Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. 2025/08/23 10:43:34 parsed 1 programs [ 87.575498][ T5868] cgroup: Unknown subsys name 'net' [ 87.703223][ T5868] cgroup: Unknown subsys name 'cpuset' [ 87.712329][ T5868] cgroup: Unknown subsys name 'rlimit' [ 89.216321][ T5868] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.775244][ T5881] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.015494][ T9] cfg80211: failed to load regulatory.db [ 92.195236][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 92.300600][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.308550][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.316303][ T5892] bridge_slave_0: entered allmulticast mode [ 92.325748][ T5892] bridge_slave_0: entered promiscuous mode [ 92.337994][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.345498][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.352751][ T5892] bridge_slave_1: entered allmulticast mode [ 92.360110][ T5892] bridge_slave_1: entered promiscuous mode [ 92.393322][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.405680][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.437867][ T5892] team0: Port device team_slave_0 added [ 92.446637][ T5892] team0: Port device team_slave_1 added [ 92.483454][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.490718][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.517038][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.530120][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.537093][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.563108][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.607901][ T5892] hsr_slave_0: entered promiscuous mode [ 92.614306][ T5892] hsr_slave_1: entered promiscuous mode [ 92.746597][ T5892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.758812][ T5892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.770230][ T5892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.780962][ T5892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.809791][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.817352][ T5892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.825600][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.832813][ T5892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.889150][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.904194][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.913401][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.936550][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.950194][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.957677][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.974618][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.981810][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.161772][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.205685][ T5892] veth0_vlan: entered promiscuous mode [ 93.220358][ T5892] veth1_vlan: entered promiscuous mode [ 93.251235][ T5892] veth0_macvtap: entered promiscuous mode [ 93.261606][ T5892] veth1_macvtap: entered promiscuous mode [ 93.281558][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.301091][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.315516][ T3013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.325683][ T3013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.338251][ T3013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.347532][ T3013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.485023][ T3013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.575120][ T3013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.654153][ T3013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.713972][ T3013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.965408][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.978367][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.006186][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.014296][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.798622][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.807082][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.816206][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.825400][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.833296][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.303602][ T3013] bridge_slave_1: left allmulticast mode [ 96.320610][ T3013] bridge_slave_1: left promiscuous mode [ 96.327600][ T3013] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.345107][ T3013] bridge_slave_0: left allmulticast mode 2025/08/23 10:43:45 executed programs: 0 [ 96.356157][ T3013] bridge_slave_0: left promiscuous mode [ 96.364975][ T3013] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.435103][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.445674][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.454657][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.463942][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.472232][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.809169][ T3013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.823758][ T3013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.835375][ T3013] bond0 (unregistering): Released all slaves [ 96.955466][ T3013] hsr_slave_0: left promiscuous mode [ 96.961566][ T3013] hsr_slave_1: left promiscuous mode [ 96.967369][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.975471][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.984123][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.992321][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.009156][ T3013] veth1_macvtap: left promiscuous mode [ 97.015793][ T3013] veth0_macvtap: left promiscuous mode [ 97.022326][ T3013] veth1_vlan: left promiscuous mode [ 97.027899][ T3013] veth0_vlan: left promiscuous mode [ 97.314526][ T3013] team0 (unregistering): Port device team_slave_1 removed [ 97.344401][ T3013] team0 (unregistering): Port device team_slave_0 removed [ 97.798744][ T5978] chnl_net:caif_netlink_parms(): no params data found [ 97.963033][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.970325][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.977524][ T5978] bridge_slave_0: entered allmulticast mode [ 97.985359][ T5978] bridge_slave_0: entered promiscuous mode [ 97.994352][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.002026][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.009228][ T5978] bridge_slave_1: entered allmulticast mode [ 98.018564][ T5978] bridge_slave_1: entered promiscuous mode [ 98.070040][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.083554][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.129956][ T5978] team0: Port device team_slave_0 added [ 98.142026][ T5978] team0: Port device team_slave_1 added [ 98.490359][ T5963] Bluetooth: hci0: command tx timeout [ 98.568375][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.575503][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.601472][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.614494][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.621571][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.647594][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.745807][ T5978] hsr_slave_0: entered promiscuous mode [ 98.753116][ T5978] hsr_slave_1: entered promiscuous mode [ 99.607938][ T5978] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.623964][ T5978] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.648339][ T5978] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.665396][ T5978] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.766590][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.794667][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.808075][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.815313][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.835647][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.842879][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.143610][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.202214][ T5978] veth0_vlan: entered promiscuous mode [ 100.218846][ T5978] veth1_vlan: entered promiscuous mode [ 100.262244][ T5978] veth0_macvtap: entered promiscuous mode [ 100.276729][ T5978] veth1_macvtap: entered promiscuous mode [ 100.307359][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.326082][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.346230][ T1104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.375905][ T1104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.401938][ T1104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.423745][ T1104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.477431][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.492767][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.529158][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.543130][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.570703][ T5963] Bluetooth: hci0: command tx timeout [ 100.635157][ T6063] FAULT_INJECTION: forcing a failure. [ 100.635157][ T6063] name fail_futex, interval 1, probability 0, space 0, times 1 [ 100.659373][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 100.659407][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.659424][ T6063] Call Trace: [ 100.659435][ T6063] [ 100.659442][ T6063] dump_stack_lvl+0x16c/0x1f0 [ 100.659476][ T6063] should_fail_ex+0x512/0x640 [ 100.659506][ T6063] get_futex_key+0x1d0/0x1560 [ 100.659532][ T6063] ? __pfx_get_futex_key+0x10/0x10 [ 100.659565][ T6063] futex_wake+0xea/0x530 [ 100.659600][ T6063] ? rcu_is_watching+0x12/0xc0 [ 100.659619][ T6063] ? __pfx_futex_wake+0x10/0x10 [ 100.659647][ T6063] ? kmem_cache_free+0x2d1/0x4d0 [ 100.659667][ T6063] ? fd_install+0x225/0x750 [ 100.659685][ T6063] ? putname+0x154/0x1a0 [ 100.659714][ T6063] do_futex+0x1e3/0x350 [ 100.659737][ T6063] ? __pfx_do_futex+0x10/0x10 [ 100.659765][ T6063] __x64_sys_futex+0x1e0/0x4c0 [ 100.659792][ T6063] ? __x64_sys_openat+0x174/0x210 [ 100.659825][ T6063] ? __pfx___x64_sys_futex+0x10/0x10 [ 100.659849][ T6063] ? xfd_validate_state+0x61/0x180 [ 100.659883][ T6063] do_syscall_64+0xcd/0x490 [ 100.659913][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.659934][ T6063] RIP: 0033:0x7f831b98ebe9 [ 100.659958][ T6063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.659983][ T6063] RSP: 002b:00007ffed26c3ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 100.660005][ T6063] RAX: ffffffffffffffda RBX: 00007f831bbb5fa8 RCX: 00007f831b98ebe9 [ 100.660020][ T6063] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f831bbb5fac [ 100.660035][ T6063] RBP: 0000000000000000 R08: 00007f831c83b000 R09: 00000008d26c3dbf [ 100.660050][ T6063] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f831bbb5fac [ 100.660064][ T6063] R13: 00007f831bbb5fa0 R14: 0000000000001130 R15: 0000000000000004 [ 100.660093][ T6063] [ 100.886943][ T6066] FAULT_INJECTION: forcing a failure. [ 100.886943][ T6066] name fail_futex, interval 1, probability 0, space 0, times 0 [ 100.907628][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 100.907660][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.907674][ T6066] Call Trace: [ 100.907681][ T6066] [ 100.907690][ T6066] dump_stack_lvl+0x16c/0x1f0 [ 100.907725][ T6066] should_fail_ex+0x512/0x640 [ 100.907762][ T6066] get_futex_key+0x1d0/0x1560 [ 100.907796][ T6066] ? __pfx_get_futex_key+0x10/0x10 [ 100.907836][ T6066] futex_wake+0xea/0x530 [ 100.907869][ T6066] ? rcu_is_watching+0x12/0xc0 [ 100.907896][ T6066] ? __pfx_futex_wake+0x10/0x10 [ 100.907931][ T6066] ? kmem_cache_free+0x2d1/0x4d0 [ 100.907957][ T6066] ? fd_install+0x225/0x750 [ 100.907980][ T6066] ? putname+0x154/0x1a0 [ 100.908019][ T6066] do_futex+0x1e3/0x350 [ 100.908049][ T6066] ? __pfx_do_futex+0x10/0x10 [ 100.908088][ T6066] __x64_sys_futex+0x1e0/0x4c0 [ 100.908120][ T6066] ? __x64_sys_openat+0x174/0x210 [ 100.908156][ T6066] ? __pfx___x64_sys_futex+0x10/0x10 [ 100.908189][ T6066] ? __x64_sys_pidfd_send_signal+0x2a7/0x430 [ 100.908228][ T6066] do_syscall_64+0xcd/0x490 [ 100.908262][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.908288][ T6066] RIP: 0033:0x7f831b98ebe9 [ 100.908319][ T6066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.908341][ T6066] RSP: 002b:00007ffed26c3ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 100.908363][ T6066] RAX: ffffffffffffffda RBX: 00007f831bbb5fa8 RCX: 00007f831b98ebe9 [ 100.908379][ T6066] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f831bbb5fac [ 100.908395][ T6066] RBP: 0000000000000000 R08: 00007f831c83b000 R09: 00000008d26c3dbf [ 100.908410][ T6066] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f831bbb5fac [ 100.908424][ T6066] R13: 00007f831bbb5fa0 R14: 0000000000001130 R15: 0000000000000004 [ 100.908457][ T6066] [ 101.136024][ T6074] FAULT_INJECTION: forcing a failure. [ 101.136024][ T6074] name fail_futex, interval 1, probability 0, space 0, times 0 [ 101.150128][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 101.150160][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.150174][ T6074] Call Trace: [ 101.150180][ T6074] [ 101.150188][ T6074] dump_stack_lvl+0x16c/0x1f0 [ 101.150223][ T6074] should_fail_ex+0x512/0x640 [ 101.150262][ T6074] get_futex_key+0x1d0/0x1560 [ 101.150293][ T6074] ? __pfx_get_futex_key+0x10/0x10 [ 101.150336][ T6074] futex_wake+0xea/0x530 [ 101.150370][ T6074] ? rcu_is_watching+0x12/0xc0 [ 101.150394][ T6074] ? __pfx_futex_wake+0x10/0x10 [ 101.150432][ T6074] ? kmem_cache_free+0x2d1/0x4d0 [ 101.150459][ T6074] ? fd_install+0x225/0x750 [ 101.150483][ T6074] ? putname+0x154/0x1a0 [ 101.150522][ T6074] do_futex+0x1e3/0x350 [ 101.150597][ T6074] ? __pfx_do_futex+0x10/0x10 [ 101.150637][ T6074] __x64_sys_futex+0x1e0/0x4c0 [ 101.150669][ T6074] ? __x64_sys_openat+0x174/0x210 [ 101.150705][ T6074] ? __pfx___x64_sys_futex+0x10/0x10 [ 101.150734][ T6074] ? xfd_validate_state+0x61/0x180 [ 101.150778][ T6074] do_syscall_64+0xcd/0x490 [ 101.150810][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.150833][ T6074] RIP: 0033:0x7f831b98ebe9 [ 101.150851][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.150873][ T6074] RSP: 002b:00007ffed26c3ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.150895][ T6074] RAX: ffffffffffffffda RBX: 00007f831bbb5fa8 RCX: 00007f831b98ebe9 [ 101.150911][ T6074] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f831bbb5fac [ 101.150926][ T6074] RBP: 0000000000000000 R08: 00007f831c83b000 R09: 00000008d26c3dbf [ 101.150940][ T6074] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f831bbb5fac [ 101.150955][ T6074] R13: 00007f831bbb5fa0 R14: 0000000000001130 R15: 0000000000000004 [ 101.150985][ T6074] [ 101.361662][ T6079] FAULT_INJECTION: forcing a failure. [ 101.361662][ T6079] name failslab, interval 1, probability 0, space 0, times 1 [ 101.376366][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 101.376401][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.376414][ T6079] Call Trace: [ 101.376423][ T6079] [ 101.376432][ T6079] dump_stack_lvl+0x16c/0x1f0 [ 101.376477][ T6079] should_fail_ex+0x512/0x640 [ 101.376511][ T6079] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 101.376549][ T6079] should_failslab+0xc2/0x120 [ 101.376582][ T6079] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 101.376616][ T6079] ? __kthread_create_on_node+0x186/0x3f0 [ 101.376656][ T6079] kvasprintf+0xbc/0x160 [ 101.376681][ T6079] ? __pfx_kvasprintf+0x10/0x10 [ 101.376720][ T6079] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 101.376753][ T6079] __kthread_create_on_node+0x186/0x3f0 [ 101.376787][ T6079] ? __pfx___kthread_create_on_node+0x10/0x10 [ 101.376832][ T6079] ? __lock_acquire+0xb97/0x1ce0 [ 101.376867][ T6079] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 101.376902][ T6079] kthread_create_on_node+0xc7/0x100 [ 101.376934][ T6079] ? __pfx_kthread_create_on_node+0x10/0x10 [ 101.376974][ T6079] ? mark_held_locks+0x49/0x80 [ 101.377004][ T6079] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 101.377033][ T6079] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.377067][ T6079] dvb_frontend_open+0xf47/0x1730 [ 101.377106][ T6079] ? __pfx_dvb_frontend_open+0x10/0x10 [ 101.377140][ T6079] dvb_device_open+0x270/0x3b0 [ 101.377172][ T6079] ? __pfx_dvb_device_open+0x10/0x10 [ 101.377204][ T6079] chrdev_open+0x231/0x6a0 [ 101.377233][ T6079] ? __pfx_apparmor_file_open+0x10/0x10 [ 101.377261][ T6079] ? __pfx_chrdev_open+0x10/0x10 [ 101.377293][ T6079] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 101.377327][ T6079] do_dentry_open+0x97f/0x1530 [ 101.377357][ T6079] ? __pfx_chrdev_open+0x10/0x10 [ 101.377399][ T6079] vfs_open+0x82/0x3f0 [ 101.377435][ T6079] path_openat+0x1de4/0x2cb0 [ 101.377477][ T6079] ? __pfx_path_openat+0x10/0x10 [ 101.377511][ T6079] do_filp_open+0x20b/0x470 [ 101.377539][ T6079] ? __pfx_do_filp_open+0x10/0x10 [ 101.377595][ T6079] ? alloc_fd+0x471/0x7d0 [ 101.377638][ T6079] do_sys_openat2+0x11b/0x1d0 [ 101.377670][ T6079] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.377719][ T6079] __x64_sys_openat+0x174/0x210 [ 101.377755][ T6079] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.377797][ T6079] ? __x64_sys_pidfd_send_signal+0x2a7/0x430 [ 101.377838][ T6079] do_syscall_64+0xcd/0x490 [ 101.377874][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.377900][ T6079] RIP: 0033:0x7f831b98ebe9 [ 101.377926][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.377946][ T6079] RSP: 002b:00007ffed26c3a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.377969][ T6079] RAX: ffffffffffffffda RBX: 00007f831bbb5fa0 RCX: 00007f831b98ebe9 [ 101.377986][ T6079] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 101.378001][ T6079] RBP: 00007f831ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 101.378016][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.378031][ T6079] R13: 00007f831bbb5fa0 R14: 00007f831bbb5fa0 R15: 0000000000000004 [ 101.378063][ T6079] [ 101.378094][ T6079] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 101.728271][ T6084] FAULT_INJECTION: forcing a failure. [ 101.728271][ T6084] name fail_futex, interval 1, probability 0, space 0, times 0 [ 101.754528][ T6084] CPU: 0 UID: 0 PID: 6084 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 101.754562][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.754576][ T6084] Call Trace: [ 101.754584][ T6084] [ 101.754594][ T6084] dump_stack_lvl+0x16c/0x1f0 [ 101.754631][ T6084] should_fail_ex+0x512/0x640 [ 101.754670][ T6084] get_futex_key+0x1d0/0x1560 [ 101.754704][ T6084] ? __pfx_get_futex_key+0x10/0x10 [ 101.754746][ T6084] futex_wake+0xea/0x530 [ 101.754781][ T6084] ? rcu_is_watching+0x12/0xc0 [ 101.754807][ T6084] ? __pfx_futex_wake+0x10/0x10 [ 101.754845][ T6084] ? kmem_cache_free+0x2d1/0x4d0 [ 101.754872][ T6084] ? fd_install+0x225/0x750 [ 101.754896][ T6084] ? putname+0x154/0x1a0 [ 101.754934][ T6084] do_futex+0x1e3/0x350 [ 101.754965][ T6084] ? __pfx_do_futex+0x10/0x10 [ 101.755005][ T6084] __x64_sys_futex+0x1e0/0x4c0 [ 101.755039][ T6084] ? __x64_sys_openat+0x174/0x210 [ 101.755075][ T6084] ? __pfx___x64_sys_futex+0x10/0x10 [ 101.755106][ T6084] ? xfd_validate_state+0x61/0x180 [ 101.755153][ T6084] do_syscall_64+0xcd/0x490 [ 101.755188][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.755221][ T6084] RIP: 0033:0x7f831b98ebe9 [ 101.755241][ T6084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.755264][ T6084] RSP: 002b:00007ffed26c3ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca 2025/08/23 10:43:51 executed programs: 6 [ 101.755287][ T6084] RAX: ffffffffffffffda RBX: 00007f831bbb5fa8 RCX: 00007f831b98ebe9 [ 101.755303][ T6084] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f831bbb5fac [ 101.755317][ T6084] RBP: 0000000000000000 R08: 00007f831c83b000 R09: 00000008d26c3dbf [ 101.755332][ T6084] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f831bbb5fac [ 101.755348][ T6084] R13: 00007f831bbb5fa0 R14: 0000000000001130 R15: 0000000000000004 [ 101.755390][ T6084] [ 101.971098][ T6086] FAULT_INJECTION: forcing a failure. [ 101.971098][ T6086] name fail_futex, interval 1, probability 0, space 0, times 0 [ 101.986022][ T6086] CPU: 0 UID: 0 PID: 6086 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) [ 101.986055][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.986069][ T6086] Call Trace: [ 101.986077][ T6086] [ 101.986086][ T6086] dump_stack_lvl+0x16c/0x1f0 [ 101.986122][ T6086] should_fail_ex+0x512/0x640 [ 101.986160][ T6086] get_futex_key+0x1d0/0x1560 [ 101.986193][ T6086] ? __pfx_get_futex_key+0x10/0x10 [ 101.986233][ T6086] futex_wake+0xea/0x530 [ 101.986268][ T6086] ? rcu_is_watching+0x12/0xc0 [ 101.986294][ T6086] ? __pfx_futex_wake+0x10/0x10 [ 101.986333][ T6086] ? kmem_cache_free+0x2d1/0x4d0 [ 101.986359][ T6086] ? fd_install+0x225/0x750 [ 101.986383][ T6086] ? putname+0x154/0x1a0 [ 101.986427][ T6086] do_futex+0x1e3/0x350 [ 101.986458][ T6086] ? __pfx_do_futex+0x10/0x10 [ 101.986498][ T6086] __x64_sys_futex+0x1e0/0x4c0 [ 101.986532][ T6086] ? __x64_sys_openat+0x174/0x210 [ 101.986569][ T6086] ? __pfx___x64_sys_futex+0x10/0x10 [ 101.986605][ T6086] ? __x64_sys_pidfd_send_signal+0x2a7/0x430 [ 101.986647][ T6086] do_syscall_64+0xcd/0x490 [ 101.986681][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.986705][ T6086] RIP: 0033:0x7f831b98ebe9 [ 101.986725][ T6086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.986747][ T6086] RSP: 002b:00007ffed26c3ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.986770][ T6086] RAX: ffffffffffffffda RBX: 00007f831bbb5fa8 RCX: 00007f831b98ebe9 [ 101.986787][ T6086] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f831bbb5fac [ 101.986802][ T6086] RBP: 0000000000000000 R08: 00007f831c83b000 R09: 00000008d26c3dbf [ 101.986818][ T6086] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f831bbb5fac [ 101.986833][ T6086] R13: 00007f831bbb5fa0 R14: 0000000000001130 R15: 0000000000000004 [ 101.986867][ T6086] [ 102.206526][ T6088] FAULT_INJECTION: forcing a failure. [ 102.206526][ T6088] name fail_futex, interval 1, probability 0, space 0, times 0 [ 102.220028][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT(full) [ 102.220062][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.220076][ T6088] Call Trace: [ 102.220084][ T6088] [ 102.220092][ T6088] dump_stack_lvl+0x16c/0x1f0 [ 102.220128][ T6088] should_fail_ex+0x512/0x640 [ 102.220167][ T6088] get_futex_key+0x1d0/0x1560 [ 102.220201][ T6088] ? __pfx_get_futex_key+0x10/0x10 [ 102.220240][ T6088] futex_wake+0xea/0x530 [ 102.220274][ T6088] ? rcu_is_watching+0x12/0xc0 [ 102.220300][ T6088] ? __pfx_futex_wake+0x10/0x10 [ 102.220337][ T6088] ? kmem_cache_free+0x2d1/0x4d0 [ 102.220363][ T6088] ? fd_install+0x225/0x750 [ 102.220388][ T6088] ? putname+0x154/0x1a0 [ 102.220426][ T6088] do_futex+0x1e3/0x350 [ 102.220456][ T6088] ? __pfx_do_futex+0x10/0x10 [ 102.220503][ T6088] __x64_sys_futex+0x1e0/0x4c0 [ 102.220535][ T6088] ? __x64_sys_openat+0x174/0x210 [ 102.220572][ T6088] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.220603][ T6088] ? xfd_validate_state+0x61/0x180 [ 102.220649][ T6088] do_syscall_64+0xcd/0x490 [ 102.220683][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.220708][ T6088] RIP: 0033:0x7f831b98ebe9 [ 102.220728][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.220750][ T6088] RSP: 002b:00007ffed26c3ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.220774][ T6088] RAX: ffffffffffffffda RBX: 00007f831bbb5fa8 RCX: 00007f831b98ebe9 [ 102.220791][ T6088] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f831bbb5fac [ 102.220806][ T6088] RBP: 0000000000000000 R08: 00007f831c83b000 R09: 00000008d26c3dbf [ 102.220821][ T6088] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f831bbb5fac [ 102.220836][ T6088] R13: 00007f831bbb5fa0 R14: 0000000000001130 R15: 0000000000000004 [ 102.220868][ T6088] [ 102.437247][ T6090] FAULT_INJECTION: forcing a failure. [ 102.437247][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 102.454255][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 102.454290][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.454304][ T6090] Call Trace: [ 102.454312][ T6090] [ 102.454321][ T6090] dump_stack_lvl+0x16c/0x1f0 [ 102.454357][ T6090] should_fail_ex+0x512/0x640 [ 102.454390][ T6090] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 102.454426][ T6090] should_failslab+0xc2/0x120 [ 102.454458][ T6090] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 102.454491][ T6090] ? __kthread_create_on_node+0x186/0x3f0 [ 102.454528][ T6090] kvasprintf+0xbc/0x160 [ 102.454552][ T6090] ? __pfx_kvasprintf+0x10/0x10 [ 102.454589][ T6090] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 102.454621][ T6090] __kthread_create_on_node+0x186/0x3f0 [ 102.454654][ T6090] ? __pfx___kthread_create_on_node+0x10/0x10 [ 102.454698][ T6090] ? __lock_acquire+0xb97/0x1ce0 [ 102.454732][ T6090] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 102.454766][ T6090] kthread_create_on_node+0xc7/0x100 [ 102.454798][ T6090] ? __pfx_kthread_create_on_node+0x10/0x10 [ 102.454836][ T6090] ? mark_held_locks+0x49/0x80 [ 102.454866][ T6090] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 102.454895][ T6090] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.454930][ T6090] dvb_frontend_open+0xf47/0x1730 [ 102.454972][ T6090] ? __pfx_dvb_frontend_open+0x10/0x10 [ 102.455006][ T6090] dvb_device_open+0x270/0x3b0 [ 102.455040][ T6090] ? __pfx_dvb_device_open+0x10/0x10 [ 102.455073][ T6090] chrdev_open+0x231/0x6a0 [ 102.455102][ T6090] ? __pfx_apparmor_file_open+0x10/0x10 [ 102.455130][ T6090] ? __pfx_chrdev_open+0x10/0x10 [ 102.455169][ T6090] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 102.455203][ T6090] do_dentry_open+0x97f/0x1530 [ 102.455234][ T6090] ? __pfx_chrdev_open+0x10/0x10 [ 102.455272][ T6090] vfs_open+0x82/0x3f0 [ 102.455312][ T6090] path_openat+0x1de4/0x2cb0 [ 102.455352][ T6090] ? __pfx_path_openat+0x10/0x10 [ 102.455391][ T6090] do_filp_open+0x20b/0x470 [ 102.455421][ T6090] ? __pfx_do_filp_open+0x10/0x10 [ 102.455485][ T6090] ? alloc_fd+0x471/0x7d0 [ 102.455522][ T6090] do_sys_openat2+0x11b/0x1d0 [ 102.455556][ T6090] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.455606][ T6090] __x64_sys_openat+0x174/0x210 [ 102.455642][ T6090] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.455683][ T6090] ? __x64_sys_pidfd_send_signal+0x2a7/0x430 [ 102.455724][ T6090] do_syscall_64+0xcd/0x490 [ 102.455758][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.455784][ T6090] RIP: 0033:0x7f831b98ebe9 [ 102.455804][ T6090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.455827][ T6090] RSP: 002b:00007ffed26c3a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.455849][ T6090] RAX: ffffffffffffffda RBX: 00007f831bbb5fa0 RCX: 00007f831b98ebe9 [ 102.455866][ T6090] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 102.455882][ T6090] RBP: 00007f831ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.455897][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.455911][ T6090] R13: 00007f831bbb5fa0 R14: 00007f831bbb5fa0 R15: 0000000000000004 [ 102.455945][ T6090] [ 102.455975][ T6090] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 102.653856][ T5963] Bluetooth: hci0: command tx timeout [ 102.685456][ T6091] ================================================================== [ 102.792746][ T6091] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 102.800633][ T6091] Read of size 8 at addr ffff888148348818 by task syz.0.25/6091 [ 102.808243][ T6091] [ 102.810565][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 102.810584][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.810593][ T6091] Call Trace: [ 102.810599][ T6091] [ 102.810605][ T6091] dump_stack_lvl+0x116/0x1f0 [ 102.810627][ T6091] print_report+0xcd/0x630 [ 102.810645][ T6091] ? __virt_addr_valid+0x81/0x610 [ 102.810662][ T6091] ? __phys_addr+0xe8/0x180 [ 102.810678][ T6091] ? dvb_device_open+0x36a/0x3b0 [ 102.810697][ T6091] kasan_report+0xe0/0x110 [ 102.810713][ T6091] ? dvb_device_open+0x36a/0x3b0 [ 102.810733][ T6091] ? __pfx_dvb_device_open+0x10/0x10 [ 102.810751][ T6091] dvb_device_open+0x36a/0x3b0 [ 102.810768][ T6091] ? __pfx_dvb_device_open+0x10/0x10 [ 102.810786][ T6091] chrdev_open+0x231/0x6a0 [ 102.810804][ T6091] ? __pfx_apparmor_file_open+0x10/0x10 [ 102.810820][ T6091] ? __pfx_chrdev_open+0x10/0x10 [ 102.810836][ T6091] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 102.810854][ T6091] do_dentry_open+0x97f/0x1530 [ 102.810871][ T6091] ? __pfx_chrdev_open+0x10/0x10 [ 102.810889][ T6091] vfs_open+0x82/0x3f0 [ 102.810909][ T6091] path_openat+0x1de4/0x2cb0 [ 102.810928][ T6091] ? __pfx_path_openat+0x10/0x10 [ 102.810945][ T6091] do_filp_open+0x20b/0x470 [ 102.810961][ T6091] ? __pfx_do_filp_open+0x10/0x10 [ 102.810982][ T6091] ? alloc_fd+0x471/0x7d0 [ 102.810998][ T6091] do_sys_openat2+0x11b/0x1d0 [ 102.811018][ T6091] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.811040][ T6091] __x64_sys_openat+0x174/0x210 [ 102.811060][ T6091] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.811082][ T6091] ? __x64_sys_pidfd_send_signal+0x2a7/0x430 [ 102.811102][ T6091] do_syscall_64+0xcd/0x490 [ 102.811121][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.811135][ T6091] RIP: 0033:0x7f831b98ebe9 [ 102.811152][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.811164][ T6091] RSP: 002b:00007ffed26c3a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.811178][ T6091] RAX: ffffffffffffffda RBX: 00007f831bbb5fa0 RCX: 00007f831b98ebe9 [ 102.811187][ T6091] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 102.811196][ T6091] RBP: 00007f831ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.811204][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.811212][ T6091] R13: 00007f831bbb5fa0 R14: 00007f831bbb5fa0 R15: 0000000000000004 [ 102.811225][ T6091] [ 102.811229][ T6091] [ 103.057698][ T6091] Allocated by task 1: [ 103.061750][ T6091] kasan_save_stack+0x33/0x60 [ 103.066421][ T6091] kasan_save_track+0x14/0x30 [ 103.071081][ T6091] __kasan_kmalloc+0xaa/0xb0 [ 103.075740][ T6091] dvb_register_device+0x1e4/0x2370 [ 103.080961][ T6091] dvb_register_frontend+0x5a6/0x880 [ 103.086235][ T6091] vidtv_bridge_probe+0x459/0xa90 [ 103.091250][ T6091] platform_probe+0x103/0x1d0 [ 103.095918][ T6091] really_probe+0x241/0xa90 [ 103.100413][ T6091] __driver_probe_device+0x1de/0x440 [ 103.105688][ T6091] driver_probe_device+0x4c/0x1b0 [ 103.110697][ T6091] __driver_attach+0x283/0x580 [ 103.115458][ T6091] bus_for_each_dev+0x13e/0x1d0 [ 103.120290][ T6091] bus_add_driver+0x2e9/0x690 [ 103.124964][ T6091] driver_register+0x15c/0x4b0 [ 103.129744][ T6091] vidtv_bridge_init+0x45/0x80 [ 103.134510][ T6091] do_one_initcall+0x120/0x6e0 [ 103.139258][ T6091] kernel_init_freeable+0x5c2/0x910 [ 103.144534][ T6091] kernel_init+0x1c/0x2b0 [ 103.148865][ T6091] ret_from_fork+0x5d4/0x6f0 [ 103.153562][ T6091] ret_from_fork_asm+0x1a/0x30 [ 103.158427][ T6091] [ 103.160744][ T6091] Freed by task 6090: [ 103.164714][ T6091] kasan_save_stack+0x33/0x60 [ 103.169390][ T6091] kasan_save_track+0x14/0x30 [ 103.174139][ T6091] kasan_save_free_info+0x3b/0x60 [ 103.179157][ T6091] __kasan_slab_free+0x60/0x70 [ 103.183909][ T6091] kfree+0x2b4/0x4d0 [ 103.187790][ T6091] dvb_device_put.part.0+0x60/0x90 [ 103.192901][ T6091] dvb_device_open+0x2a4/0x3b0 [ 103.197655][ T6091] chrdev_open+0x231/0x6a0 [ 103.202061][ T6091] do_dentry_open+0x97f/0x1530 [ 103.206820][ T6091] vfs_open+0x82/0x3f0 [ 103.210884][ T6091] path_openat+0x1de4/0x2cb0 [ 103.215488][ T6091] do_filp_open+0x20b/0x470 [ 103.219997][ T6091] do_sys_openat2+0x11b/0x1d0 [ 103.224663][ T6091] __x64_sys_openat+0x174/0x210 [ 103.229511][ T6091] do_syscall_64+0xcd/0x490 [ 103.233999][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.239893][ T6091] [ 103.242217][ T6091] The buggy address belongs to the object at ffff888148348800 [ 103.242217][ T6091] which belongs to the cache kmalloc-256 of size 256 [ 103.256351][ T6091] The buggy address is located 24 bytes inside of [ 103.256351][ T6091] freed 256-byte region [ffff888148348800, ffff888148348900) [ 103.270105][ T6091] [ 103.272443][ T6091] The buggy address belongs to the physical page: [ 103.278839][ T6091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x148348 [ 103.287688][ T6091] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 103.296169][ T6091] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 103.303798][ T6091] page_type: f5(slab) [ 103.307785][ T6091] raw: 057ff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 103.316366][ T6091] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 103.324943][ T6091] head: 057ff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 103.333603][ T6091] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 103.342399][ T6091] head: 057ff00000000001 ffffea000520d201 00000000ffffffff 00000000ffffffff [ 103.351065][ T6091] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 103.359935][ T6091] page dumped because: kasan: bad access detected [ 103.366447][ T6091] page_owner tracks the page as allocated [ 103.372153][ T6091] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19381394530, free_ts 0 [ 103.391938][ T6091] post_alloc_hook+0x1c0/0x230 [ 103.396712][ T6091] get_page_from_freelist+0x132b/0x38e0 [ 103.402248][ T6091] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 103.408244][ T6091] alloc_pages_mpol+0x1fb/0x550 [ 103.413269][ T6091] new_slab+0x247/0x330 [ 103.417423][ T6091] ___slab_alloc+0xcf2/0x1740 [ 103.422124][ T6091] __slab_alloc.constprop.0+0x56/0xb0 [ 103.427493][ T6091] __kmalloc_cache_noprof+0xfb/0x3e0 [ 103.432760][ T6091] bus_add_driver+0x92/0x690 [ 103.437358][ T6091] driver_register+0x15c/0x4b0 [ 103.442153][ T6091] do_one_initcall+0x120/0x6e0 [ 103.446933][ T6091] kernel_init_freeable+0x5c2/0x910 [ 103.452124][ T6091] kernel_init+0x1c/0x2b0 [ 103.456455][ T6091] ret_from_fork+0x5d4/0x6f0 [ 103.461061][ T6091] ret_from_fork_asm+0x1a/0x30 [ 103.465862][ T6091] page_owner free stack trace missing [ 103.471248][ T6091] [ 103.473563][ T6091] Memory state around the buggy address: [ 103.479169][ T6091] ffff888148348700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.487216][ T6091] ffff888148348780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.495264][ T6091] >ffff888148348800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.503365][ T6091] ^ [ 103.508211][ T6091] ffff888148348880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.516272][ T6091] ffff888148348900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.524322][ T6091] ================================================================== [ 103.533892][ T6091] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.541209][ T6091] CPU: 0 UID: 0 PID: 6091 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 103.550508][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.560609][ T6091] Call Trace: [ 103.563887][ T6091] [ 103.566811][ T6091] dump_stack_lvl+0x3d/0x1f0 [ 103.571406][ T6091] vpanic+0x6e8/0x7a0 [ 103.575391][ T6091] ? __pfx_vpanic+0x10/0x10 [ 103.579895][ T6091] ? __pfx_vprintk_emit+0x10/0x10 [ 103.584919][ T6091] ? dvb_device_open+0x36a/0x3b0 [ 103.590032][ T6091] panic+0xca/0xd0 [ 103.593758][ T6091] ? __pfx_panic+0x10/0x10 [ 103.598175][ T6091] ? dvb_device_open+0x36a/0x3b0 [ 103.603114][ T6091] ? preempt_schedule_common+0x44/0xc0 [ 103.608574][ T6091] ? preempt_schedule_thunk+0x16/0x30 [ 103.613947][ T6091] ? check_panic_on_warn+0x1f/0xb0 [ 103.619060][ T6091] check_panic_on_warn+0xab/0xb0 [ 103.624002][ T6091] end_report+0x107/0x170 [ 103.628332][ T6091] kasan_report+0xee/0x110 [ 103.632753][ T6091] ? dvb_device_open+0x36a/0x3b0 [ 103.637701][ T6091] ? __pfx_dvb_device_open+0x10/0x10 [ 103.642988][ T6091] dvb_device_open+0x36a/0x3b0 [ 103.647771][ T6091] ? __pfx_dvb_device_open+0x10/0x10 [ 103.653058][ T6091] chrdev_open+0x231/0x6a0 [ 103.657939][ T6091] ? __pfx_apparmor_file_open+0x10/0x10 [ 103.663536][ T6091] ? __pfx_chrdev_open+0x10/0x10 [ 103.668504][ T6091] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 103.674850][ T6091] do_dentry_open+0x97f/0x1530 [ 103.679629][ T6091] ? __pfx_chrdev_open+0x10/0x10 [ 103.684572][ T6091] vfs_open+0x82/0x3f0 [ 103.688671][ T6091] path_openat+0x1de4/0x2cb0 [ 103.693286][ T6091] ? __pfx_path_openat+0x10/0x10 [ 103.698243][ T6091] do_filp_open+0x20b/0x470 [ 103.702773][ T6091] ? __pfx_do_filp_open+0x10/0x10 [ 103.707818][ T6091] ? alloc_fd+0x471/0x7d0 [ 103.712155][ T6091] do_sys_openat2+0x11b/0x1d0 [ 103.716840][ T6091] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.722046][ T6091] __x64_sys_openat+0x174/0x210 [ 103.727165][ T6091] ? __pfx___x64_sys_openat+0x10/0x10 [ 103.732544][ T6091] ? __x64_sys_pidfd_send_signal+0x2a7/0x430 [ 103.738549][ T6091] do_syscall_64+0xcd/0x490 [ 103.743091][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.748998][ T6091] RIP: 0033:0x7f831b98ebe9 [ 103.753421][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.773039][ T6091] RSP: 002b:00007ffed26c3a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.781459][ T6091] RAX: ffffffffffffffda RBX: 00007f831bbb5fa0 RCX: 00007f831b98ebe9 [ 103.789476][ T6091] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 103.797444][ T6091] RBP: 00007f831ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 103.805404][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.813365][ T6091] R13: 00007f831bbb5fa0 R14: 00007f831bbb5fa0 R15: 0000000000000004 [ 103.821352][ T6091] [ 103.824619][ T6091] Kernel Offset: disabled [ 103.828931][ T6091] Rebooting in 86400 seconds..