Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. 2026/10/11 21:41:52 parsed 1 programs 2026/10/11 21:41:52 serving rpc on tcp://36677 [ 86.687037][ T5627] cgroup: Unknown subsys name 'net' [ 86.863896][ T5627] cgroup: Unknown subsys name 'cpuset' [ 86.874968][ T5627] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.592696][ T5627] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.809243][ T5641] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.814031][ T5641] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 91.816638][ T5641] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 91.817546][ T5641] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 91.874869][ T990] cfg80211: failed to load regulatory.db [ 91.885007][ T5641] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 92.803271][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.803980][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.804089][ T5654] bridge_slave_0: entered allmulticast mode [ 92.805585][ T5654] bridge_slave_0: entered promiscuous mode [ 92.817413][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.818310][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.818671][ T5654] bridge_slave_1: entered allmulticast mode [ 92.823443][ T5654] bridge_slave_1: entered promiscuous mode [ 92.877148][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.889699][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.919912][ T5654] team0: Port device team_slave_0 added [ 92.922273][ T5654] team0: Port device team_slave_1 added [ 92.952686][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.952702][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.952726][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.954793][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.954809][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.954837][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.062768][ T5654] hsr_slave_0: entered promiscuous mode [ 93.063690][ T5654] hsr_slave_1: entered promiscuous mode [ 93.230042][ T5654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.237440][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.241329][ T5654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.261391][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.262999][ T5654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.265881][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.267008][ T5654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.280003][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.326244][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.326354][ T5654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.326789][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.326876][ T5654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.411167][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.431467][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.432924][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.450165][ T5654] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.470717][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.470796][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.476259][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.476348][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.871980][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.922219][ T5654] veth0_vlan: entered promiscuous mode [ 93.934943][ T5654] veth1_vlan: entered promiscuous mode [ 93.966933][ T5654] veth0_macvtap: entered promiscuous mode [ 93.975808][ T5654] veth1_macvtap: entered promiscuous mode [ 93.995596][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.009944][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.071108][ T167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.071451][ T167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.071948][ T167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.117936][ T167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.219731][ T167] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.298448][ T167] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.351704][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.351727][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.383822][ T167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.422255][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.422279][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.474897][ T167] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.039595][ T4933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.040439][ T4933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.040972][ T4933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.041981][ T4933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.042718][ T4933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.400139][ T167] bridge_slave_1: left allmulticast mode [ 96.400178][ T167] bridge_slave_1: left promiscuous mode [ 96.400815][ T167] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.406539][ T167] bridge_slave_0: left allmulticast mode [ 96.406564][ T167] bridge_slave_0: left promiscuous mode [ 96.407374][ T167] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.591643][ T167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.596265][ T167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.599005][ T167] bond0 (unregistering): Released all slaves [ 96.724523][ T167] hsr_slave_0: left promiscuous mode [ 96.725569][ T167] hsr_slave_1: left promiscuous mode [ 96.726532][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.726563][ T167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.758098][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.758123][ T167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.789068][ T167] veth1_macvtap: left promiscuous mode [ 96.789125][ T167] veth0_macvtap: left promiscuous mode [ 96.789304][ T167] veth1_vlan: left promiscuous mode [ 96.789778][ T167] veth0_vlan: left promiscuous mode [ 97.255896][ T167] team0 (unregistering): Port device team_slave_1 removed [ 97.286674][ T167] team0 (unregistering): Port device team_slave_0 removed [ 97.431744][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 98.562432][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 99.267573][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 2026/10/11 21:42:08 executed programs: 0 [ 99.726122][ T4933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.740642][ T4933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.745156][ T4933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.746645][ T4933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.747344][ T4933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.044459][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 100.521705][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.521839][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.521928][ T5805] bridge_slave_0: entered allmulticast mode [ 100.523373][ T5805] bridge_slave_0: entered promiscuous mode [ 100.529715][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.529980][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.530333][ T5805] bridge_slave_1: entered allmulticast mode [ 100.532958][ T5805] bridge_slave_1: entered promiscuous mode [ 100.607572][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.617243][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.650796][ T5805] team0: Port device team_slave_0 added [ 100.653186][ T5805] team0: Port device team_slave_1 added [ 100.683917][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.683942][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.683963][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.686069][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.686084][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.686113][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.802372][ T5805] hsr_slave_0: entered promiscuous mode [ 100.803170][ T5805] hsr_slave_1: entered promiscuous mode [ 101.299920][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.315044][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.316028][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.336470][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.337562][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.357091][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.365830][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.376248][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.555865][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.585346][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.611975][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.612174][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.635776][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.635874][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.780002][ T52] Bluetooth: hci0: command tx timeout [ 102.250575][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.325151][ T5805] veth0_vlan: entered promiscuous mode [ 102.337408][ T5805] veth1_vlan: entered promiscuous mode [ 102.382384][ T5805] veth0_macvtap: entered promiscuous mode [ 102.395386][ T5805] veth1_macvtap: entered promiscuous mode [ 102.427397][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.446257][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.505623][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.520113][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.520569][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.545771][ T167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.619373][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.619396][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.684479][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.684502][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.021689][ T5896] ================================================================== [ 103.021707][ T5896] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340 [ 103.021739][ T5896] Read of size 8 at addr ffff88802cf06218 by task syz.0.19/5896 [ 103.021757][ T5896] [ 103.021780][ T5896] CPU: 0 UID: 0 PID: 5896 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 103.021804][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.021833][ T5896] Call Trace: [ 103.021846][ T5896] [ 103.021855][ T5896] dump_stack_lvl+0xe8/0x150 [ 103.021888][ T5896] print_address_description+0x55/0x1e0 [ 103.021919][ T5896] ? dvb_device_open+0xc4/0x340 [ 103.021942][ T5896] print_report+0x58/0x70 [ 103.021969][ T5896] kasan_report+0x117/0x150 [ 103.022001][ T5896] ? dvb_device_open+0xc4/0x340 [ 103.022029][ T5896] dvb_device_open+0xc4/0x340 [ 103.022052][ T5896] ? do_raw_spin_unlock+0xf5/0x200 [ 103.022085][ T5896] chrdev_open+0x4d9/0x600 [ 103.022112][ T5896] ? __pfx_chrdev_open+0x10/0x10 [ 103.022138][ T5896] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 103.022168][ T5896] ? __pfx_chrdev_open+0x10/0x10 [ 103.022194][ T5896] do_dentry_open+0x816/0x1380 [ 103.022228][ T5896] vfs_open+0x3b/0x340 [ 103.022255][ T5896] ? path_openat+0x1428/0x1d60 [ 103.022280][ T5896] path_openat+0x1443/0x1d60 [ 103.022315][ T5896] do_file_open+0x23e/0x4a0 [ 103.022342][ T5896] ? __pfx_do_file_open+0x10/0x10 [ 103.022377][ T5896] ? _raw_spin_unlock+0x28/0x50 [ 103.022397][ T5896] ? alloc_fd+0x651/0x6c0 [ 103.022432][ T5896] do_sys_openat2+0x115/0x200 [ 103.022461][ T5896] ? lockdep_hardirqs_on+0x7b/0x110 [ 103.022485][ T5896] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.022523][ T5896] __ia32_compat_sys_openat+0x131/0x160 [ 103.022559][ T5896] do_int80_emulation+0x198/0x500 [ 103.022586][ T5896] ? asm_int80_emulation+0x1a/0x20 [ 103.022607][ T5896] ? clear_bhb_loop+0x70/0xc0 [ 103.022629][ T5896] ? clear_bhb_loop+0x70/0xc0 [ 103.022653][ T5896] asm_int80_emulation+0x1a/0x20 [ 103.022674][ T5896] RIP: 0023:0xf70f762b [ 103.022700][ T5896] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 103.022719][ T5896] RSP: 002b:00000000ffdef7dc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 103.022747][ T5896] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffdef8a0 [ 103.022763][ T5896] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.022777][ T5896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.022789][ T5896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.022802][ T5896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.022832][ T5896] [ 103.022840][ T5896] [ 103.022845][ T5896] Allocated by task 1: [ 103.022855][ T5896] kasan_save_track+0x3e/0x80 [ 103.022881][ T5896] __kasan_kmalloc+0x93/0xb0 [ 103.022905][ T5896] __kmalloc_cache_noprof+0x321/0x600 [ 103.022928][ T5896] dvb_register_device+0x309/0x1dd0 [ 103.022948][ T5896] dvb_register_frontend+0x603/0x900 [ 103.022966][ T5896] vidtv_bridge_probe+0x9d5/0xf60 [ 103.022992][ T5896] platform_probe+0xf9/0x190 [ 103.023019][ T5896] really_probe+0x254/0xae0 [ 103.023048][ T5896] __driver_probe_device+0x1e8/0x360 [ 103.023077][ T5896] driver_probe_device+0x4f/0x240 [ 103.023107][ T5896] __driver_attach+0x339/0x600 [ 103.023136][ T5896] bus_for_each_dev+0x23b/0x2c0 [ 103.023157][ T5896] bus_add_driver+0x345/0x670 [ 103.023179][ T5896] driver_register+0x23a/0x320 [ 103.023198][ T5896] vidtv_bridge_init+0x3d/0x60 [ 103.023219][ T5896] do_one_initcall+0x250/0x870 [ 103.023248][ T5896] do_initcall_level+0x10a/0x1a0 [ 103.023276][ T5896] do_initcalls+0x59/0xa0 [ 103.023302][ T5896] kernel_init_freeable+0x29d/0x3e0 [ 103.023330][ T5896] kernel_init+0x22/0x1d0 [ 103.023357][ T5896] ret_from_fork+0x514/0xb70 [ 103.023375][ T5896] ret_from_fork_asm+0x1a/0x30 [ 103.023393][ T5896] [ 103.023398][ T5896] Freed by task 5893: [ 103.023408][ T5896] kasan_save_track+0x3e/0x80 [ 103.023431][ T5896] kasan_save_free_info+0x40/0x50 [ 103.023449][ T5896] __kasan_slab_free+0x5c/0x80 [ 103.023473][ T5896] kfree+0x1c5/0x650 [ 103.023491][ T5896] dvb_device_open+0x2b8/0x340 [ 103.023512][ T5896] chrdev_open+0x4d9/0x600 [ 103.023536][ T5896] do_dentry_open+0x816/0x1380 [ 103.023562][ T5896] vfs_open+0x3b/0x340 [ 103.023585][ T5896] path_openat+0x1443/0x1d60 [ 103.023605][ T5896] do_file_open+0x23e/0x4a0 [ 103.023624][ T5896] do_sys_openat2+0x115/0x200 [ 103.023650][ T5896] __ia32_compat_sys_openat+0x131/0x160 [ 103.023679][ T5896] do_int80_emulation+0x198/0x500 [ 103.023702][ T5896] asm_int80_emulation+0x1a/0x20 [ 103.023720][ T5896] [ 103.023726][ T5896] The buggy address belongs to the object at ffff88802cf06200 [ 103.023726][ T5896] which belongs to the cache kmalloc-256 of size 256 [ 103.023743][ T5896] The buggy address is located 24 bytes inside of [ 103.023743][ T5896] freed 256-byte region [ffff88802cf06200, ffff88802cf06300) [ 103.023764][ T5896] [ 103.023769][ T5896] The buggy address belongs to the physical page: [ 103.023786][ T5896] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cf06 [ 103.023805][ T5896] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 103.023829][ T5896] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 103.023854][ T5896] page_type: f5(slab) [ 103.023872][ T5896] raw: 00fff00000000040 ffff88801c041b40 dead000000000122 0000000000000000 [ 103.023890][ T5896] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 103.023910][ T5896] head: 00fff00000000040 ffff88801c041b40 dead000000000122 0000000000000000 [ 103.023927][ T5896] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 103.023946][ T5896] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 103.023963][ T5896] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 103.023974][ T5896] page dumped because: kasan: bad access detected [ 103.023989][ T5896] page_owner tracks the page as allocated [ 103.023997][ T5896] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18492762807 [ 103.024029][ T5896] post_alloc_hook+0x1f9/0x250 [ 103.024049][ T5896] get_page_from_freelist+0x2209/0x2280 [ 103.024072][ T5896] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 103.024095][ T5896] allocate_slab+0x7d/0x620 [ 103.024123][ T5896] refill_objects+0x2d5/0x350 [ 103.024152][ T5896] __pcs_replace_empty_main+0x2c8/0x6c0 [ 103.024180][ T5896] __kmalloc_cache_noprof+0x39b/0x600 [ 103.024202][ T5896] bus_add_driver+0x162/0x670 [ 103.024223][ T5896] driver_register+0x23a/0x320 [ 103.024239][ T5896] usb_register_driver+0x1e4/0x390 [ 103.024258][ T5896] do_one_initcall+0x250/0x870 [ 103.024320][ T5896] do_initcall_level+0x10a/0x1a0 [ 103.024348][ T5896] do_initcalls+0x59/0xa0 [ 103.024374][ T5896] kernel_init_freeable+0x29d/0x3e0 [ 103.024402][ T5896] kernel_init+0x22/0x1d0 [ 103.024428][ T5896] ret_from_fork+0x514/0xb70 [ 103.024446][ T5896] page_owner free stack trace missing [ 103.024454][ T5896] [ 103.024458][ T5896] Memory state around the buggy address: [ 103.024469][ T5896] ffff88802cf06100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.024483][ T5896] ffff88802cf06180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.024497][ T5896] >ffff88802cf06200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.024508][ T5896] ^ [ 103.024519][ T5896] ffff88802cf06280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.024533][ T5896] ffff88802cf06300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.024543][ T5896] ================================================================== [ 103.024562][ T5896] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.781628][ T5896] CPU: 0 UID: 0 PID: 5896 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 103.790774][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.800890][ T5896] Call Trace: [ 103.804199][ T5896] [ 103.807191][ T5896] vpanic+0x56d/0xa60 [ 103.811229][ T5896] ? __pfx_vpanic+0x10/0x10 [ 103.815824][ T5896] panic+0xc5/0xd0 [ 103.819595][ T5896] ? __pfx_panic+0x10/0x10 [ 103.824067][ T5896] ? dvb_device_open+0xc4/0x340 [ 103.828953][ T5896] ? rcu_is_watching+0x16/0xb0 [ 103.833765][ T5896] ? dvb_device_open+0xc4/0x340 [ 103.838673][ T5896] check_panic_on_warn+0x89/0xb0 [ 103.843734][ T5896] ? dvb_device_open+0xc4/0x340 [ 103.848630][ T5896] end_report+0x73/0x170 [ 103.852920][ T5896] ? dvb_device_open+0xc4/0x340 [ 103.857807][ T5896] kasan_report+0x128/0x150 [ 103.862365][ T5896] ? dvb_device_open+0xc4/0x340 [ 103.867265][ T5896] dvb_device_open+0xc4/0x340 [ 103.871988][ T5896] ? do_raw_spin_unlock+0xf5/0x200 [ 103.877155][ T5896] chrdev_open+0x4d9/0x600 [ 103.881634][ T5896] ? __pfx_chrdev_open+0x10/0x10 [ 103.886647][ T5896] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 103.893018][ T5896] ? __pfx_chrdev_open+0x10/0x10 [ 103.897996][ T5896] do_dentry_open+0x816/0x1380 [ 103.902815][ T5896] vfs_open+0x3b/0x340 [ 103.906929][ T5896] ? path_openat+0x1428/0x1d60 [ 103.911730][ T5896] path_openat+0x1443/0x1d60 [ 103.916379][ T5896] do_file_open+0x23e/0x4a0 [ 103.920929][ T5896] ? __pfx_do_file_open+0x10/0x10 [ 103.926010][ T5896] ? _raw_spin_unlock+0x28/0x50 [ 103.930894][ T5896] ? alloc_fd+0x651/0x6c0 [ 103.935276][ T5896] do_sys_openat2+0x115/0x200 [ 103.939996][ T5896] ? lockdep_hardirqs_on+0x7b/0x110 [ 103.945233][ T5896] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.950491][ T5896] __ia32_compat_sys_openat+0x131/0x160 [ 103.956179][ T5896] do_int80_emulation+0x198/0x500 [ 103.961259][ T5896] ? asm_int80_emulation+0x1a/0x20 [ 103.966397][ T5896] ? clear_bhb_loop+0x70/0xc0 [ 103.971113][ T5896] ? clear_bhb_loop+0x70/0xc0 [ 103.975837][ T5896] asm_int80_emulation+0x1a/0x20 [ 103.980813][ T5896] RIP: 0023:0xf70f762b [ 103.984910][ T5896] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 104.004544][ T5896] RSP: 002b:00000000ffdef7dc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 104.013007][ T5896] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffdef8a0 [ 104.021012][ T5896] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.029021][ T5896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.037026][ T5896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 104.045029][ T5896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.053040][ T5896] [ 104.056701][ T5896] Kernel Offset: disabled [ 104.061040][ T5896] Rebooting in 86400 seconds..