Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. 2026/04/09 19:14:28 parsed 1 programs [ 92.918650][ T5847] cgroup: Unknown subsys name 'net' [ 93.046722][ T5847] cgroup: Unknown subsys name 'cpuset' [ 93.056056][ T5847] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.793223][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.256824][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.895936][ T10] cfg80211: failed to load regulatory.db [ 100.048815][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.056965][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.099762][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.108130][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.470786][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 101.586872][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.594917][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.602868][ T5924] bridge_slave_0: entered allmulticast mode [ 101.610238][ T5924] bridge_slave_0: entered promiscuous mode [ 101.621892][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.629230][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.636745][ T5924] bridge_slave_1: entered allmulticast mode [ 101.644483][ T5924] bridge_slave_1: entered promiscuous mode [ 101.708354][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.722557][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.768541][ T5924] team0: Port device team_slave_0 added [ 101.776622][ T5924] team0: Port device team_slave_1 added [ 101.810182][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.817346][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.843442][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.856859][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.865447][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.891834][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.945349][ T5924] hsr_slave_0: entered promiscuous mode [ 101.951896][ T5924] hsr_slave_1: entered promiscuous mode [ 102.122893][ T5924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.135893][ T5924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.145840][ T5924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.157304][ T5924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.245955][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.267583][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.280989][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.288788][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.306177][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.313408][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.509419][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.555410][ T5924] veth0_vlan: entered promiscuous mode [ 102.569860][ T5924] veth1_vlan: entered promiscuous mode [ 102.604166][ T5924] veth0_macvtap: entered promiscuous mode [ 102.614772][ T5924] veth1_macvtap: entered promiscuous mode [ 102.636518][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.650158][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.670107][ T135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.679869][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.694584][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.703506][ T135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.879614][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.896465][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.906007][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.914437][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.924821][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.936355][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.975187][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.047010][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.167783][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/09 19:14:42 executed programs: 0 [ 103.743704][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.754249][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.762311][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.770394][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.785674][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.956373][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 104.045174][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.052540][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.059782][ T5957] bridge_slave_0: entered allmulticast mode [ 104.067497][ T5957] bridge_slave_0: entered promiscuous mode [ 104.077118][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.084849][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.092196][ T5957] bridge_slave_1: entered allmulticast mode [ 104.099574][ T5957] bridge_slave_1: entered promiscuous mode [ 104.135801][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.148448][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.181933][ T5957] team0: Port device team_slave_0 added [ 104.190312][ T5957] team0: Port device team_slave_1 added [ 104.217933][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.224994][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.251426][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.266201][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.273326][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.300012][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.355740][ T5957] hsr_slave_0: entered promiscuous mode [ 104.363151][ T5957] hsr_slave_1: entered promiscuous mode [ 104.369508][ T5957] debugfs: 'hsr0' already exists in 'hsr' [ 104.375808][ T5957] Cannot create hsr debugfs directory [ 105.441625][ T13] bridge_slave_1: left allmulticast mode [ 105.449679][ T13] bridge_slave_1: left promiscuous mode [ 105.458064][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.472349][ T13] bridge_slave_0: left allmulticast mode [ 105.478023][ T13] bridge_slave_0: left promiscuous mode [ 105.485959][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.637992][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.649958][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.660201][ T13] bond0 (unregistering): Released all slaves [ 105.781389][ T13] hsr_slave_0: left promiscuous mode [ 105.788333][ T13] hsr_slave_1: left promiscuous mode [ 105.798540][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.811837][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.822919][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.830391][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.848654][ T13] veth1_macvtap: left promiscuous mode [ 105.859007][ T13] veth0_macvtap: left promiscuous mode [ 105.865192][ T13] veth1_vlan: left promiscuous mode [ 105.866335][ T51] Bluetooth: hci0: command tx timeout [ 105.871136][ T13] veth0_vlan: left promiscuous mode [ 106.220603][ T13] team0 (unregistering): Port device team_slave_1 removed [ 106.252472][ T13] team0 (unregistering): Port device team_slave_0 removed [ 106.790562][ T5957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.827379][ T5957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.888290][ T5957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.916065][ T5957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.219396][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.275099][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.299164][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.306504][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.326871][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.334188][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.529490][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.575859][ T5957] veth0_vlan: entered promiscuous mode [ 107.589256][ T5957] veth1_vlan: entered promiscuous mode [ 107.620064][ T5957] veth0_macvtap: entered promiscuous mode [ 107.630070][ T5957] veth1_macvtap: entered promiscuous mode [ 107.650553][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.664807][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.680678][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.690056][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.699811][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.713907][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.787877][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.795901][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.831136][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.839158][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.934777][ T51] Bluetooth: hci0: command tx timeout [ 107.955112][ T6005] ================================================================== [ 107.963244][ T6005] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350 [ 107.970965][ T6005] Read of size 8 at addr ffff88802bd02418 by task syz.0.19/6005 [ 107.978637][ T6005] [ 107.981024][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 107.981048][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.981067][ T6005] Call Trace: [ 107.981075][ T6005] [ 107.981082][ T6005] dump_stack_lvl+0xe8/0x150 [ 107.981114][ T6005] print_address_description+0x55/0x1e0 [ 107.981143][ T6005] ? dvb_device_open+0xc4/0x350 [ 107.981164][ T6005] print_report+0x58/0x70 [ 107.981188][ T6005] kasan_report+0x117/0x150 [ 107.981210][ T6005] ? dvb_device_open+0xc4/0x350 [ 107.981235][ T6005] dvb_device_open+0xc4/0x350 [ 107.981256][ T6005] ? do_raw_spin_unlock+0xf5/0x210 [ 107.981281][ T6005] chrdev_open+0x4cd/0x5e0 [ 107.981304][ T6005] ? __pfx_chrdev_open+0x10/0x10 [ 107.981325][ T6005] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 107.981359][ T6005] ? __pfx_chrdev_open+0x10/0x10 [ 107.981380][ T6005] do_dentry_open+0x785/0x14e0 [ 107.981410][ T6005] vfs_open+0x3b/0x340 [ 107.981431][ T6005] ? path_openat+0x2df0/0x3860 [ 107.981449][ T6005] path_openat+0x2e08/0x3860 [ 107.981472][ T6005] ? __pfx_stack_trace_save+0x10/0x10 [ 107.981504][ T6005] ? stack_depot_save_flags+0x33/0x810 [ 107.981530][ T6005] ? __pfx_path_openat+0x10/0x10 [ 107.981541][ T6005] ? __x64_sys_openat+0x138/0x170 [ 107.981562][ T6005] ? __lock_acquire+0x6b5/0x2cf0 [ 107.981586][ T6005] do_file_open+0x23e/0x4a0 [ 107.981611][ T6005] ? __pfx_do_file_open+0x10/0x10 [ 107.981642][ T6005] ? _raw_spin_unlock+0x28/0x50 [ 107.981658][ T6005] ? alloc_fd+0x64b/0x6c0 [ 107.981680][ T6005] do_sys_openat2+0x113/0x200 [ 107.981699][ T6005] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.981725][ T6005] ? __task_pid_nr_ns+0x28/0x470 [ 107.981743][ T6005] __x64_sys_openat+0x138/0x170 [ 107.981763][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.981808][ T6005] do_syscall_64+0x15f/0xf80 [ 107.981840][ T6005] ? trace_irq_disable+0x3b/0x140 [ 107.981858][ T6005] ? clear_bhb_loop+0x40/0x90 [ 107.981874][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.981888][ T6005] RIP: 0033:0x7f6ed495d04e [ 107.981913][ T6005] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.981926][ T6005] RSP: 002b:00007ffc1e702bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.981941][ T6005] RAX: ffffffffffffffda RBX: 0000555561dfb500 RCX: 00007f6ed495d04e [ 107.981952][ T6005] RDX: 0000000000040002 RSI: 00007ffc1e702cb0 RDI: ffffffffffffff9c [ 107.981962][ T6005] RBP: 00007ffc1e702cb0 R08: 0000000000000000 R09: 0000000000000000 [ 107.981972][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 107.981982][ T6005] R13: 00007f6ed4c15fac R14: 00007f6ed4c15fa0 R15: 00007f6ed4c15fa0 [ 107.982031][ T6005] [ 107.982038][ T6005] [ 108.253408][ T6005] Allocated by task 1: [ 108.257514][ T6005] kasan_save_track+0x3e/0x80 [ 108.262226][ T6005] __kasan_kmalloc+0x93/0xb0 [ 108.266838][ T6005] __kmalloc_cache_noprof+0x31c/0x660 [ 108.272232][ T6005] dvb_register_device+0x2fd/0x21e0 [ 108.277449][ T6005] dvb_register_frontend+0x61b/0x920 [ 108.282763][ T6005] vidtv_bridge_probe+0x9aa/0xf80 [ 108.287812][ T6005] platform_probe+0xf9/0x190 [ 108.292429][ T6005] really_probe+0x267/0xaf0 [ 108.296953][ T6005] __driver_probe_device+0x18c/0x320 [ 108.302273][ T6005] driver_probe_device+0x4f/0x240 [ 108.307325][ T6005] __driver_attach+0x34c/0x640 [ 108.312120][ T6005] bus_for_each_dev+0x23b/0x2c0 [ 108.316997][ T6005] bus_add_driver+0x345/0x670 [ 108.321695][ T6005] driver_register+0x23a/0x320 [ 108.326481][ T6005] vidtv_bridge_init+0x28/0x50 [ 108.331273][ T6005] do_one_initcall+0x250/0x870 [ 108.336064][ T6005] do_initcall_level+0x104/0x190 [ 108.341031][ T6005] do_initcalls+0x59/0xa0 [ 108.345382][ T6005] kernel_init_freeable+0x2a6/0x3e0 [ 108.350609][ T6005] kernel_init+0x1d/0x1d0 [ 108.354961][ T6005] ret_from_fork+0x514/0xb70 [ 108.359581][ T6005] ret_from_fork_asm+0x1a/0x30 [ 108.364371][ T6005] [ 108.366724][ T6005] Freed by task 6004: [ 108.370716][ T6005] kasan_save_track+0x3e/0x80 [ 108.375422][ T6005] kasan_save_free_info+0x46/0x50 [ 108.380474][ T6005] __kasan_slab_free+0x5c/0x80 [ 108.385252][ T6005] kfree+0x1c5/0x640 [ 108.389171][ T6005] dvb_device_open+0x2cd/0x350 [ 108.393965][ T6005] chrdev_open+0x4cd/0x5e0 [ 108.398410][ T6005] do_dentry_open+0x785/0x14e0 [ 108.403200][ T6005] vfs_open+0x3b/0x340 [ 108.407292][ T6005] path_openat+0x2e08/0x3860 [ 108.411898][ T6005] do_file_open+0x23e/0x4a0 [ 108.416425][ T6005] do_sys_openat2+0x113/0x200 [ 108.421126][ T6005] __x64_sys_openat+0x138/0x170 [ 108.426009][ T6005] do_syscall_64+0x15f/0xf80 [ 108.430638][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.436557][ T6005] [ 108.438897][ T6005] The buggy address belongs to the object at ffff88802bd02400 [ 108.438897][ T6005] which belongs to the cache kmalloc-256 of size 256 [ 108.452973][ T6005] The buggy address is located 24 bytes inside of [ 108.452973][ T6005] freed 256-byte region [ffff88802bd02400, ffff88802bd02500) [ 108.466710][ T6005] [ 108.469061][ T6005] The buggy address belongs to the physical page: [ 108.475501][ T6005] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bd02 [ 108.484279][ T6005] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.492892][ T6005] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.500473][ T6005] page_type: f5(slab) [ 108.504561][ T6005] raw: 00fff00000000040 ffff88813fe34b40 dead000000000122 0000000000000000 [ 108.513185][ T6005] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 108.521786][ T6005] head: 00fff00000000040 ffff88813fe34b40 dead000000000122 0000000000000000 [ 108.530475][ T6005] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 108.539342][ T6005] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 108.548032][ T6005] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 108.556718][ T6005] page dumped because: kasan: bad access detected [ 108.563157][ T6005] page_owner tracks the page as allocated [ 108.568899][ T6005] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21046114610, free_ts 0 [ 108.588749][ T6005] post_alloc_hook+0x231/0x280 [ 108.593553][ T6005] get_page_from_freelist+0x24ba/0x2540 [ 108.599117][ T6005] __alloc_frozen_pages_noprof+0x18d/0x380 [ 108.604942][ T6005] allocate_slab+0x77/0x660 [ 108.609471][ T6005] refill_objects+0x339/0x3d0 [ 108.614263][ T6005] __pcs_replace_empty_main+0x321/0x720 [ 108.619922][ T6005] __kmalloc_cache_noprof+0x392/0x660 [ 108.625341][ T6005] bus_add_driver+0x162/0x670 [ 108.630064][ T6005] driver_register+0x23a/0x320 [ 108.634855][ T6005] usb_register_driver+0x1e4/0x390 [ 108.640000][ T6005] do_one_initcall+0x250/0x870 [ 108.644791][ T6005] do_initcall_level+0x104/0x190 [ 108.649851][ T6005] do_initcalls+0x59/0xa0 [ 108.654236][ T6005] kernel_init_freeable+0x2a6/0x3e0 [ 108.659457][ T6005] kernel_init+0x1d/0x1d0 [ 108.663810][ T6005] ret_from_fork+0x514/0xb70 [ 108.668431][ T6005] page_owner free stack trace missing [ 108.673815][ T6005] [ 108.676159][ T6005] Memory state around the buggy address: [ 108.681807][ T6005] ffff88802bd02300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 108.689969][ T6005] ffff88802bd02380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 108.698064][ T6005] >ffff88802bd02400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.706148][ T6005] ^ [ 108.711020][ T6005] ffff88802bd02480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.719098][ T6005] ffff88802bd02500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 108.727180][ T6005] ================================================================== [ 108.744934][ T6005] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 108.752205][ T6005] CPU: 1 UID: 0 PID: 6005 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 108.761359][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.771466][ T6005] Call Trace: [ 108.774793][ T6005] [ 108.777770][ T6005] vpanic+0x56c/0xa60 [ 108.781839][ T6005] ? __pfx_vpanic+0x10/0x10 [ 108.786404][ T6005] ? __pfx___schedule+0x10/0x10 [ 108.791313][ T6005] panic+0xc5/0xd0 [ 108.795083][ T6005] ? __pfx_panic+0x10/0x10 [ 108.799544][ T6005] ? preempt_schedule_thunk+0x16/0x30 [ 108.804970][ T6005] ? dvb_device_open+0xc4/0x350 [ 108.809862][ T6005] check_panic_on_warn+0x89/0xb0 [ 108.814845][ T6005] ? dvb_device_open+0xc4/0x350 [ 108.819747][ T6005] end_report+0x73/0x170 [ 108.824040][ T6005] ? dvb_device_open+0xc4/0x350 [ 108.828960][ T6005] kasan_report+0x128/0x150 [ 108.833519][ T6005] ? dvb_device_open+0xc4/0x350 [ 108.838448][ T6005] dvb_device_open+0xc4/0x350 [ 108.843181][ T6005] ? do_raw_spin_unlock+0xf5/0x210 [ 108.848374][ T6005] chrdev_open+0x4cd/0x5e0 [ 108.852863][ T6005] ? __pfx_chrdev_open+0x10/0x10 [ 108.857852][ T6005] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 108.864238][ T6005] ? __pfx_chrdev_open+0x10/0x10 [ 108.869223][ T6005] do_dentry_open+0x785/0x14e0 [ 108.874046][ T6005] vfs_open+0x3b/0x340 [ 108.878167][ T6005] ? path_openat+0x2df0/0x3860 [ 108.883024][ T6005] path_openat+0x2e08/0x3860 [ 108.887671][ T6005] ? __pfx_stack_trace_save+0x10/0x10 [ 108.893116][ T6005] ? stack_depot_save_flags+0x33/0x810 [ 108.898628][ T6005] ? __pfx_path_openat+0x10/0x10 [ 108.903611][ T6005] ? __x64_sys_openat+0x138/0x170 [ 108.908687][ T6005] ? __lock_acquire+0x6b5/0x2cf0 [ 108.913766][ T6005] do_file_open+0x23e/0x4a0 [ 108.918328][ T6005] ? __pfx_do_file_open+0x10/0x10 [ 108.923444][ T6005] ? _raw_spin_unlock+0x28/0x50 [ 108.928341][ T6005] ? alloc_fd+0x64b/0x6c0 [ 108.932724][ T6005] do_sys_openat2+0x113/0x200 [ 108.937443][ T6005] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.942686][ T6005] ? __task_pid_nr_ns+0x28/0x470 [ 108.947785][ T6005] __x64_sys_openat+0x138/0x170 [ 108.952673][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.958772][ T6005] do_syscall_64+0x15f/0xf80 [ 108.963407][ T6005] ? trace_irq_disable+0x3b/0x140 [ 108.968473][ T6005] ? clear_bhb_loop+0x40/0x90 [ 108.973190][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.979111][ T6005] RIP: 0033:0x7f6ed495d04e [ 108.983543][ T6005] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.003171][ T6005] RSP: 002b:00007ffc1e702bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.011628][ T6005] RAX: ffffffffffffffda RBX: 0000555561dfb500 RCX: 00007f6ed495d04e [ 109.019638][ T6005] RDX: 0000000000040002 RSI: 00007ffc1e702cb0 RDI: ffffffffffffff9c [ 109.027644][ T6005] RBP: 00007ffc1e702cb0 R08: 0000000000000000 R09: 0000000000000000 [ 109.035649][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 109.043640][ T6005] R13: 00007f6ed4c15fac R14: 00007f6ed4c15fa0 R15: 00007f6ed4c15fa0 [ 109.051640][ T6005] [ 109.055518][ T6005] Kernel Offset: disabled [ 109.059892][ T6005] Rebooting in 86400 seconds..