Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts.
2026/10/04 06:56:16 parsed 1 programs
2026/10/04 06:56:16 serving rpc on tcp://38255
[ 82.041974][ T5629] cgroup: Unknown subsys name 'net'
[ 82.122027][ T5629] cgroup: Unknown subsys name 'cpuset'
[ 82.125109][ T5629] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 83.882640][ T5629] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.795282][ T10] cfg80211: failed to load regulatory.db
[ 87.019543][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.019565][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.056357][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.056381][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.102814][ T5644] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 87.106436][ T5644] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 87.109458][ T5644] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 87.111477][ T5644] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 87.145342][ T5644] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 87.484289][ T5656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.485927][ T5656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.487485][ T5656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.514303][ T5656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.518297][ T5656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.946985][ T5674] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.947582][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.947670][ T5674] bridge_slave_0: entered allmulticast mode
[ 88.951051][ T5674] bridge_slave_0: entered promiscuous mode
[ 88.955986][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.956105][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.956226][ T5674] bridge_slave_1: entered allmulticast mode
[ 88.958101][ T5674] bridge_slave_1: entered promiscuous mode
[ 88.997726][ T5674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.001711][ T5674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.029549][ T5674] team0: Port device team_slave_0 added
[ 89.031492][ T5674] team0: Port device team_slave_1 added
[ 89.054363][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.054377][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 89.054393][ T5674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 89.056229][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 89.056243][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 89.056258][ T5674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.153534][ T5674] hsr_slave_0: entered promiscuous mode
[ 89.154297][ T5674] hsr_slave_1: entered promiscuous mode
[ 89.297071][ T5674] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 89.310171][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 89.311518][ T5674] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 89.315404][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 89.316363][ T5674] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 89.322834][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 89.323702][ T5674] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 89.331618][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 89.426666][ T5674] 8021q: adding VLAN 0 to HW filter on device bond0
[ 89.451149][ T5674] 8021q: adding VLAN 0 to HW filter on device team0
[ 89.456791][ T172] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.456917][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.484283][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.484877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.815355][ T5674] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 89.863103][ T5674] veth0_vlan: entered promiscuous mode
[ 89.876266][ T5674] veth1_vlan: entered promiscuous mode
[ 89.904555][ T5674] veth0_macvtap: entered promiscuous mode
[ 89.910379][ T5674] veth1_macvtap: entered promiscuous mode
[ 89.930197][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.937305][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.008857][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.030153][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.030218][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.030253][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.127371][ T172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.232485][ T172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.315243][ T172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.396155][ T172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/10/04 06:56:29 executed programs: 0
[ 92.275579][ T5656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 92.276261][ T5656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 92.276614][ T5656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 92.277480][ T5656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 92.277820][ T5656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 92.708134][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.709191][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.709327][ T5755] bridge_slave_0: entered allmulticast mode
[ 92.711330][ T5755] bridge_slave_0: entered promiscuous mode
[ 92.714738][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.714852][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.715022][ T5755] bridge_slave_1: entered allmulticast mode
[ 92.716830][ T5755] bridge_slave_1: entered promiscuous mode
[ 92.781521][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.783939][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.815734][ T5755] team0: Port device team_slave_0 added
[ 92.817815][ T5755] team0: Port device team_slave_1 added
[ 92.842196][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.842214][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.842235][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.843687][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.843700][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.843723][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.895883][ T5755] hsr_slave_0: entered promiscuous mode
[ 92.896994][ T5755] hsr_slave_1: entered promiscuous mode
[ 92.897745][ T5755] debugfs: 'hsr0' already exists in 'hsr'
[ 92.897827][ T5755] Cannot create hsr debugfs directory
[ 93.122893][ T172] bridge_slave_1: left allmulticast mode
[ 93.122933][ T172] bridge_slave_1: left promiscuous mode
[ 93.123769][ T172] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.140126][ T172] bridge_slave_0: left allmulticast mode
[ 93.140151][ T172] bridge_slave_0: left promiscuous mode
[ 93.140362][ T172] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.275872][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 93.285080][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 93.297594][ T172] bond0 (unregistering): Released all slaves
[ 93.391184][ T172] hsr_slave_0: left promiscuous mode
[ 93.392153][ T172] hsr_slave_1: left promiscuous mode
[ 93.393213][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 93.393243][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 93.394748][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 93.394768][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 93.422797][ T172] veth1_macvtap: left promiscuous mode
[ 93.422852][ T172] veth0_macvtap: left promiscuous mode
[ 93.423024][ T172] veth1_vlan: left promiscuous mode
[ 93.423117][ T172] veth0_vlan: left promiscuous mode
[ 93.796783][ T172] team0 (unregistering): Port device team_slave_1 removed
[ 93.817646][ T172] team0 (unregistering): Port device team_slave_0 removed
[ 93.996896][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1
[ 94.309198][ T5656] Bluetooth: hci0: command tx timeout
[ 94.867211][ T5755] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.886261][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 94.887582][ T5755] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.910763][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 94.912103][ T5755] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.932317][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 94.938653][ T5755] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.954295][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 95.322661][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.380439][ T5755] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.397134][ T987] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.397249][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.430680][ T987] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.430782][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.110441][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.181738][ T5755] veth0_vlan: entered promiscuous mode
[ 96.191460][ T5755] veth1_vlan: entered promiscuous mode
[ 96.233000][ T5755] veth0_macvtap: entered promiscuous mode
[ 96.241549][ T5755] veth1_macvtap: entered promiscuous mode
[ 96.263673][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.276761][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.348726][ T100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.348774][ T100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.348810][ T100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.348842][ T100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.395677][ T5656] Bluetooth: hci0: command tx timeout
[ 96.410966][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.410990][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.467324][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.467346][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.027265][ T5847] ==================================================================
[ 97.027277][ T5847] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340
[ 97.027296][ T5847] Read of size 8 at addr ffff88802be78c18 b
** replaying previous printk message **
[ 97.027296][ T5847] Read of size 8 at addr ffff88802be78c18 by task syz.0.19/5847
[ 97.027306][ T5847]
[ 97.027313][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 97.027326][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 97.027333][ T5847] Call Trace:
[ 97.027338][ T5847]
[ 97.027343][ T5847] dump_stack_lvl+0xe8/0x150
[ 97.027361][ T5847] print_address_description+0x55/0x1e0
[ 97.027377][ T5847] ? dvb_device_open+0xc4/0x340
[ 97.027387][ T5847] print_report+0x58/0x70
[ 97.027399][ T5847] kasan_report+0x117/0x150
[ 97.027415][ T5847] ? dvb_device_open+0xc4/0x340
[ 97.027426][ T5847] dvb_device_open+0xc4/0x340
[ 97.027436][ T5847] ? do_raw_spin_unlock+0xf5/0x200
[ 97.027454][ T5847] chrdev_open+0x4d9/0x600
[ 97.027468][ T5847] ? __pfx_chrdev_open+0x10/0x10
[ 97.027481][ T5847] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 97.027498][ T5847] ? __pfx_chrdev_open+0x10/0x10
[ 97.027511][ T5847] do_dentry_open+0x816/0x1380
[ 97.027527][ T5847] vfs_open+0x3b/0x340
[ 97.027539][ T5847] ? path_openat+0x1428/0x1d60
[ 97.027552][ T5847] path_openat+0x1443/0x1d60
[ 97.027567][ T5847] do_file_open+0x23e/0x4a0
[ 97.027579][ T5847] ? __pfx_do_file_open+0x10/0x10
[ 97.027595][ T5847] ? _raw_spin_unlock+0x28/0x50
[ 97.027609][ T5847] ? alloc_fd+0x651/0x6c0
[ 97.027626][ T5847] do_sys_openat2+0x115/0x200
[ 97.027641][ T5847] ? __pfx_do_sys_openat2+0x10/0x10
[ 97.027655][ T5847] ? __ia32_compat_sys_rt_sigreturn+0x237/0x270
[ 97.027668][ T5847] ? __task_pid_nr_ns+0x28/0x470
[ 97.027681][ T5847] __ia32_compat_sys_openat+0x131/0x160
[ 97.027697][ T5847] do_int80_emulation+0x198/0x500
[ 97.027714][ T5847] ? asm_int80_emulation+0x1a/0x20
[ 97.027725][ T5847] ? clear_bhb_loop+0x70/0xc0
[ 97.027736][ T5847] ? clear_bhb_loop+0x70/0xc0
[ 97.027748][ T5847] asm_int80_emulation+0x1a/0x20
[ 97.027758][ T5847] RIP: 0023:0xf71875ab
[ 97.027769][ T5847] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 97.027778][ T5847] RSP: 002b:00000000ffd4d86c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 97.027792][ T5847] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffd4d930
[ 97.027801][ T5847] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000
[ 97.027808][ T5847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 97.027815][ T5847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 97.027822][ T5847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 97.027833][ T5847]
[ 97.027837][ T5847]
[ 97.027840][ T5847] Allocated by task 1:
[ 97.027845][ T5847] kasan_save_track+0x3e/0x80
[ 97.027858][ T5847] __kasan_kmalloc+0x93/0xb0
[ 97.027869][ T5847] __kmalloc_cache_noprof+0x321/0x600
[ 97.027881][ T5847] dvb_register_device+0x309/0x1dd0
[ 97.027896][ T5847] dvb_register_frontend+0x603/0x900
[ 97.027910][ T5847] vidtv_bridge_probe+0x9d5/0xf60
[ 97.027921][ T5847] platform_probe+0xf9/0x190
[ 97.027933][ T5847] really_probe+0x254/0xae0
[ 97.027946][ T5847] __driver_probe_device+0x1e8/0x360
[ 97.027959][ T5847] driver_probe_device+0x4f/0x240
[ 97.027972][ T5847] __driver_attach+0x339/0x600
[ 97.027984][ T5847] bus_for_each_dev+0x23b/0x2c0
[ 97.028000][ T5847] bus_add_driver+0x345/0x670
[ 97.028009][ T5847] driver_register+0x23a/0x320
[ 97.028023][ T5847] vidtv_bridge_init+0x3d/0x60
[ 97.028038][ T5847] do_one_initcall+0x250/0x870
[ 97.028053][ T5847] do_initcall_level+0x10a/0x1a0
[ 97.028065][ T5847] do_initcalls+0x59/0xa0
[ 97.028076][ T5847] kernel_init_freeable+0x29d/0x3e0
[ 97.028088][ T5847] kernel_init+0x22/0x1d0
[ 97.028098][ T5847] ret_from_fork+0x514/0xb70
[ 97.028107][ T5847] ret_from_fork_asm+0x1a/0x30
[ 97.028122][ T5847]
[ 97.028124][ T5847] Freed by task 5846:
[ 97.028129][ T5847] kasan_save_track+0x3e/0x80
[ 97.028140][ T5847] kasan_save_free_info+0x40/0x50
[ 97.028156][ T5847] __kasan_slab_free+0x5c/0x80
[ 97.028167][ T5847] kfree+0x1c5/0x650
[ 97.028175][ T5847] dvb_device_open+0x2b8/0x340
[ 97.028184][ T5847] chrdev_open+0x4d9/0x600
[ 97.028195][ T5847] do_dentry_open+0x816/0x1380
[ 97.028216][ T5847] vfs_open+0x3b/0x340
[ 97.028234][ T5847] path_openat+0x1443/0x1d60
[ 97.028250][ T5847] do_file_open+0x23e/0x4a0
[ 97.028265][ T5847] do_sys_openat2+0x115/0x200
[ 97.028281][ T5847] __ia32_compat_sys_openat+0x131/0x160
[ 97.028295][ T5847] do_int80_emulation+0x198/0x500
[ 97.028310][ T5847] asm_int80_emulation+0x1a/0x20
[ 97.028320][ T5847]
[ 97.028323][ T5847] The buggy address belongs to the object at ffff88802be78c00
[ 97.028323][ T5847] which belongs to the cache kmalloc-256 of size 256
[ 97.028332][ T5847] The buggy address is located 24 bytes inside of
[ 97.028332][ T5847] freed 256-byte region [ffff88802be78c00, ffff88802be78d00)
[ 97.028344][ T5847]
[ 97.028347][ T5847] The buggy address belongs to the physical page:
[ 97.028353][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2be78
[ 97.028364][ T5847] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 97.028373][ T5847] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 97.028384][ T5847] page_type: f5(slab)
[ 97.028394][ T5847] raw: 00fff00000000040 ffff88801b041b40 dead000000000122 0000000000000000
[ 97.028404][ T5847] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 97.028413][ T5847] head: 00fff00000000040 ffff88801b041b40 dead000000000122 0000000000000000
[ 97.028422][ T5847] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 97.028431][ T5847] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 97.028440][ T5847] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 97.028446][ T5847] page dumped because: kasan: bad access detected
[ 97.028451][ T5847] page_owner tracks the page as allocated
[ 97.028455][ T5847] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15192722525
[ 97.028473][ T5847] post_alloc_hook+0x1f9/0x250
[ 97.028483][ T5847] get_page_from_freelist+0x2209/0x2280
[ 97.028495][ T5847] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 97.028507][ T5847] allocate_slab+0x7d/0x620
[ 97.028521][ T5847] refill_objects+0x2d5/0x350
[ 97.028534][ T5847] __pcs_replace_empty_main+0x2c8/0x6c0
[ 97.028548][ T5847] __kmalloc_cache_noprof+0x39b/0x600
[ 97.028558][ T5847] bus_add_driver+0x162/0x670
[ 97.028567][ T5847] driver_register+0x23a/0x320
[ 97.028581][ T5847] usb_register_driver+0x1e4/0x390
[ 97.028596][ T5847] do_one_initcall+0x250/0x870
[ 97.028610][ T5847] do_initcall_level+0x10a/0x1a0
[ 97.028621][ T5847] do_initcalls+0x59/0xa0
[ 97.028633][ T5847] kernel_init_freeable+0x29d/0x3e0
[ 97.028644][ T5847] kernel_init+0x22/0x1d0
[ 97.028654][ T5847] ret_from_fork+0x514/0xb70
[ 97.028663][ T5847] page_owner free stack trace missing
[ 97.028667][ T5847]
[ 97.028670][ T5847] Memory state around the buggy address:
[ 97.028675][ T5847] ffff88802be78b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 97.028683][ T5847] ffff88802be78b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 97.028690][ T5847] >ffff88802be78c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 97.028695][ T5847] ^
[ 97.028701][ T5847] ffff88802be78c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 97.028708][ T5847] ffff88802be78d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 97.028713][ T5847] ==================================================================
[ 97.050515][ T5847] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 97.797725][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 97.806826][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 97.816892][ T5847] Call Trace:
[ 97.820179][ T5847]
[ 97.823114][ T5847] vpanic+0x56d/0xa60
[ 97.827100][ T5847] ? __pfx_vpanic+0x10/0x10
[ 97.831601][ T5847] ? __pfx___schedule+0x10/0x10
[ 97.836457][ T5847] panic+0xc5/0xd0
[ 97.840178][ T5847] ? __pfx_panic+0x10/0x10
[ 97.844593][ T5847] ? preempt_schedule_thunk+0x16/0x40
[ 97.849960][ T5847] ? dvb_device_open+0xc4/0x340
[ 97.854804][ T5847] check_panic_on_warn+0x89/0xb0
[ 97.859734][ T5847] ? dvb_device_open+0xc4/0x340
[ 97.864573][ T5847] end_report+0x73/0x170
[ 97.868809][ T5847] ? dvb_device_open+0xc4/0x340
[ 97.873648][ T5847] kasan_report+0x128/0x150
[ 97.878170][ T5847] ? dvb_device_open+0xc4/0x340
[ 97.883016][ T5847] dvb_device_open+0xc4/0x340
[ 97.887685][ T5847] ? do_raw_spin_unlock+0xf5/0x200
[ 97.892791][ T5847] chrdev_open+0x4d9/0x600
[ 97.897201][ T5847] ? __pfx_chrdev_open+0x10/0x10
[ 97.902128][ T5847] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 97.908457][ T5847] ? __pfx_chrdev_open+0x10/0x10
[ 97.913411][ T5847] do_dentry_open+0x816/0x1380
[ 97.918202][ T5847] vfs_open+0x3b/0x340
[ 97.922283][ T5847] ? path_openat+0x1428/0x1d60
[ 97.927042][ T5847] path_openat+0x1443/0x1d60
[ 97.931627][ T5847] do_file_open+0x23e/0x4a0
[ 97.936145][ T5847] ? __pfx_do_file_open+0x10/0x10
[ 97.941163][ T5847] ? _raw_spin_unlock+0x28/0x50
[ 97.946006][ T5847] ? alloc_fd+0x651/0x6c0
[ 97.950352][ T5847] do_sys_openat2+0x115/0x200
[ 97.955043][ T5847] ? __pfx_do_sys_openat2+0x10/0x10
[ 97.960250][ T5847] ? __ia32_compat_sys_rt_sigreturn+0x237/0x270
[ 97.966496][ T5847] ? __task_pid_nr_ns+0x28/0x470
[ 97.971427][ T5847] __ia32_compat_sys_openat+0x131/0x160
[ 97.976973][ T5847] do_int80_emulation+0x198/0x500
[ 97.982008][ T5847] ? asm_int80_emulation+0x1a/0x20
[ 97.987146][ T5847] ? clear_bhb_loop+0x70/0xc0
[ 97.991837][ T5847] ? clear_bhb_loop+0x70/0xc0
[ 97.996543][ T5847] asm_int80_emulation+0x1a/0x20
[ 98.001478][ T5847] RIP: 0023:0xf71875ab
[ 98.005543][ T5847] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 98.025142][ T5847] RSP: 002b:00000000ffd4d86c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 98.033561][ T5847] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffd4d930
[ 98.041536][ T5847] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000
[ 98.049548][ T5847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 98.057535][ T5847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 98.065528][ T5847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 98.073509][ T5847]
[ 98.076708][ T5847] Kernel Offset: disabled
[ 98.081032][ T5847] Rebooting in 86400 seconds..