Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts.
2026/08/15 11:27:43 parsed 1 programs
2026/08/15 11:27:43 serving rpc on tcp://38535
[ 64.153893][ T4198] cgroup: Unknown subsys name 'net'
[ 64.262601][ T4198] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 65.540710][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 67.123973][ T4217] chnl_net:caif_netlink_parms(): no params data found
[ 67.172264][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.180034][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state
[ 67.188093][ T4217] device bridge_slave_0 entered promiscuous mode
[ 67.197098][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.205337][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state
[ 67.213167][ T4217] device bridge_slave_1 entered promiscuous mode
[ 67.233633][ T4217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 67.244508][ T4217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 67.264017][ T4217] team0: Port device team_slave_0 added
[ 67.273529][ T4217] team0: Port device team_slave_1 added
[ 67.288563][ T4217] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 67.295528][ T4217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 67.322129][ T4217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 67.334696][ T4217] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 67.341832][ T4217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 67.367933][ T4217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 67.399307][ T4217] device hsr_slave_0 entered promiscuous mode
[ 67.406386][ T4217] device hsr_slave_1 entered promiscuous mode
[ 67.526870][ T4217] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 67.539180][ T4217] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 67.549239][ T4217] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 67.559660][ T4217] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 67.587312][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.594509][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.602538][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.609707][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.670057][ T4217] 8021q: adding VLAN 0 to HW filter on device bond0
[ 67.684451][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 67.696638][ T567] bridge0: port 1(bridge_slave_0) entered disabled state
[ 67.706156][ T567] bridge0: port 2(bridge_slave_1) entered disabled state
[ 67.715811][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 67.734085][ T4217] 8021q: adding VLAN 0 to HW filter on device team0
[ 67.747047][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 67.757163][ T567] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.764386][ T567] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.789241][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 67.798123][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.805559][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.816408][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 67.825702][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 67.846358][ T4217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 67.858746][ T4217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 67.872738][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 67.881515][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 67.894545][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 67.903654][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 68.035116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 68.043400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 68.058350][ T4217] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 68.081294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 68.104472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 68.113875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 68.125061][ T4217] device veth0_vlan entered promiscuous mode
[ 68.133331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 68.141963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 68.154306][ T4217] device veth1_vlan entered promiscuous mode
[ 68.177529][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 68.186671][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 68.205847][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 68.216137][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 68.231581][ T4217] device veth0_macvtap entered promiscuous mode
[ 68.244208][ T4217] device veth1_macvtap entered promiscuous mode
[ 68.263764][ T4217] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 68.272399][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 68.284248][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 68.292722][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 68.302966][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 68.314979][ T4217] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 68.325287][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 68.334093][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 68.346266][ T4217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.357061][ T4217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.366115][ T4217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.375094][ T4217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.499251][ T4217] syz-executor (4217) used greatest stack depth: 20672 bytes left
[ 68.675265][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.320196][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.326699][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.335096][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.181936][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.233742][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.806036][ T567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.821092][ T567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.839188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 74.861885][ T567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.870284][ T567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.879698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 75.244339][ T9] device hsr_slave_0 left promiscuous mode
[ 75.254845][ T9] device hsr_slave_1 left promiscuous mode
[ 75.275177][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 75.297488][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 75.308442][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 75.315863][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 75.326956][ T9] device bridge_slave_1 left promiscuous mode
[ 75.338442][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.355888][ T9] device bridge_slave_0 left promiscuous mode
[ 75.363169][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.385604][ T9] device veth1_macvtap left promiscuous mode
[ 75.392274][ T9] device veth0_macvtap left promiscuous mode
[ 75.399087][ T9] device veth1_vlan left promiscuous mode
2026/08/15 11:27:56 executed programs: 0
[ 75.405869][ T9] device veth0_vlan left promiscuous mode
[ 75.635625][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 75.650449][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 75.664311][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 75.677007][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 75.724565][ T9] bond0 (unregistering): Released all slaves
[ 75.893169][ T4335] chnl_net:caif_netlink_parms(): no params data found
[ 75.956977][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.964285][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.974636][ T4335] device bridge_slave_0 entered promiscuous mode
[ 75.983243][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.992705][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.001487][ T4335] device bridge_slave_1 entered promiscuous mode
[ 76.028022][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.049733][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.079551][ T4335] team0: Port device team_slave_0 added
[ 76.087639][ T4335] team0: Port device team_slave_1 added
[ 76.110273][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.117854][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.146068][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.179702][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.186669][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.224995][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.281052][ T4335] device hsr_slave_0 entered promiscuous mode
[ 76.301804][ T4335] device hsr_slave_1 entered promiscuous mode
[ 76.940843][ T4335] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 76.961378][ T4335] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 76.981336][ T4335] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.001518][ T4335] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.133177][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.163830][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 77.179622][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 77.202469][ T4335] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.220457][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 77.239454][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 77.259700][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.266827][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.307300][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 77.316690][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 77.330619][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 77.340195][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.347304][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.356738][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 77.366563][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 77.377537][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 77.390446][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 77.399759][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 77.410630][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 77.426491][ T4335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 77.439299][ T4335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 77.453327][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 77.463226][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 77.473881][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 77.488138][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 77.499190][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 77.507918][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 77.548014][ T21] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.673835][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 77.683386][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 77.700174][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.740011][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 77.755908][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 77.783914][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 77.794676][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 77.812132][ T4335] device veth0_vlan entered promiscuous mode
[ 77.825955][ T4335] device veth1_vlan entered promiscuous mode
[ 77.834755][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 77.843178][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 77.853209][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 77.884131][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 77.907672][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 77.936616][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 77.948608][ T4335] device veth0_macvtap entered promiscuous mode
[ 77.960737][ T4335] device veth1_macvtap entered promiscuous mode
[ 77.978070][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.985461][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 77.996678][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 78.005229][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 78.017391][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 78.029162][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 78.040527][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 78.049862][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 78.061280][ T4335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.071583][ T4335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.081973][ T4335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.091087][ T4335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.214434][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.224231][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.236874][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 78.278516][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.286830][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.302052][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 78.618902][ T4468] ==================================================================
[ 78.629332][ T4468] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360
[ 78.636602][ T4468] Read of size 8 at addr ffff88814b85b818 by task syz.0.19/4468
[ 78.644246][ T4468]
[ 78.646589][ T4468] CPU: 0 PID: 4468 Comm: syz.0.19 Not tainted syzkaller #0
[ 78.653792][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 78.663864][ T4468] Call Trace:
[ 78.667189][ T4468]
[ 78.670133][ T4468] dump_stack_lvl+0x188/0x250
[ 78.674834][ T4468] ? show_regs_print_info+0x20/0x20
[ 78.680055][ T4468] ? _printk+0xda/0x130
[ 78.684232][ T4468] ? dvb_device_open+0xc5/0x360
[ 78.689109][ T4468] ? load_image+0x410/0x410
[ 78.693636][ T4468] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 78.699133][ T4468] print_address_description+0x60/0x2d0
[ 78.704699][ T4468] ? dvb_device_open+0xc5/0x360
[ 78.709566][ T4468] kasan_report+0xdf/0x130
[ 78.713999][ T4468] ? dvb_device_open+0xc5/0x360
[ 78.718871][ T4468] dvb_device_open+0xc5/0x360
[ 78.723567][ T4468] chrdev_open+0x585/0x5f0
[ 78.728000][ T4468] ? cd_forget+0x160/0x160
[ 78.732440][ T4468] ? fsnotify_perm+0x3a7/0x560
[ 78.737220][ T4468] ? cd_forget+0x160/0x160
[ 78.741652][ T4468] do_dentry_open+0x7f7/0xf90
[ 78.746354][ T4468] ? vfs_open+0x2b/0x80
[ 78.750611][ T4468] path_openat+0x2718/0x2fb0
[ 78.755232][ T4468] ? __kasan_slab_alloc+0xa9/0xc0
[ 78.760295][ T4468] ? do_filp_open+0x400/0x400
[ 78.765003][ T4468] do_filp_open+0x1df/0x400
[ 78.769537][ T4468] ? vfs_tmpfile+0x300/0x300
[ 78.774313][ T4468] ? _raw_spin_unlock+0x24/0x40
[ 78.779183][ T4468] ? alloc_fd+0x59e/0x650
[ 78.783542][ T4468] do_sys_openat2+0x14b/0x500
[ 78.788229][ T4468] ? __lock_acquire+0x7b50/0x7b50
[ 78.793269][ T4468] ? do_sys_open+0xe0/0xe0
[ 78.797699][ T4468] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 78.803712][ T4468] ? lock_chain_count+0x20/0x20
[ 78.808593][ T4468] __x64_sys_openat+0x135/0x160
[ 78.813468][ T4468] do_syscall_64+0x4c/0xa0
[ 78.817906][ T4468] ? clear_bhb_loop+0x30/0x80
[ 78.822597][ T4468] ? clear_bhb_loop+0x30/0x80
[ 78.827302][ T4468] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.833660][ T4468] RIP: 0033:0x7fb4b925790e
[ 78.838217][ T4468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 78.857833][ T4468] RSP: 002b:00007ffd22c56b18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 78.866347][ T4468] RAX: ffffffffffffffda RBX: 0000555571a94500 RCX: 00007fb4b925790e
[ 78.874335][ T4468] RDX: 0000000000040002 RSI: 00007ffd22c56bf0 RDI: ffffffffffffff9c
[ 78.882319][ T4468] RBP: 00007ffd22c56bf0 R08: 0000000000000000 R09: 0000000000000000
[ 78.890305][ T4468] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 78.898960][ T4468] R13: 00007fb4b951efac R14: 00007fb4b951efa0 R15: 00007fb4b951efa0
[ 78.907145][ T4468]
[ 78.910259][ T4468]
[ 78.912585][ T4468] Allocated by task 1:
[ 78.916654][ T4468] __kasan_kmalloc+0xaf/0xe0
[ 78.921273][ T4468] dvb_register_device+0x300/0x1dc0
[ 78.926480][ T4468] dvb_register_frontend+0x629/0x900
[ 78.931775][ T4468] vidtv_bridge_probe+0x9c1/0xf30
[ 78.936819][ T4468] platform_probe+0x137/0x1c0
[ 78.941511][ T4468] really_probe+0x276/0xc70
[ 78.946033][ T4468] __driver_probe_device+0x1f5/0x390
[ 78.951336][ T4468] driver_probe_device+0x4f/0x420
[ 78.956462][ T4468] __driver_attach+0x45d/0x660
[ 78.961239][ T4468] bus_for_each_dev+0x182/0x1f0
[ 78.966103][ T4468] bus_add_driver+0x324/0x5d0
[ 78.970798][ T4468] driver_register+0x32d/0x430
[ 78.975578][ T4468] vidtv_bridge_init+0x39/0x70
[ 78.980365][ T4468] do_one_initcall+0x272/0x730
[ 78.985144][ T4468] do_initcall_level+0x13d/0x1f0
[ 78.990105][ T4468] do_initcalls+0x4b/0x90
[ 78.994449][ T4468] kernel_init_freeable+0x3d5/0x560
[ 78.999661][ T4468] kernel_init+0x19/0x1b0
[ 79.004032][ T4468] ret_from_fork+0x1f/0x30
[ 79.008459][ T4468]
[ 79.010787][ T4468] Freed by task 4465:
[ 79.015067][ T4468] kasan_set_track+0x4b/0x70
[ 79.019695][ T4468] kasan_set_free_info+0x1f/0x40
[ 79.024646][ T4468] ____kasan_slab_free+0xd5/0x110
[ 79.029688][ T4468] slab_free_freelist_hook+0xec/0x170
[ 79.035077][ T4468] kfree+0xef/0x2a0
[ 79.038904][ T4468] dvb_device_open+0x2d2/0x360
[ 79.043769][ T4468] chrdev_open+0x585/0x5f0
[ 79.048201][ T4468] do_dentry_open+0x7f7/0xf90
[ 79.052905][ T4468] path_openat+0x2718/0x2fb0
[ 79.057780][ T4468] do_filp_open+0x1df/0x400
[ 79.062299][ T4468] do_sys_openat2+0x14b/0x500
[ 79.066990][ T4468] __x64_sys_openat+0x135/0x160
[ 79.071861][ T4468] do_syscall_64+0x4c/0xa0
[ 79.076288][ T4468] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 79.082196][ T4468]
[ 79.084667][ T4468] The buggy address belongs to the object at ffff88814b85b800
[ 79.084667][ T4468] which belongs to the cache kmalloc-256 of size 256
[ 79.098732][ T4468] The buggy address is located 24 bytes inside of
[ 79.098732][ T4468] 256-byte region [ffff88814b85b800, ffff88814b85b900)
[ 79.112108][ T4468] The buggy address belongs to the page:
[ 79.117841][ T4468] page:ffffea00052e1680 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814b85b400 pfn:0x14b85a
[ 79.129573][ T4468] head:ffffea00052e1680 order:1 compound_mapcount:0
[ 79.136209][ T4468] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff)
[ 79.144313][ T4468] raw: 057ff00000010200 ffffea00050ffa08 ffff888140000708 ffff888016c41b40
[ 79.153090][ T4468] raw: ffff88814b85b400 000000000010000f 00000001ffffffff 0000000000000000
[ 79.161683][ T4468] page dumped because: kasan: bad access detected
[ 79.168120][ T4468] page_owner tracks the page as allocated
[ 79.173959][ T4468] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 18433407668, free_ts 0
[ 79.191944][ T4468] get_page_from_freelist+0x24f6/0x2670
[ 79.197482][ T4468] __alloc_pages+0x1ee/0x480
[ 79.202066][ T4468] alloc_page_interleave+0x24/0x1e0
[ 79.207256][ T4468] new_slab+0xc0/0x4b0
[ 79.211341][ T4468] ___slab_alloc+0x807/0xdd0
[ 79.215935][ T4468] __kmalloc_node+0x142/0x3a0
[ 79.220745][ T4468] kvmalloc_node+0x84/0x130
[ 79.225255][ T4468] v4l2_ctrl_new+0x70f/0x1310
[ 79.229933][ T4468] v4l2_ctrl_new_std+0x247/0x300
[ 79.234863][ T4468] handler_new_ref+0x14f/0x8d0
[ 79.239629][ T4468] v4l2_ctrl_add_handler+0x197/0x280
[ 79.244903][ T4468] vivid_create_controls+0x2515/0x3380
[ 79.250345][ T4468] vivid_probe+0x39ff/0x6240
[ 79.254918][ T4468] platform_probe+0x137/0x1c0
[ 79.259583][ T4468] really_probe+0x276/0xc70
[ 79.264067][ T4468] __driver_probe_device+0x1f5/0x390
[ 79.269345][ T4468] page_owner free stack trace missing
[ 79.274694][ T4468]
[ 79.277008][ T4468] Memory state around the buggy address:
[ 79.282618][ T4468] ffff88814b85b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.291007][ T4468] ffff88814b85b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.299171][ T4468] >ffff88814b85b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.307315][ T4468] ^
[ 79.312283][ T4468] ffff88814b85b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.320351][ T4468] ffff88814b85b900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.328398][ T4468] ==================================================================
[ 79.336630][ T4468] Disabling lock debugging due to kernel taint
[ 79.351150][ T4468] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 79.358362][ T4468] CPU: 1 PID: 4468 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 79.367084][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 79.377127][ T4468] Call Trace:
[ 79.380399][ T4468]
[ 79.383325][ T4468] dump_stack_lvl+0x188/0x250
[ 79.388005][ T4468] ? show_regs_print_info+0x20/0x20
[ 79.393209][ T4468] ? load_image+0x410/0x410
[ 79.397835][ T4468] panic+0x2f8/0x850
[ 79.401751][ T4468] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 79.407890][ T4468] ? bpf_jit_dump+0xd0/0xd0
[ 79.412385][ T4468] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 79.418380][ T4468] ? _raw_spin_unlock+0x40/0x40
[ 79.423222][ T4468] ? dvb_device_open+0xc5/0x360
[ 79.428177][ T4468] check_panic_on_warn+0x80/0xa0
[ 79.433113][ T4468] ? dvb_device_open+0xc5/0x360
[ 79.437955][ T4468] end_report+0x6d/0xf0
[ 79.442373][ T4468] kasan_report+0x102/0x130
[ 79.446877][ T4468] ? dvb_device_open+0xc5/0x360
[ 79.451734][ T4468] dvb_device_open+0xc5/0x360
[ 79.456413][ T4468] chrdev_open+0x585/0x5f0
[ 79.460909][ T4468] ? cd_forget+0x160/0x160
[ 79.465329][ T4468] ? fsnotify_perm+0x3a7/0x560
[ 79.470086][ T4468] ? cd_forget+0x160/0x160
[ 79.474492][ T4468] do_dentry_open+0x7f7/0xf90
[ 79.479170][ T4468] ? vfs_open+0x2b/0x80
[ 79.483311][ T4468] path_openat+0x2718/0x2fb0
[ 79.488001][ T4468] ? __kasan_slab_alloc+0xa9/0xc0
[ 79.493144][ T4468] ? do_filp_open+0x400/0x400
[ 79.497824][ T4468] do_filp_open+0x1df/0x400
[ 79.502330][ T4468] ? vfs_tmpfile+0x300/0x300
[ 79.506951][ T4468] ? _raw_spin_unlock+0x24/0x40
[ 79.511804][ T4468] ? alloc_fd+0x59e/0x650
[ 79.516128][ T4468] do_sys_openat2+0x14b/0x500
[ 79.520789][ T4468] ? __lock_acquire+0x7b50/0x7b50
[ 79.525825][ T4468] ? do_sys_open+0xe0/0xe0
[ 79.530242][ T4468] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 79.536297][ T4468] ? lock_chain_count+0x20/0x20
[ 79.541151][ T4468] __x64_sys_openat+0x135/0x160
[ 79.545987][ T4468] do_syscall_64+0x4c/0xa0
[ 79.550470][ T4468] ? clear_bhb_loop+0x30/0x80
[ 79.555262][ T4468] ? clear_bhb_loop+0x30/0x80
[ 79.559957][ T4468] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 79.566196][ T4468] RIP: 0033:0x7fb4b925790e
[ 79.570625][ T4468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 79.590323][ T4468] RSP: 002b:00007ffd22c56b18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 79.598811][ T4468] RAX: ffffffffffffffda RBX: 0000555571a94500 RCX: 00007fb4b925790e
[ 79.606959][ T4468] RDX: 0000000000040002 RSI: 00007ffd22c56bf0 RDI: ffffffffffffff9c
[ 79.615188][ T4468] RBP: 00007ffd22c56bf0 R08: 0000000000000000 R09: 0000000000000000
[ 79.623157][ T4468] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 79.631123][ T4468] R13: 00007fb4b951efac R14: 00007fb4b951efa0 R15: 00007fb4b951efa0
[ 79.639290][ T4468]
[ 79.642390][ T4468] Kernel Offset: disabled
[ 79.646794][ T4468] Rebooting in 86400 seconds..