)
[ 174.983402][ T6612] raw: 0080000000000040 ffff88813fe0dc80 dead000000000100 dead000000000122
[ 174.983420][ T6612] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 174.983441][ T6612] head: 0080000000000040 ffff88813fe0dc80 dead000000000100 dead000000000122
[ 174.983460][ T6612] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 174.983480][ T6612] head: 0080000000000002 ffffea0000ad5b01 00000000ffffffff 00000000ffffffff
[ 174.983498][ T6612] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[ 174.983510][ T6612] page dumped because: kasan: bad access detected
[ 174.983525][ T6612] page_owner tracks the page as allocated
[ 174.983539][ T6612] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 23048575092, free_ts 0
[ 174.983574][ T6612] post_alloc_hook+0x228/0x280
[ 174.983595][ T6612] get_page_from_freelist+0x28bb/0x2950
[ 174.983619][ T6612] __alloc_frozen_pages_noprof+0x18d/0x380
[ 174.983644][ T6612] allocate_slab+0x77/0x660
[ 174.983670][ T6612] refill_objects+0x334/0x3c0
[ 174.983695][ T6612] __pcs_replace_empty_main+0x328/0x5f0
[ 174.983724][ T6612] __kmalloc_cache_noprof+0x44e/0x690
[ 174.983745][ T6612] device_add+0xbe/0xb80
[ 174.983773][ T6612] i2c_new_client_device+0xa1f/0x1160
[ 174.983803][ T6612] dvb_module_probe+0x1c7/0x310
[ 174.983828][ T6612] vidtv_bridge_probe+0x93b/0xf80
[ 174.983857][ T6612] platform_probe+0xf9/0x190
[ 174.983885][ T6612] really_probe+0x267/0xaf0
[ 174.983903][ T6612] __driver_probe_device+0x18c/0x320
[ 174.983922][ T6612] driver_probe_device+0x4f/0x240
[ 174.983941][ T6612] __driver_attach+0x349/0x640
[ 174.983959][ T6612] page_owner free stack trace missing
[ 174.983966][ T6612]
[ 174.983971][ T6612] Memory state around the buggy address:
[ 174.983983][ T6612] ffff88802b56c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 174.983998][ T6612] ffff88802b56c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 174.984013][ T6612] >ffff88802b56c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 174.984025][ T6612] ^
[ 174.984036][ T6612] ffff88802b56c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 174.984051][ T6612] ffff88802b56c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 174.984063][ T6612] ==================================================================
[ 174.984121][ T6612] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 174.984143][ T6612] CPU: 1 UID: 0 PID: 6612 Comm: syz.1.154 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 174.984168][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 174.984180][ T6612] Call Trace:
[ 174.984189][ T6612]
[ 174.984198][ T6612] vpanic+0x1e0/0x670
[ 174.984231][ T6612] panic+0xc5/0xd0
[ 174.984262][ T6612] ? __pfx_panic+0x10/0x10
[ 174.984295][ T6612] ? preempt_schedule_thunk+0x16/0x30
[ 174.984322][ T6612] ? dvb_device_open+0xc4/0x360
[ 174.984349][ T6612] ? preempt_schedule_thunk+0x16/0x30
[ 174.984374][ T6612] ? dvb_device_open+0xc4/0x360
[ 174.984402][ T6612] check_panic_on_warn+0x89/0xb0
[ 174.984423][ T6612] ? dvb_device_open+0xc4/0x360
[ 174.984450][ T6612] end_report+0x6f/0x140
[ 174.984473][ T6612] kasan_report+0x128/0x150
[ 174.984497][ T6612] ? dvb_device_open+0xc4/0x360
[ 174.984538][ T6612] dvb_device_open+0xc4/0x360
[ 174.984569][ T6612] ? rt_spin_unlock+0x160/0x200
[ 174.984592][ T6612] chrdev_open+0x4d0/0x5f0
[ 174.984618][ T6612] ? __pfx_chrdev_open+0x10/0x10
[ 174.984642][ T6612] ? fsnotify_open_perm_and_set_mode+0x138/0x6e0
[ 174.984678][ T6612] ? __pfx_chrdev_open+0x10/0x10
[ 174.984702][ T6612] do_dentry_open+0x83d/0x13e0
[ 174.984738][ T6612] vfs_open+0x3b/0x350
[ 174.984763][ T6612] ? path_openat+0x2e25/0x38a0
[ 174.984785][ T6612] path_openat+0x2e3d/0x38a0
[ 174.984824][ T6612] ? __pfx_path_openat+0x10/0x10
[ 174.984847][ T6612] ? kasan_save_track+0x4f/0x80
[ 174.984866][ T6612] ? kasan_save_track+0x3e/0x80
[ 174.984886][ T6612] ? __kasan_slab_alloc+0x6c/0x80
[ 174.984907][ T6612] ? kmem_cache_alloc_noprof+0x33b/0x680
[ 174.984933][ T6612] ? do_raw_spin_lock+0x12b/0x2f0
[ 174.984964][ T6612] do_file_open+0x23e/0x4a0
[ 174.984984][ T6612] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 174.985015][ T6612] ? __pfx_do_file_open+0x10/0x10
[ 174.985035][ T6612] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 174.985070][ T6612] ? alloc_fd+0x64e/0x6c0
[ 174.985102][ T6612] do_sys_openat2+0x113/0x200
[ 174.985133][ T6612] ? __pfx_do_sys_openat2+0x10/0x10
[ 174.985163][ T6612] ? exc_page_fault+0x6a/0xc0
[ 174.985191][ T6612] ? do_user_addr_fault+0xc7c/0x1360
[ 174.985220][ T6612] __x64_sys_openat+0x138/0x170
[ 174.985253][ T6612] do_syscall_64+0x14d/0xf80
[ 174.985280][ T6612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 174.985302][ T6612] ? trace_irq_disable+0x37/0x100
[ 174.985321][ T6612] ? clear_bhb_loop+0x40/0x90
[ 174.985346][ T6612] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 174.985368][ T6612] RIP: 0033:0x7fc2b1c6c84e
[ 174.985386][ T6612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 174.985405][ T6612] RSP: 002b:00007fc2b12ecb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 174.985427][ T6612] RAX: ffffffffffffffda RBX: 00007fc2b12ed6c0 RCX: 00007fc2b1c6c84e
[ 174.985444][ T6612] RDX: 0000000000000002 RSI: 00007fc2b12ecc00 RDI: ffffffffffffff9c
[ 174.985460][ T6612] RBP: 00007fc2b12ecc00 R08: 0000000000000000 R09: 0000000000000000
[ 174.985474][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 174.985490][ T6612] R13: 00007fc2b1f26128 R14: 00007fc2b1f26090 R15: 00007ffe99c645b8
[ 174.985516][ T6612]
[ 174.986112][ T6612] Kernel Offset: disabled