Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts.
2025/12/19 01:14:02 parsed 1 programs
[ 68.940038][ T4189] cgroup: Unknown subsys name 'net'
[ 69.073090][ T4189] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 70.612774][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 71.510221][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.517213][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.865144][ T4222] chnl_net:caif_netlink_parms(): no params data found
[ 72.933148][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.940992][ T4222] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.949521][ T4222] device bridge_slave_0 entered promiscuous mode
[ 72.960639][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.968470][ T4222] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.977130][ T4222] device bridge_slave_1 entered promiscuous mode
[ 73.007496][ T4222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 73.019545][ T4222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 73.052662][ T4222] team0: Port device team_slave_0 added
[ 73.061173][ T4222] team0: Port device team_slave_1 added
[ 73.089304][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 73.096291][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.124714][ T4222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 73.140107][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 73.147465][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.180649][ T4222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 73.225191][ T4222] device hsr_slave_0 entered promiscuous mode
[ 73.233268][ T4222] device hsr_slave_1 entered promiscuous mode
[ 73.385674][ T4222] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 73.400295][ T4222] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 73.411814][ T4222] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 73.424294][ T4222] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 73.457560][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.465042][ T4222] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.473446][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.480664][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.546032][ T4222] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.564341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 73.579754][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.589826][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.605885][ T4222] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.616783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 73.626035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 73.636539][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.644045][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.659037][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 73.668710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 73.678271][ T155] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.685548][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.711537][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 73.721004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 73.731765][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 73.743584][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 73.754288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 73.763667][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 73.773385][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 73.786367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 73.795205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 73.808261][ T4222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 73.820770][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 73.829457][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 73.839122][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 73.990396][ T4222] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 73.998574][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 74.006318][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 74.025335][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 74.034471][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 74.059309][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 74.069490][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 74.080644][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 74.088949][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 74.104907][ T4222] device veth0_vlan entered promiscuous mode
[ 74.130901][ T4222] device veth1_vlan entered promiscuous mode
[ 74.178036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 74.186148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 74.194731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 74.204331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 74.216060][ T4222] device veth0_macvtap entered promiscuous mode
[ 74.225518][ T4222] device veth1_macvtap entered promiscuous mode
[ 74.242425][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 74.251325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 74.260095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 74.268748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 74.278960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 74.302229][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 74.310379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 74.320397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 74.332245][ T4222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.342347][ T4222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.352164][ T4222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.361444][ T4222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.465970][ T4222] syz-executor (4222) used greatest stack depth: 21120 bytes left
[ 75.512836][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.537294][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.552145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 75.562199][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.572195][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.581533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2025/12/19 01:14:11 executed programs: 0
[ 76.737817][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.792780][ T4289] chnl_net:caif_netlink_parms(): no params data found
[ 76.832791][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.841050][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.849897][ T4289] device bridge_slave_0 entered promiscuous mode
[ 76.858286][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.865500][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.874324][ T4289] device bridge_slave_1 entered promiscuous mode
[ 76.894393][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.905623][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.928196][ T4289] team0: Port device team_slave_0 added
[ 76.936101][ T4289] team0: Port device team_slave_1 added
[ 76.954259][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.961834][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.988575][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 77.001314][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 77.008664][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.036031][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 77.066278][ T4289] device hsr_slave_0 entered promiscuous mode
[ 77.073524][ T4289] device hsr_slave_1 entered promiscuous mode
[ 77.081396][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 77.090103][ T4289] Cannot create hsr debugfs directory
[ 78.707840][ T4243] Bluetooth: hci0: command 0x0409 tx timeout
[ 79.013579][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.063951][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.133747][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.897829][ T4289] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 79.908497][ T4289] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 79.917408][ T4289] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 79.926416][ T4289] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 80.004481][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0
[ 80.019882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 80.029207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 80.039646][ T4289] 8021q: adding VLAN 0 to HW filter on device team0
[ 80.069576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 80.079164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 80.088723][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.097195][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 80.106261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 80.119665][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 80.128497][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 80.139471][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.146543][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.190331][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 80.201182][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 80.211541][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 80.221554][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 80.231565][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 80.241167][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 80.250793][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 80.263476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 80.273072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 80.305643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 80.315231][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 80.327714][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 80.417117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 80.425306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 80.439553][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 80.475829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 80.488094][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 80.531721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 80.540716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 80.549653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 80.562643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 80.595824][ T4289] device veth0_vlan entered promiscuous mode
[ 80.608609][ T4289] device veth1_vlan entered promiscuous mode
[ 80.629774][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 80.639250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 80.648519][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 80.658176][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 80.672886][ T4289] device veth0_macvtap entered promiscuous mode
[ 80.700919][ T4289] device veth1_macvtap entered promiscuous mode
[ 80.715823][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 80.728779][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 80.741358][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 80.751833][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 80.762979][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 80.775307][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.783983][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 80.792478][ T4243] Bluetooth: hci0: command 0x041b tx timeout
[ 80.795226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 80.807485][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 80.816366][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 80.826319][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 80.835739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 80.847432][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.856727][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.866436][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.879317][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.968030][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.976129][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.996948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 81.019344][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.031464][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.047393][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 81.113022][ T144] device hsr_slave_0 left promiscuous mode
[ 81.120352][ T144] device hsr_slave_1 left promiscuous mode
[ 81.132743][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 81.142184][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 81.152567][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 81.161045][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 81.169550][ T144] device bridge_slave_1 left promiscuous mode
[ 81.176710][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.190759][ T144] device bridge_slave_0 left promiscuous mode
[ 81.204597][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.224165][ T144] device veth1_macvtap left promiscuous mode
[ 81.232276][ T144] device veth0_macvtap left promiscuous mode
[ 81.238738][ T144] device veth1_vlan left promiscuous mode
[ 81.245072][ T144] device veth0_vlan left promiscuous mode
[ 81.377135][ T4242] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 81.409014][ T144] team0 (unregistering): Port device team_slave_1 removed
[ 81.425109][ T144] team0 (unregistering): Port device team_slave_0 removed
[ 81.444709][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 81.460034][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 81.516037][ T144] bond0 (unregistering): Released all slaves
[ 81.627016][ T4242] usb 1-1: Using ep0 maxpacket: 16
[ 81.749698][ T23] cfg80211: failed to load regulatory.db
[ 81.958405][ T4242] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 81.976857][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 81.995451][ T4242] usb 1-1: Product: syz
[ 81.999977][ T4242] usb 1-1: Manufacturer: syz
[ 82.004670][ T4242] usb 1-1: SerialNumber: syz
[ 82.041959][ T4242] usb 1-1: config 0 descriptor??
[ 82.537150][ T4242] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 82.562833][ T4242] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 82.587197][ T4242] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 82.595282][ T4242] usb 1-1: media controller created
[ 82.613150][ T4242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 82.868349][ T4243] Bluetooth: hci0: command 0x040f tx timeout
[ 83.188057][ T4242] zl10353_read_register: readreg error (reg=127, ret==0)
[ 83.188324][ T4352] ==================================================================
[ 83.195749][ T4242] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 83.204141][ T4352] BUG: KASAN: slab-out-of-bounds in dtv5100_i2c_msg+0x1db/0x2d0
[ 83.204171][ T4352] Write of size 83 at addr ffff888025418180 by task syz.0.17/4352
[ 83.204188][ T4352]
[ 83.204194][ T4352] CPU: 1 PID: 4352 Comm: syz.0.17 Not tainted syzkaller #0
[ 83.204213][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 83.204223][ T4352] Call Trace:
[ 83.204231][ T4352]
[ 83.204240][ T4352] dump_stack_lvl+0x168/0x230
[ 83.204265][ T4352] ? show_regs_print_info+0x20/0x20
[ 83.213339][ T4242] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 83.220687][ T4352] ? load_image+0x3b0/0x3b0
[ 83.220722][ T4352] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 83.220744][ T4352] ? __lock_acquire+0x7c60/0x7c60
[ 83.220769][ T4352] print_address_description+0x60/0x2d0
[ 83.220793][ T4352] ? dtv5100_i2c_msg+0x1db/0x2d0
[ 83.220812][ T4352] kasan_report+0xdf/0x130
[ 83.220834][ T4352] ? dtv5100_i2c_msg+0x1db/0x2d0
[ 83.311674][ T4352] ? dtv5100_i2c_msg+0x1db/0x2d0
[ 83.317002][ T4352] kasan_check_range+0x27b/0x290
[ 83.322393][ T4352] memcpy+0x3c/0x60
[ 83.326234][ T4352] dtv5100_i2c_msg+0x1db/0x2d0
[ 83.331497][ T4352] dtv5100_i2c_xfer+0x47c/0x650
[ 83.336778][ T4352] ? dtv5100_tuner_attach+0xf0/0xf0
[ 83.343635][ T4352] __i2c_transfer+0x864/0x2060
[ 83.350067][ T4352] ? rwsem_down_read_slowpath+0x990/0x990
[ 83.357590][ T4352] ? i2c_cmd+0x110/0x110
[ 83.362359][ T4352] ? __might_fault+0xb7/0x110
[ 83.369104][ T4352] i2c_transfer+0x24c/0x390
[ 83.373845][ T4352] ? __i2c_transfer+0x2060/0x2060
[ 83.379178][ T4352] ? __might_fault+0xb3/0x110
[ 83.384035][ T4352] ? _copy_from_user+0x111/0x170
[ 83.388995][ T4352] i2cdev_ioctl_rdwr+0x3da/0x6c0
[ 83.394125][ T4352] i2cdev_ioctl+0x5ba/0x750
[ 83.398801][ T4352] ? i2cdev_write+0x120/0x120
[ 83.403475][ T4352] ? lock_chain_count+0x20/0x20
[ 83.408421][ T4352] ? bpf_lsm_file_ioctl+0x5/0x10
[ 83.414089][ T4352] ? security_file_ioctl+0x7c/0xa0
[ 83.419868][ T4352] ? i2cdev_write+0x120/0x120
[ 83.424749][ T4352] __se_sys_ioctl+0xfa/0x170
[ 83.429565][ T4352] do_syscall_64+0x4c/0xa0
[ 83.434020][ T4352] ? clear_bhb_loop+0x30/0x80
[ 83.440610][ T4352] ? clear_bhb_loop+0x30/0x80
[ 83.446054][ T4352] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.453470][ T4352] RIP: 0033:0x7fd3219d8749
[ 83.458174][ T4352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 83.479115][ T4352] RSP: 002b:00007fff15e02238 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 83.487806][ T4352] RAX: ffffffffffffffda RBX: 00007fd321c2efa0 RCX: 00007fd3219d8749
[ 83.496887][ T4352] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000004
[ 83.505095][ T4352] RBP: 00007fd321a5cf91 R08: 0000000000000000 R09: 0000000000000000
[ 83.513551][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 83.521632][ T4352] R13: 00007fd321c2efa0 R14: 00007fd321c2efa0 R15: 0000000000000003
[ 83.529795][ T4352]
[ 83.532931][ T4352]
[ 83.535428][ T4352] Allocated by task 4242:
[ 83.539771][ T4352] __kasan_kmalloc+0xb5/0xf0
[ 83.544545][ T4352] dvb_usb_device_init+0xc5e/0x23f0
[ 83.550005][ T4352] usb_probe_interface+0x5a0/0xaf0
[ 83.555411][ T4352] really_probe+0x284/0xc80
[ 83.560046][ T4352] __driver_probe_device+0x18c/0x330
[ 83.565607][ T4352] driver_probe_device+0x4f/0x420
[ 83.571107][ T4352] __device_attach_driver+0x2b0/0x500
[ 83.576871][ T4352] bus_for_each_drv+0x175/0x200
[ 83.582152][ T4352] __device_attach+0x29b/0x460
[ 83.587021][ T4352] bus_probe_device+0xbc/0x1e0
[ 83.592606][ T4352] device_add+0xa00/0xfb0
[ 83.597657][ T4352] usb_set_configuration+0x1991/0x1fd0
[ 83.603658][ T4352] usb_generic_driver_probe+0x89/0x150
[ 83.609925][ T4352] usb_probe_device+0x139/0x270
[ 83.615084][ T4352] really_probe+0x284/0xc80
[ 83.619691][ T4352] __driver_probe_device+0x18c/0x330
[ 83.625106][ T4352] driver_probe_device+0x4f/0x420
[ 83.630425][ T4352] __device_attach_driver+0x2b0/0x500
[ 83.636167][ T4352] bus_for_each_drv+0x175/0x200
[ 83.641109][ T4352] __device_attach+0x29b/0x460
[ 83.645951][ T4352] bus_probe_device+0xbc/0x1e0
[ 83.650702][ T4352] device_add+0xa00/0xfb0
[ 83.655032][ T4352] usb_new_device+0xd53/0x1640
[ 83.659884][ T4352] hub_event+0x2dd9/0x5560
[ 83.664484][ T4352] process_one_work+0x863/0x1000
[ 83.669507][ T4352] worker_thread+0xaa8/0x12a0
[ 83.674579][ T4352] kthread+0x436/0x520
[ 83.678901][ T4352] ret_from_fork+0x1f/0x30
[ 83.684183][ T4352]
[ 83.686771][ T4352] The buggy address belongs to the object at ffff888025418180
[ 83.686771][ T4352] which belongs to the cache kmalloc-96 of size 96
[ 83.701421][ T4352] The buggy address is located 0 bytes inside of
[ 83.701421][ T4352] 96-byte region [ffff888025418180, ffff8880254181e0)
[ 83.715171][ T4352] The buggy address belongs to the page:
[ 83.721059][ T4352] page:ffffea0000950600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25418
[ 83.732271][ T4352] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 83.740231][ T4352] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016841780
[ 83.749376][ T4352] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
[ 83.759052][ T4352] page dumped because: kasan: bad access detected
[ 83.766438][ T4352] page_owner tracks the page as allocated
[ 83.772514][ T4352] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4245, ts 82367015242, free_ts 82158440642
[ 83.790964][ T4352] get_page_from_freelist+0x1b77/0x1c60
[ 83.796814][ T4352] __alloc_pages+0x1e1/0x470
[ 83.801434][ T4352] new_slab+0xc0/0x4b0
[ 83.806004][ T4352] ___slab_alloc+0x81e/0xdf0
[ 83.810629][ T4352] kmem_cache_alloc_trace+0x1a5/0x2a0
[ 83.816216][ T4352] dst_cow_metrics_generic+0x52/0x1b0
[ 83.821916][ T4352] icmp6_dst_alloc+0x2d8/0x4a0
[ 83.827154][ T4352] mld_sendpack+0x580/0xc30
[ 83.831983][ T4352] mld_dad_work+0x41/0x270
[ 83.838043][ T4352] process_one_work+0x863/0x1000
[ 83.844719][ T4352] worker_thread+0xaa8/0x12a0
[ 83.853517][ T4352] kthread+0x436/0x520
[ 83.859049][ T4352] ret_from_fork+0x1f/0x30
[ 83.864760][ T4352] page last free stack trace:
[ 83.870850][ T4352] free_unref_page_prepare+0x637/0x6c0
[ 83.876888][ T4352] free_unref_page+0x94/0x280
[ 83.884249][ T4352] __unfreeze_partials+0x1a5/0x200
[ 83.890880][ T4352] put_cpu_partial+0x12d/0x190
[ 83.896845][ T4352] qlist_free_all+0x35/0x90
[ 83.901736][ T4352] kasan_quarantine_reduce+0x150/0x160
[ 83.907196][ T4352] __kasan_slab_alloc+0x2f/0xd0
[ 83.912252][ T4352] slab_post_alloc_hook+0x4c/0x380
[ 83.917930][ T4352] kmem_cache_alloc_node+0x12d/0x2d0
[ 83.923721][ T4352] __alloc_skb+0xf4/0x750
[ 83.928679][ T4352] mld_newpack+0x12a/0xb90
[ 83.933303][ T4352] add_grhead+0x5a/0x240
[ 83.937640][ T4352] add_grec+0x1341/0x15d0
[ 83.941979][ T4352] mld_send_initial_cr+0xed/0x240
[ 83.947005][ T4352] ipv6_mc_dad_complete+0x84/0x210
[ 83.952211][ T4352] addrconf_dad_completed+0x6c7/0xca0
[ 83.957679][ T4352]
[ 83.960095][ T4352] Memory state around the buggy address:
[ 83.966639][ T4352] ffff888025418080: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 83.975263][ T4352] ffff888025418100: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 83.983421][ T4352] >ffff888025418180: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 83.991699][ T4352] ^
[ 83.998472][ T4352] ffff888025418200: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 84.006706][ T4352] ffff888025418280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 84.015193][ T4352] ==================================================================
[ 84.023745][ T4352] Disabling lock debugging due to kernel taint
[ 84.033046][ T4352] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 84.040387][ T4352] CPU: 1 PID: 4352 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 84.049534][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 84.060493][ T4352] Call Trace:
[ 84.063864][ T4352]
[ 84.066831][ T4352] dump_stack_lvl+0x168/0x230
[ 84.071704][ T4352] ? show_regs_print_info+0x20/0x20
[ 84.077290][ T4352] ? load_image+0x3b0/0x3b0
[ 84.082828][ T4352] panic+0x2c9/0x7f0
[ 84.087004][ T4352] ? bpf_jit_dump+0xd0/0xd0
[ 84.092019][ T4352] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 84.098092][ T4352] ? _raw_spin_unlock+0x40/0x40
[ 84.104139][ T4352] ? dtv5100_i2c_msg+0x1db/0x2d0
[ 84.109716][ T4352] check_panic_on_warn+0x80/0xa0
[ 84.114666][ T4352] ? dtv5100_i2c_msg+0x1db/0x2d0
[ 84.120433][ T4352] end_report+0x6d/0xf0
[ 84.124783][ T4352] kasan_report+0x102/0x130
[ 84.129593][ T4352] ? dtv5100_i2c_msg+0x1db/0x2d0
[ 84.134988][ T4352] ? dtv5100_i2c_msg+0x1db/0x2d0
[ 84.140386][ T4352] kasan_check_range+0x27b/0x290
[ 84.146103][ T4352] memcpy+0x3c/0x60
[ 84.150835][ T4352] dtv5100_i2c_msg+0x1db/0x2d0
[ 84.156141][ T4352] dtv5100_i2c_xfer+0x47c/0x650
[ 84.161303][ T4352] ? dtv5100_tuner_attach+0xf0/0xf0
[ 84.166899][ T4352] __i2c_transfer+0x864/0x2060
[ 84.171882][ T4352] ? rwsem_down_read_slowpath+0x990/0x990
[ 84.177686][ T4352] ? i2c_cmd+0x110/0x110
[ 84.181944][ T4352] ? __might_fault+0xb7/0x110
[ 84.186723][ T4352] i2c_transfer+0x24c/0x390
[ 84.191266][ T4352] ? __i2c_transfer+0x2060/0x2060
[ 84.196290][ T4352] ? __might_fault+0xb3/0x110
[ 84.201069][ T4352] ? _copy_from_user+0x111/0x170
[ 84.206047][ T4352] i2cdev_ioctl_rdwr+0x3da/0x6c0
[ 84.211148][ T4352] i2cdev_ioctl+0x5ba/0x750
[ 84.215747][ T4352] ? i2cdev_write+0x120/0x120
[ 84.220558][ T4352] ? lock_chain_count+0x20/0x20
[ 84.225782][ T4352] ? bpf_lsm_file_ioctl+0x5/0x10
[ 84.231063][ T4352] ? security_file_ioctl+0x7c/0xa0
[ 84.236438][ T4352] ? i2cdev_write+0x120/0x120
[ 84.241184][ T4352] __se_sys_ioctl+0xfa/0x170
[ 84.246161][ T4352] do_syscall_64+0x4c/0xa0
[ 84.251029][ T4352] ? clear_bhb_loop+0x30/0x80
[ 84.256262][ T4352] ? clear_bhb_loop+0x30/0x80
[ 84.261810][ T4352] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.267879][ T4352] RIP: 0033:0x7fd3219d8749
[ 84.272455][ T4352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 84.293233][ T4352] RSP: 002b:00007fff15e02238 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 84.302101][ T4352] RAX: ffffffffffffffda RBX: 00007fd321c2efa0 RCX: 00007fd3219d8749
[ 84.310778][ T4352] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000004
[ 84.319011][ T4352] RBP: 00007fd321a5cf91 R08: 0000000000000000 R09: 0000000000000000
[ 84.327293][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 84.335536][ T4352] R13: 00007fd321c2efa0 R14: 00007fd321c2efa0 R15: 0000000000000003
[ 84.343758][ T4352]
[ 84.347192][ T4352] Kernel Offset: disabled
[ 84.351794][ T4352] Rebooting in 86400 seconds..