Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts.
2026/10/01 07:52:13 parsed 1 programs
2026/10/01 07:52:13 serving rpc on tcp://40897
[ 81.055867][ T5631] cgroup: Unknown subsys name 'net'
[ 81.146243][ T5631] cgroup: Unknown subsys name 'cpuset'
[ 81.149234][ T5631] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 83.092776][ T5631] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.277396][ T5641] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 86.977355][ T25] cfg80211: failed to load regulatory.db
[ 87.561049][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.561620][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.561722][ T5658] bridge_slave_0: entered allmulticast mode
[ 87.563623][ T5658] bridge_slave_0: entered promiscuous mode
[ 87.568719][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.568874][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.569000][ T5658] bridge_slave_1: entered allmulticast mode
[ 87.570766][ T5658] bridge_slave_1: entered promiscuous mode
[ 87.606341][ T5658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.610172][ T5658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.640170][ T5658] team0: Port device team_slave_0 added
[ 87.642512][ T5658] team0: Port device team_slave_1 added
[ 87.666863][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.666882][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 87.666908][ T5658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.668888][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.668903][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 87.668926][ T5658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.724817][ T5658] hsr_slave_0: entered promiscuous mode
[ 87.726039][ T5658] hsr_slave_1: entered promiscuous mode
[ 87.893688][ T5658] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.900152][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 87.901422][ T5658] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 87.906778][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 87.907742][ T5658] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.915698][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 87.917610][ T5658] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.927469][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 87.964475][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.964556][ T5658] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.964886][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.965019][ T5658] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.035203][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.049816][ T5658] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.061397][ T140] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.064272][ T140] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.087583][ T140] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.087720][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.096750][ T140] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.096857][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.431941][ T5658] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.481421][ T5658] veth0_vlan: entered promiscuous mode
[ 88.491686][ T5658] veth1_vlan: entered promiscuous mode
[ 88.520625][ T5658] veth0_macvtap: entered promiscuous mode
[ 88.525303][ T5658] veth1_macvtap: entered promiscuous mode
[ 88.543836][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.551228][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.615226][ T1284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.616315][ T140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.616357][ T140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.616393][ T140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.741206][ T1284] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.834458][ T1284] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.906866][ T1284] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.949027][ T1284] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 89.331447][ T5711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.334533][ T5711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.335037][ T5711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.336286][ T5711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.337060][ T5711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.697228][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.697251][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.741418][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.741442][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.957381][ T1284] bridge_slave_1: left allmulticast mode
[ 90.957421][ T1284] bridge_slave_1: left promiscuous mode
[ 90.958603][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.969582][ T1284] bridge_slave_0: left allmulticast mode
[ 90.969607][ T1284] bridge_slave_0: left promiscuous mode
[ 90.969844][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.211370][ T1284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 91.228301][ T1284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 91.230359][ T1284] bond0 (unregistering): Released all slaves
[ 91.323353][ T1284] hsr_slave_0: left promiscuous mode
[ 91.324373][ T1284] hsr_slave_1: left promiscuous mode
[ 91.325543][ T1284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 91.325572][ T1284] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 91.326766][ T1284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 91.326785][ T1284] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 91.339307][ T1284] veth1_macvtap: left promiscuous mode
[ 91.339360][ T1284] veth0_macvtap: left promiscuous mode
[ 91.339468][ T1284] veth1_vlan: left promiscuous mode
[ 91.339549][ T1284] veth0_vlan: left promiscuous mode
[ 91.690090][ T1284] team0 (unregistering): Port device team_slave_1 removed
[ 91.720488][ T1284] team0 (unregistering): Port device team_slave_0 removed
[ 91.894793][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1
2026/10/01 07:52:27 executed programs: 0
[ 92.799130][ T5711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 92.809294][ T5711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 92.810529][ T5711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 92.828856][ T5711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 92.837003][ T5711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.158872][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2
[ 94.030022][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3
[ 94.445799][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.447561][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.447703][ T5785] bridge_slave_0: entered allmulticast mode
[ 94.450105][ T5785] bridge_slave_0: entered promiscuous mode
[ 94.453672][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.453835][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.453951][ T5785] bridge_slave_1: entered allmulticast mode
[ 94.455884][ T5785] bridge_slave_1: entered promiscuous mode
[ 94.490474][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.494336][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.547530][ T5785] team0: Port device team_slave_0 added
[ 94.551573][ T5785] team0: Port device team_slave_1 added
[ 94.589620][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.589641][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.589666][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.591903][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.591917][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.591942][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.698345][ T5785] hsr_slave_0: entered promiscuous mode
[ 94.699505][ T5785] hsr_slave_1: entered promiscuous mode
[ 94.883002][ T5711] Bluetooth: hci0: command tx timeout
[ 95.254512][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.260646][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 95.261834][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.281634][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 95.290482][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.309083][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 95.310289][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.314980][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 95.418514][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.445340][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.461377][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.461491][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.487318][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.487523][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.078692][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.165205][ T5785] veth0_vlan: entered promiscuous mode
[ 96.181764][ T5785] veth1_vlan: entered promiscuous mode
[ 96.221523][ T5785] veth0_macvtap: entered promiscuous mode
[ 96.234697][ T5785] veth1_macvtap: entered promiscuous mode
[ 96.264085][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.285552][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.362909][ T1284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.363620][ T1284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.363701][ T1284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.364423][ T1284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.459279][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.459304][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.513313][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.513337][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.669995][ T5888] ===================
** replaying previous printk message **
[ 96.669995][ T5888] ==================================================================
[ 96.670021][ T5888] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340
[ 96.670058][ T5888] Read of size 8 at addr ffff88802c34d418 by task syz.0.19/5888
[ 96.670076][ T5888]
[ 96.670086][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 96.670108][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 96.670120][ T5888] Call Trace:
[ 96.670128][ T5888]
[ 96.670137][ T5888] dump_stack_lvl+0xe8/0x150
[ 96.670166][ T5888] print_address_description+0x55/0x1e0
[ 96.670195][ T5888] ? dvb_device_open+0xc4/0x340
[ 96.670223][ T5888] print_report+0x58/0x70
[ 96.670246][ T5888] kasan_report+0x117/0x150
[ 96.670274][ T5888] ? dvb_device_open+0xc4/0x340
[ 96.670306][ T5888] dvb_device_open+0xc4/0x340
[ 96.670333][ T5888] ? do_raw_spin_unlock+0xf5/0x200
[ 96.670364][ T5888] chrdev_open+0x4d9/0x600
[ 96.670389][ T5888] ? __pfx_chrdev_open+0x10/0x10
[ 96.670412][ T5888] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 96.670438][ T5888] ? __pfx_chrdev_open+0x10/0x10
[ 96.670461][ T5888] do_dentry_open+0x816/0x1380
[ 96.670490][ T5888] vfs_open+0x3b/0x340
[ 96.670512][ T5888] ? path_openat+0x1428/0x1d60
[ 96.670534][ T5888] path_openat+0x1443/0x1d60
[ 96.670562][ T5888] do_file_open+0x23e/0x4a0
[ 96.670585][ T5888] ? __pfx_do_file_open+0x10/0x10
[ 96.670613][ T5888] ? _raw_spin_unlock+0x28/0x50
[ 96.670637][ T5888] ? alloc_fd+0x651/0x6c0
[ 96.670667][ T5888] do_sys_openat2+0x115/0x200
[ 96.670695][ T5888] ? __pfx_do_sys_openat2+0x10/0x10
[ 96.670723][ T5888] ? __task_pid_nr_ns+0x28/0x470
[ 96.670745][ T5888] __x64_sys_openat+0x138/0x170
[ 96.670773][ T5888] do_syscall_64+0x166/0x520
[ 96.670800][ T5888] ? trace_irq_disable+0x3b/0x140
[ 96.670821][ T5888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.670842][ T5888] ? clear_bhb_loop+0x70/0xc0
[ 96.670865][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.670885][ T5888] RIP: 0033:0x7fce9f95e98e
[ 96.670903][ T5888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 96.670920][ T5888] RSP: 002b:00007ffce7d45ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 96.670942][ T5888] RAX: ffffffffffffffda RBX: 000055558b9a9500 RCX: 00007fce9f95e98e
[ 96.670958][ T5888] RDX: 0000000000000002 RSI: 00007ffce7d45bb0 RDI: ffffffffffffff9c
[ 96.670972][ T5888] RBP: 00007ffce7d45bb0 R08: 0000000000000000 R09: 0000000000000000
[ 96.670985][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 96.670998][ T5888] R13: 00007fce9fc25fac R14: 00007fce9fc25fa0 R15: 00007fce9fc25fa0
[ 96.671029][ T5888]
[ 96.671037][ T5888]
[ 96.671042][ T5888] Allocated by task 1:
[ 96.671051][ T5888] kasan_save_track+0x3e/0x80
[ 96.671072][ T5888] __kasan_kmalloc+0x93/0xb0
[ 96.671092][ T5888] __kmalloc_cache_noprof+0x321/0x600
[ 96.671112][ T5888] dvb_register_device+0x309/0x1dd0
[ 96.671138][ T5888] dvb_register_frontend+0x603/0x900
[ 96.671161][ T5888] vidtv_bridge_probe+0x9d5/0xf60
[ 96.671181][ T5888] platform_probe+0xf9/0x190
[ 96.671202][ T5888] really_probe+0x254/0xae0
[ 96.671224][ T5888] __driver_probe_device+0x1e8/0x360
[ 96.671247][ T5888] driver_probe_device+0x4f/0x240
[ 96.671270][ T5888] __driver_attach+0x339/0x600
[ 96.671292][ T5888] bus_for_each_dev+0x23b/0x2c0
[ 96.671319][ T5888] bus_add_driver+0x345/0x670
[ 96.671335][ T5888] driver_register+0x23a/0x320
[ 96.671360][ T5888] vidtv_bridge_init+0x3d/0x60
[ 96.671385][ T5888] do_one_initcall+0x250/0x870
[ 96.671410][ T5888] do_initcall_level+0x10a/0x1a0
[ 96.671431][ T5888] do_initcalls+0x59/0xa0
[ 96.671449][ T5888] kernel_init_freeable+0x29d/0x3e0
[ 96.671468][ T5888] kernel_init+0x22/0x1d0
[ 96.671483][ T5888] ret_from_fork+0x514/0xb70
[ 96.671499][ T5888] ret_from_fork_asm+0x1a/0x30
[ 96.671525][ T5888]
[ 96.671530][ T5888] Freed by task 5886:
[ 96.671539][ T5888] kasan_save_track+0x3e/0x80
[ 96.671559][ T5888] kasan_save_free_info+0x40/0x50
[ 96.671585][ T5888] __kasan_slab_free+0x5c/0x80
[ 96.671606][ T5888] kfree+0x1c5/0x650
[ 96.671631][ T5888] dvb_device_open+0x2b8/0x340
[ 96.671658][ T5888] chrdev_open+0x4d9/0x600
[ 96.671677][ T5888] do_dentry_open+0x816/0x1380
[ 96.671699][ T5888] vfs_open+0x3b/0x340
[ 96.671720][ T5888] path_openat+0x1443/0x1d60
[ 96.671737][ T5888] do_file_open+0x23e/0x4a0
[ 96.671754][ T5888] do_sys_openat2+0x115/0x200
[ 96.671777][ T5888] __x64_sys_openat+0x138/0x170
[ 96.671800][ T5888] do_syscall_64+0x166/0x520
[ 96.671824][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.671842][ T5888]
[ 96.671847][ T5888] The buggy address belongs to the object at ffff88802c34d400
[ 96.671847][ T5888] which belongs to the cache kmalloc-256 of size 256
[ 96.671863][ T5888] The buggy address is located 24 bytes inside of
[ 96.671863][ T5888] freed 256-byte region [ffff88802c34d400, ffff88802c34d500)
[ 96.671883][ T5888]
[ 96.671888][ T5888] The buggy address belongs to the physical page:
[ 96.671898][ T5888] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c34c
[ 96.671916][ T5888] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 96.671932][ T5888] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 96.671973][ T5888] page_type: f5(slab)
[ 96.671992][ T5888] raw: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122
[ 96.672024][ T5888] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 96.672041][ T5888] head: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122
[ 96.672057][ T5888] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 96.672073][ T5888] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 96.672089][ T5888] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 96.672099][ T5888] page dumped because: kasan: bad access detected
[ 96.672109][ T5888] page_owner tracks the page as allocated
[ 96.672116][ T5888] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15737211392
[ 96.672168][ T5888] post_alloc_hook+0x1f9/0x250
[ 96.672196][ T5888] get_page_from_freelist+0x2209/0x2280
[ 96.672217][ T5888] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 96.672238][ T5888] allocate_slab+0x7d/0x620
[ 96.672262][ T5888] refill_objects+0x2d5/0x350
[ 96.672286][ T5888] __pcs_replace_empty_main+0x2c8/0x6c0
[ 96.672309][ T5888] __kmalloc_cache_noprof+0x39b/0x600
[ 96.672328][ T5888] bus_add_driver+0x162/0x670
[ 96.672344][ T5888] driver_register+0x23a/0x320
[ 96.672368][ T5888] usb_register_driver+0x1e4/0x390
[ 96.672393][ T5888] do_one_initcall+0x250/0x870
[ 96.672418][ T5888] do_initcall_level+0x10a/0x1a0
[ 96.672438][ T5888] do_initcalls+0x59/0xa0
[ 96.672457][ T5888] kernel_init_freeable+0x29d/0x3e0
[ 96.672476][ T5888] kernel_init+0x22/0x1d0
[ 96.672493][ T5888] ret_from_fork+0x514/0xb70
[ 96.672508][ T5888] page_owner free stack trace missing
[ 96.672515][ T5888]
[ 96.672520][ T5888] Memory state around the buggy address:
[ 96.672531][ T5888] ffff88802c34d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 96.672544][ T5888] ffff88802c34d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 96.672557][ T5888] >ffff88802c34d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 96.672567][ T5888] ^
[ 96.672577][ T5888] ffff88802c34d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 96.672590][ T5888] ffff88802c34d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 96.672600][ T5888] ==================================================================
[ 96.675715][ T5888] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 97.438223][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 97.447336][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 97.457424][ T5888] Call Trace:
[ 97.460764][ T5888]
[ 97.463714][ T5888] vpanic+0x56d/0xa60
[ 97.467737][ T5888] ? __pfx_vpanic+0x10/0x10
[ 97.472277][ T5888] ? __pfx___schedule+0x10/0x10
[ 97.477151][ T5888] panic+0xc5/0xd0
[ 97.480893][ T5888] ? __pfx_panic+0x10/0x10
[ 97.485338][ T5888] ? preempt_schedule_thunk+0x16/0x40
[ 97.490740][ T5888] ? dvb_device_open+0xc4/0x340
[ 97.495630][ T5888] check_panic_on_warn+0x89/0xb0
[ 97.500579][ T5888] ? dvb_device_open+0xc4/0x340
[ 97.505495][ T5888] end_report+0x73/0x170
[ 97.509956][ T5888] ? dvb_device_open+0xc4/0x340
[ 97.514838][ T5888] kasan_report+0x128/0x150
[ 97.519363][ T5888] ? dvb_device_open+0xc4/0x340
[ 97.524249][ T5888] dvb_device_open+0xc4/0x340
[ 97.528967][ T5888] ? do_raw_spin_unlock+0xf5/0x200
[ 97.534098][ T5888] chrdev_open+0x4d9/0x600
[ 97.538532][ T5888] ? __pfx_chrdev_open+0x10/0x10
[ 97.543497][ T5888] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 97.549869][ T5888] ? __pfx_chrdev_open+0x10/0x10
[ 97.554837][ T5888] do_dentry_open+0x816/0x1380
[ 97.559626][ T5888] vfs_open+0x3b/0x340
[ 97.563720][ T5888] ? path_openat+0x1428/0x1d60
[ 97.568505][ T5888] path_openat+0x1443/0x1d60
[ 97.573164][ T5888] do_file_open+0x23e/0x4a0
[ 97.577689][ T5888] ? __pfx_do_file_open+0x10/0x10
[ 97.582748][ T5888] ? _raw_spin_unlock+0x28/0x50
[ 97.587630][ T5888] ? alloc_fd+0x651/0x6c0
[ 97.591994][ T5888] do_sys_openat2+0x115/0x200
[ 97.596704][ T5888] ? __pfx_do_sys_openat2+0x10/0x10
[ 97.601940][ T5888] ? __task_pid_nr_ns+0x28/0x470
[ 97.606916][ T5888] __x64_sys_openat+0x138/0x170
[ 97.611797][ T5888] do_syscall_64+0x166/0x520
[ 97.616404][ T5888] ? trace_irq_disable+0x3b/0x140
[ 97.621461][ T5888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.627554][ T5888] ? clear_bhb_loop+0x70/0xc0
[ 97.632346][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.638271][ T5888] RIP: 0033:0x7fce9f95e98e
[ 97.642705][ T5888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 97.662357][ T5888] RSP: 002b:00007ffce7d45ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 97.670796][ T5888] RAX: ffffffffffffffda RBX: 000055558b9a9500 RCX: 00007fce9f95e98e
[ 97.678798][ T5888] RDX: 0000000000000002 RSI: 00007ffce7d45bb0 RDI: ffffffffffffff9c
[ 97.686803][ T5888] RBP: 00007ffce7d45bb0 R08: 0000000000000000 R09: 0000000000000000
[ 97.694791][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 97.702780][ T5888] R13: 00007fce9fc25fac R14: 00007fce9fc25fa0 R15: 00007fce9fc25fa0
[ 97.710783][ T5888]
[ 97.713968][ T5888] Kernel Offset: disabled
[ 97.718307][ T5888] Rebooting in 86400 seconds..