Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. 2026/02/14 17:13:54 parsed 1 programs [ 87.990614][ T5825] cgroup: Unknown subsys name 'net' [ 88.109520][ T5825] cgroup: Unknown subsys name 'cpuset' [ 88.118534][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.739646][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.028320][ T981] cfg80211: failed to load regulatory.db [ 92.729675][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.778166][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 94.908182][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.916485][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.923815][ T5883] bridge_slave_0: entered allmulticast mode [ 94.932924][ T5883] bridge_slave_0: entered promiscuous mode [ 94.943601][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.951135][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.958519][ T5883] bridge_slave_1: entered allmulticast mode [ 94.967325][ T5883] bridge_slave_1: entered promiscuous mode [ 95.011822][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.030396][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.072196][ T5883] team0: Port device team_slave_0 added [ 95.085279][ T5883] team0: Port device team_slave_1 added [ 95.120356][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.127356][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.153308][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.167611][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.174689][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.200927][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.259114][ T5883] hsr_slave_0: entered promiscuous mode [ 95.266805][ T5883] hsr_slave_1: entered promiscuous mode [ 95.455665][ T5883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.469494][ T5883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.480485][ T5883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.493182][ T5883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.531897][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.539173][ T5883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.547352][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.554502][ T5883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.629003][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.638057][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.656648][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.682993][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.697861][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.705024][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.720978][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.728146][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.946514][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.007063][ T5883] veth0_vlan: entered promiscuous mode [ 96.023876][ T5883] veth1_vlan: entered promiscuous mode [ 96.066708][ T5883] veth0_macvtap: entered promiscuous mode [ 96.079285][ T5883] veth1_macvtap: entered promiscuous mode [ 96.107628][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.125238][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.143930][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.155065][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.165371][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.178093][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.328510][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.401517][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.510317][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.592696][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.988354][ T5918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.998192][ T5918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.006166][ T5918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.014207][ T5918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.023557][ T5918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.321515][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.332969][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.366437][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.374314][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/14 17:14:08 executed programs: 0 [ 97.855900][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.863690][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.873113][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.883314][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.891725][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.069574][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 98.168814][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.176357][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.183844][ T5933] bridge_slave_0: entered allmulticast mode [ 98.191922][ T5933] bridge_slave_0: entered promiscuous mode [ 98.200770][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.208243][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.215806][ T5933] bridge_slave_1: entered allmulticast mode [ 98.223731][ T5933] bridge_slave_1: entered promiscuous mode [ 98.264110][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.278933][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.319909][ T5933] team0: Port device team_slave_0 added [ 98.329670][ T5933] team0: Port device team_slave_1 added [ 98.365814][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.372813][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.398814][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.411917][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.419066][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.446548][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.504273][ T5933] hsr_slave_0: entered promiscuous mode [ 98.512071][ T5933] hsr_slave_1: entered promiscuous mode [ 98.519832][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 98.525829][ T5933] Cannot create hsr debugfs directory [ 98.680315][ T35] bridge_slave_1: left allmulticast mode [ 98.686340][ T35] bridge_slave_1: left promiscuous mode [ 98.692949][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.704195][ T35] bridge_slave_0: left allmulticast mode [ 98.710940][ T35] bridge_slave_0: left promiscuous mode [ 98.716954][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.887705][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.899053][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.909604][ T35] bond0 (unregistering): Released all slaves [ 99.033905][ T35] hsr_slave_0: left promiscuous mode [ 99.040132][ T35] hsr_slave_1: left promiscuous mode [ 99.047652][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.055268][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.064172][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.082135][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.098793][ T35] veth1_macvtap: left promiscuous mode [ 99.104923][ T35] veth0_macvtap: left promiscuous mode [ 99.110849][ T35] veth1_vlan: left promiscuous mode [ 99.118724][ T35] veth0_vlan: left promiscuous mode [ 99.425113][ T35] team0 (unregistering): Port device team_slave_1 removed [ 99.452509][ T35] team0 (unregistering): Port device team_slave_0 removed [ 99.946624][ T5918] Bluetooth: hci0: command tx timeout [ 100.015060][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.048151][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.061707][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.078621][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.545266][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.642885][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.660232][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.667484][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.704347][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.711754][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.326555][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.412663][ T5933] veth0_vlan: entered promiscuous mode [ 101.433223][ T5933] veth1_vlan: entered promiscuous mode [ 101.486712][ T5933] veth0_macvtap: entered promiscuous mode [ 101.501653][ T5933] veth1_macvtap: entered promiscuous mode [ 101.547878][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.573966][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.594032][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.603081][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.616837][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.635338][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.736121][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.744000][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.801006][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.810302][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.027918][ T5918] Bluetooth: hci0: command tx timeout [ 102.060272][ T6014] ================================================================== [ 102.068405][ T6014] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350 [ 102.076076][ T6014] Read of size 8 at addr ffff88802b206c18 by task syz.0.19/6014 [ 102.083742][ T6014] [ 102.086120][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 102.086143][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.086165][ T6014] Call Trace: [ 102.086175][ T6014] [ 102.086188][ T6014] dump_stack_lvl+0xe8/0x150 [ 102.086220][ T6014] print_report+0xba/0x230 [ 102.086246][ T6014] ? dvb_device_open+0xc4/0x350 [ 102.086273][ T6014] kasan_report+0x117/0x150 [ 102.086297][ T6014] ? dvb_device_open+0xc4/0x350 [ 102.086332][ T6014] dvb_device_open+0xc4/0x350 [ 102.086355][ T6014] ? do_raw_spin_unlock+0xf5/0x210 [ 102.086377][ T6014] chrdev_open+0x4cd/0x5e0 [ 102.086401][ T6014] ? __pfx_chrdev_open+0x10/0x10 [ 102.086423][ T6014] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 102.086456][ T6014] ? __pfx_chrdev_open+0x10/0x10 [ 102.086478][ T6014] do_dentry_open+0x785/0x14e0 [ 102.086514][ T6014] vfs_open+0x3b/0x340 [ 102.086537][ T6014] ? path_openat+0x2df0/0x3860 [ 102.086557][ T6014] path_openat+0x2e08/0x3860 [ 102.086584][ T6014] ? __pfx_stack_trace_save+0x10/0x10 [ 102.086609][ T6014] ? rcu_is_watching+0x15/0xb0 [ 102.086638][ T6014] ? __pfx_path_openat+0x10/0x10 [ 102.086667][ T6014] do_file_open+0x23e/0x4a0 [ 102.086690][ T6014] ? __pfx_do_file_open+0x10/0x10 [ 102.086720][ T6014] ? _raw_spin_unlock+0x28/0x50 [ 102.086740][ T6014] ? alloc_fd+0x64b/0x6c0 [ 102.086771][ T6014] do_sys_openat2+0x113/0x200 [ 102.086799][ T6014] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.086828][ T6014] ? rcu_is_watching+0x15/0xb0 [ 102.086857][ T6014] __x64_sys_openat+0x138/0x170 [ 102.086887][ T6014] do_syscall_64+0x14d/0xf80 [ 102.086911][ T6014] ? trace_irq_disable+0x3b/0x150 [ 102.086939][ T6014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.086959][ T6014] ? clear_bhb_loop+0x40/0x90 [ 102.086983][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.087004][ T6014] RIP: 0033:0x7fbf4355c84e [ 102.087030][ T6014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.087047][ T6014] RSP: 002b:00007fbf443a7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.087079][ T6014] RAX: ffffffffffffffda RBX: 00007fbf443a86c0 RCX: 00007fbf4355c84e [ 102.087094][ T6014] RDX: 0000000000040002 RSI: 00007fbf443a7c00 RDI: ffffffffffffff9c [ 102.087108][ T6014] RBP: 00007fbf443a7c00 R08: 0000000000000000 R09: 0000000000000000 [ 102.087120][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 102.087133][ T6014] R13: 00007fbf43816038 R14: 00007fbf43815fa0 R15: 00007ffd47c49298 [ 102.087157][ T6014] [ 102.087164][ T6014] [ 102.342472][ T6014] Allocated by task 1: [ 102.346559][ T6014] kasan_save_track+0x3e/0x80 [ 102.351256][ T6014] __kasan_kmalloc+0x93/0xb0 [ 102.355874][ T6014] __kmalloc_cache_noprof+0x31c/0x660 [ 102.361318][ T6014] dvb_register_device+0x2fd/0x2210 [ 102.366618][ T6014] dvb_register_frontend+0x649/0x950 [ 102.371941][ T6014] vidtv_bridge_probe+0x9aa/0xf80 [ 102.376994][ T6014] platform_probe+0xf9/0x190 [ 102.381660][ T6014] really_probe+0x267/0xaf0 [ 102.386194][ T6014] __driver_probe_device+0x18c/0x320 [ 102.391501][ T6014] driver_probe_device+0x4f/0x240 [ 102.396548][ T6014] __driver_attach+0x3e7/0x710 [ 102.401330][ T6014] bus_for_each_dev+0x23b/0x2c0 [ 102.406198][ T6014] bus_add_driver+0x345/0x670 [ 102.410895][ T6014] driver_register+0x23a/0x320 [ 102.415673][ T6014] vidtv_bridge_init+0x28/0x50 [ 102.420458][ T6014] do_one_initcall+0x250/0x8d0 [ 102.425241][ T6014] do_initcall_level+0x104/0x190 [ 102.430204][ T6014] do_initcalls+0x59/0xa0 [ 102.434563][ T6014] kernel_init_freeable+0x2a6/0x3e0 [ 102.439780][ T6014] kernel_init+0x1d/0x1d0 [ 102.444126][ T6014] ret_from_fork+0x51e/0xb90 [ 102.448772][ T6014] ret_from_fork_asm+0x1a/0x30 [ 102.453595][ T6014] [ 102.455936][ T6014] Freed by task 6010: [ 102.459929][ T6014] kasan_save_track+0x3e/0x80 [ 102.464712][ T6014] kasan_save_free_info+0x46/0x50 [ 102.469762][ T6014] __kasan_slab_free+0x5c/0x80 [ 102.474547][ T6014] kfree+0x1c1/0x630 [ 102.478470][ T6014] dvb_device_open+0x2cd/0x350 [ 102.483259][ T6014] chrdev_open+0x4cd/0x5e0 [ 102.487698][ T6014] do_dentry_open+0x785/0x14e0 [ 102.492484][ T6014] vfs_open+0x3b/0x340 [ 102.496577][ T6014] path_openat+0x2e08/0x3860 [ 102.501184][ T6014] do_file_open+0x23e/0x4a0 [ 102.505706][ T6014] do_sys_openat2+0x113/0x200 [ 102.510416][ T6014] __x64_sys_openat+0x138/0x170 [ 102.515288][ T6014] do_syscall_64+0x14d/0xf80 [ 102.519897][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.525810][ T6014] [ 102.528151][ T6014] The buggy address belongs to the object at ffff88802b206c00 [ 102.528151][ T6014] which belongs to the cache kmalloc-256 of size 256 [ 102.542218][ T6014] The buggy address is located 24 bytes inside of [ 102.542218][ T6014] freed 256-byte region [ffff88802b206c00, ffff88802b206d00) [ 102.555943][ T6014] [ 102.558312][ T6014] The buggy address belongs to the physical page: [ 102.564744][ T6014] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b206 [ 102.573540][ T6014] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.582051][ T6014] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 102.589614][ T6014] page_type: f5(slab) [ 102.593615][ T6014] raw: 00fff00000000040 ffff88813ff1db40 dead000000000100 dead000000000122 [ 102.602221][ T6014] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 102.610824][ T6014] head: 00fff00000000040 ffff88813ff1db40 dead000000000100 dead000000000122 [ 102.619520][ T6014] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 102.628217][ T6014] head: 00fff00000000001 ffffea0000ac8181 00000000ffffffff 00000000ffffffff [ 102.637000][ T6014] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 102.645680][ T6014] page dumped because: kasan: bad access detected [ 102.652152][ T6014] page_owner tracks the page as allocated [ 102.657880][ T6014] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17481616498, free_ts 0 [ 102.677629][ T6014] post_alloc_hook+0x231/0x280 [ 102.682436][ T6014] get_page_from_freelist+0x24dc/0x2580 [ 102.688012][ T6014] __alloc_frozen_pages_noprof+0x18d/0x380 [ 102.693833][ T6014] allocate_slab+0x77/0x660 [ 102.698472][ T6014] refill_objects+0x331/0x3c0 [ 102.703171][ T6014] __pcs_replace_empty_main+0x2b9/0x620 [ 102.708743][ T6014] __kmalloc_cache_noprof+0x392/0x660 [ 102.714131][ T6014] bus_add_driver+0x162/0x670 [ 102.718829][ T6014] driver_register+0x23a/0x320 [ 102.723608][ T6014] usb_register_driver+0x1e4/0x390 [ 102.728736][ T6014] do_one_initcall+0x250/0x8d0 [ 102.733529][ T6014] do_initcall_level+0x104/0x190 [ 102.738495][ T6014] do_initcalls+0x59/0xa0 [ 102.742935][ T6014] kernel_init_freeable+0x2a6/0x3e0 [ 102.748175][ T6014] kernel_init+0x1d/0x1d0 [ 102.752533][ T6014] ret_from_fork+0x51e/0xb90 [ 102.757142][ T6014] page_owner free stack trace missing [ 102.762522][ T6014] [ 102.764860][ T6014] Memory state around the buggy address: [ 102.770499][ T6014] ffff88802b206b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.778600][ T6014] ffff88802b206b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.786705][ T6014] >ffff88802b206c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.794776][ T6014] ^ [ 102.799636][ T6014] ffff88802b206c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.807712][ T6014] ffff88802b206d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.815781][ T6014] ================================================================== [ 102.866189][ T6014] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.873454][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 102.882603][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.892693][ T6014] Call Trace: [ 102.896005][ T6014] [ 102.898950][ T6014] vpanic+0x56c/0xa60 [ 102.902968][ T6014] ? __pfx_vpanic+0x10/0x10 [ 102.907497][ T6014] ? __pfx___schedule+0x10/0x10 [ 102.912376][ T6014] panic+0xc5/0xd0 [ 102.916123][ T6014] ? __pfx_panic+0x10/0x10 [ 102.920565][ T6014] ? preempt_schedule_thunk+0x16/0x30 [ 102.925961][ T6014] ? dvb_device_open+0xc4/0x350 [ 102.930837][ T6014] check_panic_on_warn+0x89/0xb0 [ 102.935794][ T6014] ? dvb_device_open+0xc4/0x350 [ 102.940678][ T6014] end_report+0x73/0x180 [ 102.944951][ T6014] ? dvb_device_open+0xc4/0x350 [ 102.949817][ T6014] kasan_report+0x128/0x150 [ 102.954345][ T6014] ? dvb_device_open+0xc4/0x350 [ 102.959224][ T6014] dvb_device_open+0xc4/0x350 [ 102.963925][ T6014] ? do_raw_spin_unlock+0xf5/0x210 [ 102.969081][ T6014] chrdev_open+0x4cd/0x5e0 [ 102.973527][ T6014] ? __pfx_chrdev_open+0x10/0x10 [ 102.978481][ T6014] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 102.984849][ T6014] ? __pfx_chrdev_open+0x10/0x10 [ 102.989805][ T6014] do_dentry_open+0x785/0x14e0 [ 102.994642][ T6014] vfs_open+0x3b/0x340 [ 102.998745][ T6014] ? path_openat+0x2df0/0x3860 [ 103.003535][ T6014] path_openat+0x2e08/0x3860 [ 103.008243][ T6014] ? __pfx_stack_trace_save+0x10/0x10 [ 103.013694][ T6014] ? rcu_is_watching+0x15/0xb0 [ 103.018488][ T6014] ? __pfx_path_openat+0x10/0x10 [ 103.023458][ T6014] do_file_open+0x23e/0x4a0 [ 103.027990][ T6014] ? __pfx_do_file_open+0x10/0x10 [ 103.033047][ T6014] ? _raw_spin_unlock+0x28/0x50 [ 103.037920][ T6014] ? alloc_fd+0x64b/0x6c0 [ 103.042279][ T6014] do_sys_openat2+0x113/0x200 [ 103.046981][ T6014] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.052204][ T6014] ? rcu_is_watching+0x15/0xb0 [ 103.056996][ T6014] __x64_sys_openat+0x138/0x170 [ 103.061969][ T6014] do_syscall_64+0x14d/0xf80 [ 103.066589][ T6014] ? trace_irq_disable+0x3b/0x150 [ 103.071634][ T6014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.077749][ T6014] ? clear_bhb_loop+0x40/0x90 [ 103.082445][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.088356][ T6014] RIP: 0033:0x7fbf4355c84e [ 103.092806][ T6014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.112436][ T6014] RSP: 002b:00007fbf443a7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.120878][ T6014] RAX: ffffffffffffffda RBX: 00007fbf443a86c0 RCX: 00007fbf4355c84e [ 103.128875][ T6014] RDX: 0000000000040002 RSI: 00007fbf443a7c00 RDI: ffffffffffffff9c [ 103.136864][ T6014] RBP: 00007fbf443a7c00 R08: 0000000000000000 R09: 0000000000000000 [ 103.144854][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 103.152840][ T6014] R13: 00007fbf43816038 R14: 00007fbf43815fa0 R15: 00007ffd47c49298 [ 103.160852][ T6014] [ 103.164483][ T6014] Kernel Offset: disabled [ 103.169098][ T6014] Rebooting in 86400 seconds..