Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. 2026/02/15 20:45:22 parsed 1 programs [ 110.728286][ T5837] cgroup: Unknown subsys name 'net' [ 110.866986][ T5837] cgroup: Unknown subsys name 'cpuset' [ 110.876466][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 112.727031][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 115.753968][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 115.845956][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.853234][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.860464][ T5847] bridge_slave_0: entered allmulticast mode [ 115.868516][ T5847] bridge_slave_0: entered promiscuous mode [ 115.877752][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.885046][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.892258][ T5847] bridge_slave_1: entered allmulticast mode [ 115.899893][ T5847] bridge_slave_1: entered promiscuous mode [ 115.931890][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.944403][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.978703][ T5847] team0: Port device team_slave_0 added [ 115.987160][ T5847] team0: Port device team_slave_1 added [ 116.015765][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.023176][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.049157][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.062058][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.069134][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.095244][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.144003][ T5847] hsr_slave_0: entered promiscuous mode [ 116.151036][ T5847] hsr_slave_1: entered promiscuous mode [ 116.321402][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.335174][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.345843][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.357243][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.392938][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.400207][ T5847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.408224][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.415404][ T5847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.480289][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.502408][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.511376][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.528750][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.543809][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.550946][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.565676][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.572901][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.788427][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.837195][ T5847] veth0_vlan: entered promiscuous mode [ 116.850871][ T5847] veth1_vlan: entered promiscuous mode [ 116.888578][ T5847] veth0_macvtap: entered promiscuous mode [ 116.898864][ T5847] veth1_macvtap: entered promiscuous mode [ 116.918547][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.935277][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.952221][ T1110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.963836][ T1110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.981320][ T1110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.990375][ T1110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.067023][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 117.233722][ T1110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.346707][ T1110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.409709][ T1110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.507648][ T1110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.386108][ T5892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.395201][ T5892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.403820][ T5892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.412130][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.421220][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.974517][ T1110] bridge_slave_1: left allmulticast mode [ 119.980523][ T1110] bridge_slave_1: left promiscuous mode [ 120.003880][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.026203][ T1110] bridge_slave_0: left allmulticast mode [ 120.031915][ T1110] bridge_slave_0: left promiscuous mode [ 120.038318][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.353661][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.389964][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.400996][ T1110] bond0 (unregistering): Released all slaves [ 120.554123][ T1110] hsr_slave_0: left promiscuous mode [ 120.569812][ T1110] hsr_slave_1: left promiscuous mode [ 120.584307][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.591792][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.614779][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.622241][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.713453][ T1110] veth1_macvtap: left promiscuous mode [ 120.719303][ T1110] veth0_macvtap: left promiscuous mode [ 120.727328][ T1110] veth1_vlan: left promiscuous mode [ 120.732804][ T1110] veth0_vlan: left promiscuous mode [ 121.159620][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 121.179267][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 121.737318][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.758051][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.796706][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.812961][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/15 20:45:40 executed programs: 0 [ 123.791465][ T5892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.802289][ T5892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.810138][ T5892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.820082][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.833677][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.271126][ T5992] chnl_net:caif_netlink_parms(): no params data found [ 124.411709][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.419825][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.429137][ T5992] bridge_slave_0: entered allmulticast mode [ 124.437804][ T5992] bridge_slave_0: entered promiscuous mode [ 124.447569][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.455202][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.463481][ T5992] bridge_slave_1: entered allmulticast mode [ 124.471128][ T5992] bridge_slave_1: entered promiscuous mode [ 124.513814][ T5992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.527358][ T5992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.594747][ T5992] team0: Port device team_slave_0 added [ 124.605942][ T5992] team0: Port device team_slave_1 added [ 124.645507][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.652637][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.680556][ T5992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.700908][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.708169][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.736047][ T5992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.840817][ T5992] hsr_slave_0: entered promiscuous mode [ 124.848250][ T5992] hsr_slave_1: entered promiscuous mode [ 125.430132][ T5992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.446074][ T5992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.458333][ T5992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.471219][ T5992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.603759][ T5992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.632873][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.647750][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.654975][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.678445][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.685677][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.906639][ T5892] Bluetooth: hci0: command tx timeout [ 126.039233][ T5992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.105880][ T5992] veth0_vlan: entered promiscuous mode [ 126.119988][ T5992] veth1_vlan: entered promiscuous mode [ 126.160593][ T5992] veth0_macvtap: entered promiscuous mode [ 126.176041][ T5992] veth1_macvtap: entered promiscuous mode [ 126.204665][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.222273][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.242297][ T1110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.263123][ T1110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.272010][ T1110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.286534][ T1110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.373158][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.381055][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.441240][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.452488][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.992457][ T5892] Bluetooth: hci0: command tx timeout 2026/02/15 20:45:45 executed programs: 5 [ 130.062505][ T5892] Bluetooth: hci0: command tx timeout [ 132.142486][ T5892] Bluetooth: hci0: command tx timeout [ 132.945973][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952590][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 2026/02/15 20:45:50 executed programs: 11 2026/02/15 20:45:56 executed programs: 17 [ 141.172030][ T6213] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) 2026/02/15 20:46:01 executed programs: 23 2026/02/15 20:46:06 executed programs: 29 2026/02/15 20:46:11 executed programs: 35 2026/02/15 20:46:16 executed programs: 41 2026/02/15 20:46:21 executed programs: 47 [ 166.159465][ T6357] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 166.249775][ T6363] ================================================================== [ 166.257882][ T6363] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 166.265649][ T6363] Read of size 8 at addr ffff88802c8a8018 by task syz.0.63/6363 [ 166.273305][ T6363] [ 166.275687][ T6363] CPU: 1 UID: 0 PID: 6363 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full) [ 166.275725][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.275752][ T6363] Call Trace: [ 166.275764][ T6363] [ 166.275784][ T6363] dump_stack_lvl+0x100/0x190 [ 166.275823][ T6363] print_report+0x156/0x4c9 [ 166.275857][ T6363] ? __virt_addr_valid+0x81/0x620 [ 166.275886][ T6363] ? __phys_addr+0xe8/0x180 [ 166.275914][ T6363] ? dvb_device_open+0x33f/0x3b0 [ 166.275948][ T6363] kasan_report+0xdf/0x1e0 [ 166.275983][ T6363] ? dvb_device_open+0x33f/0x3b0 [ 166.276019][ T6363] ? __pfx_dvb_device_open+0x10/0x10 [ 166.276053][ T6363] dvb_device_open+0x33f/0x3b0 [ 166.276087][ T6363] ? __pfx_dvb_device_open+0x10/0x10 [ 166.276120][ T6363] chrdev_open+0x234/0x6a0 [ 166.276155][ T6363] ? __pfx_apparmor_file_open+0x10/0x10 [ 166.276178][ T6363] ? __pfx_chrdev_open+0x10/0x10 [ 166.276213][ T6363] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 166.276268][ T6363] do_dentry_open+0x6d8/0x1660 [ 166.276301][ T6363] ? __pfx_chrdev_open+0x10/0x10 [ 166.276338][ T6363] vfs_open+0x82/0x3f0 [ 166.276362][ T6363] path_openat+0x208c/0x31a0 [ 166.276407][ T6363] ? __pfx_path_openat+0x10/0x10 [ 166.276446][ T6363] do_file_open+0x20e/0x430 [ 166.276480][ T6363] ? __pfx_do_file_open+0x10/0x10 [ 166.276525][ T6363] ? alloc_fd+0x476/0x790 [ 166.276565][ T6363] ? do_getname+0x191/0x390 [ 166.276589][ T6363] do_sys_openat2+0x10d/0x1e0 [ 166.276613][ T6363] ? __pfx_do_sys_openat2+0x10/0x10 [ 166.276642][ T6363] __x64_sys_openat+0x12d/0x210 [ 166.276669][ T6363] ? __pfx___x64_sys_openat+0x10/0x10 [ 166.276700][ T6363] do_syscall_64+0x106/0xf80 [ 166.276730][ T6363] ? clear_bhb_loop+0x40/0x90 [ 166.276757][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.276781][ T6363] RIP: 0033:0x7f228f99bf79 [ 166.276803][ T6363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.276829][ T6363] RSP: 002b:00007f229086d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.276855][ T6363] RAX: ffffffffffffffda RBX: 00007f228fc16090 RCX: 00007f228f99bf79 [ 166.276871][ T6363] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 166.276885][ T6363] RBP: 00007f228fa327e0 R08: 0000000000000000 R09: 0000000000000000 [ 166.276899][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.276913][ T6363] R13: 00007f228fc16128 R14: 00007f228fc16090 R15: 00007ffe30059e68 [ 166.276936][ T6363] [ 166.276943][ T6363] [ 166.527031][ T6363] Allocated by task 1: [ 166.531130][ T6363] kasan_save_stack+0x30/0x50 [ 166.535849][ T6363] kasan_save_track+0x14/0x30 [ 166.540562][ T6363] __kasan_kmalloc+0xaa/0xb0 [ 166.545185][ T6363] dvb_register_device+0x1d6/0x1e60 [ 166.550464][ T6363] dvb_register_frontend+0x5a8/0x8a0 [ 166.555804][ T6363] vidtv_bridge_probe+0x44b/0xa30 [ 166.560868][ T6363] platform_probe+0x106/0x1d0 [ 166.565585][ T6363] really_probe+0x241/0xa60 [ 166.570120][ T6363] __driver_probe_device+0x1de/0x400 [ 166.575437][ T6363] driver_probe_device+0x4c/0x1b0 [ 166.580503][ T6363] __driver_attach+0x2f4/0x6a0 [ 166.585313][ T6363] bus_for_each_dev+0x13e/0x1d0 [ 166.590221][ T6363] bus_add_driver+0x305/0x5b0 [ 166.594946][ T6363] driver_register+0x1e2/0x360 [ 166.599754][ T6363] vidtv_bridge_init+0x38/0x70 [ 166.604571][ T6363] do_one_initcall+0x11d/0x760 [ 166.609361][ T6363] kernel_init_freeable+0x6e5/0x7a0 [ 166.614601][ T6363] kernel_init+0x1f/0x1e0 [ 166.618982][ T6363] ret_from_fork+0x754/0xd80 [ 166.624050][ T6363] ret_from_fork_asm+0x1a/0x30 [ 166.628848][ T6363] [ 166.631188][ T6363] Freed by task 6357: [ 166.635181][ T6363] kasan_save_stack+0x30/0x50 [ 166.639896][ T6363] kasan_save_track+0x14/0x30 [ 166.644615][ T6363] kasan_save_free_info+0x3b/0x70 [ 166.649674][ T6363] __kasan_slab_free+0x5f/0x80 [ 166.654474][ T6363] kfree+0x1f6/0x6b0 [ 166.658403][ T6363] dvb_device_put.part.0+0x57/0x90 [ 166.663549][ T6363] dvb_device_open+0x2ba/0x3b0 [ 166.668355][ T6363] chrdev_open+0x234/0x6a0 [ 166.672832][ T6363] do_dentry_open+0x6d8/0x1660 [ 166.677633][ T6363] vfs_open+0x82/0x3f0 [ 166.681728][ T6363] path_openat+0x208c/0x31a0 [ 166.686365][ T6363] do_file_open+0x20e/0x430 [ 166.690907][ T6363] do_sys_openat2+0x10d/0x1e0 [ 166.695604][ T6363] __x64_sys_openat+0x12d/0x210 [ 166.700496][ T6363] do_syscall_64+0x106/0xf80 [ 166.705127][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.711145][ T6363] [ 166.713491][ T6363] The buggy address belongs to the object at ffff88802c8a8000 [ 166.713491][ T6363] which belongs to the cache kmalloc-256 of size 256 [ 166.727661][ T6363] The buggy address is located 24 bytes inside of [ 166.727661][ T6363] freed 256-byte region [ffff88802c8a8000, ffff88802c8a8100) [ 166.741490][ T6363] [ 166.743848][ T6363] The buggy address belongs to the physical page: [ 166.750292][ T6363] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c8a8 [ 166.759078][ T6363] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 166.767600][ T6363] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 166.775199][ T6363] page_type: f5(slab) [ 166.779215][ T6363] raw: 00fff00000000040 ffff88813fe36b40 dead000000000122 0000000000000000 [ 166.787840][ T6363] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 166.796448][ T6363] head: 00fff00000000040 ffff88813fe36b40 dead000000000122 0000000000000000 [ 166.805148][ T6363] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 166.813857][ T6363] head: 00fff00000000001 ffffea0000b22a01 00000000ffffffff 00000000ffffffff [ 166.822560][ T6363] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 166.831265][ T6363] page dumped because: kasan: bad access detected [ 166.837715][ T6363] page_owner tracks the page as allocated [ 166.843449][ T6363] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18419012224, free_ts 0 [ 166.863199][ T6363] post_alloc_hook+0x153/0x170 [ 166.867995][ T6363] get_page_from_freelist+0x111d/0x3140 [ 166.873573][ T6363] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 166.879591][ T6363] new_slab+0xa6/0x6e0 [ 166.883689][ T6363] refill_objects+0x26b/0x400 [ 166.888394][ T6363] __pcs_replace_empty_main+0x19f/0x600 [ 166.893991][ T6363] __kmalloc_cache_noprof+0x493/0x6f0 [ 166.899397][ T6363] bus_add_driver+0x92/0x5b0 [ 166.904034][ T6363] driver_register+0x1e2/0x360 [ 166.908829][ T6363] usb_register_driver+0x21c/0x3e0 [ 166.914068][ T6363] do_one_initcall+0x11d/0x760 [ 166.918857][ T6363] kernel_init_freeable+0x6e5/0x7a0 [ 166.924086][ T6363] kernel_init+0x1f/0x1e0 [ 166.928460][ T6363] ret_from_fork+0x754/0xd80 [ 166.933110][ T6363] ret_from_fork_asm+0x1a/0x30 [ 166.937903][ T6363] page_owner free stack trace missing [ 166.943315][ T6363] [ 166.945680][ T6363] Memory state around the buggy address: [ 166.951329][ T6363] ffff88802c8a7f00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 166.959416][ T6363] ffff88802c8a7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.967611][ T6363] >ffff88802c8a8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.975696][ T6363] ^ [ 166.980574][ T6363] ffff88802c8a8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 166.988667][ T6363] ffff88802c8a8100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 166.996768][ T6363] ================================================================== [ 167.008597][ T6363] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.015851][ T6363] CPU: 1 UID: 0 PID: 6363 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full) [ 167.025016][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.035095][ T6363] Call Trace: [ 167.038402][ T6363] [ 167.041383][ T6363] dump_stack_lvl+0x100/0x190 [ 167.046108][ T6363] vpanic+0x552/0x970 [ 167.050121][ T6363] ? __pfx_vpanic+0x10/0x10 [ 167.054656][ T6363] ? dvb_device_open+0x33f/0x3b0 [ 167.059633][ T6363] panic+0xd1/0xe0 [ 167.063442][ T6363] ? __pfx_panic+0x10/0x10 [ 167.067928][ T6363] ? dvb_device_open+0x33f/0x3b0 [ 167.072921][ T6363] ? preempt_schedule_common+0x42/0xc0 [ 167.078431][ T6363] ? check_panic_on_warn+0x1f/0x90 [ 167.083660][ T6363] check_panic_on_warn.cold+0x19/0x34 [ 167.089085][ T6363] end_report.part.0+0x3a/0x90 [ 167.093903][ T6363] kasan_report.cold+0xe/0x18 [ 167.098631][ T6363] ? dvb_device_open+0x33f/0x3b0 [ 167.103623][ T6363] ? __pfx_dvb_device_open+0x10/0x10 [ 167.108952][ T6363] dvb_device_open+0x33f/0x3b0 [ 167.113761][ T6363] ? __pfx_dvb_device_open+0x10/0x10 [ 167.119086][ T6363] chrdev_open+0x234/0x6a0 [ 167.123548][ T6363] ? __pfx_apparmor_file_open+0x10/0x10 [ 167.129131][ T6363] ? __pfx_chrdev_open+0x10/0x10 [ 167.134133][ T6363] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 167.140520][ T6363] do_dentry_open+0x6d8/0x1660 [ 167.145378][ T6363] ? __pfx_chrdev_open+0x10/0x10 [ 167.150363][ T6363] vfs_open+0x82/0x3f0 [ 167.154466][ T6363] path_openat+0x208c/0x31a0 [ 167.159104][ T6363] ? __pfx_path_openat+0x10/0x10 [ 167.164088][ T6363] do_file_open+0x20e/0x430 [ 167.168653][ T6363] ? __pfx_do_file_open+0x10/0x10 [ 167.173734][ T6363] ? alloc_fd+0x476/0x790 [ 167.178108][ T6363] ? do_getname+0x191/0x390 [ 167.182642][ T6363] do_sys_openat2+0x10d/0x1e0 [ 167.187348][ T6363] ? __pfx_do_sys_openat2+0x10/0x10 [ 167.192581][ T6363] __x64_sys_openat+0x12d/0x210 [ 167.197471][ T6363] ? __pfx___x64_sys_openat+0x10/0x10 [ 167.202879][ T6363] do_syscall_64+0x106/0xf80 [ 167.207513][ T6363] ? clear_bhb_loop+0x40/0x90 [ 167.212222][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.218151][ T6363] RIP: 0033:0x7f228f99bf79 [ 167.222594][ T6363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.242232][ T6363] RSP: 002b:00007f229086d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 167.250682][ T6363] RAX: ffffffffffffffda RBX: 00007f228fc16090 RCX: 00007f228f99bf79 [ 167.258685][ T6363] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 167.266684][ T6363] RBP: 00007f228fa327e0 R08: 0000000000000000 R09: 0000000000000000 [ 167.274682][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.282679][ T6363] R13: 00007f228fc16128 R14: 00007f228fc16090 R15: 00007ffe30059e68 [ 167.290685][ T6363] [ 167.294322][ T6363] Kernel Offset: disabled [ 167.298672][ T6363] Rebooting in 86400 seconds..