Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts.
2026/06/27 13:09:31 parsed 1 programs
2026/06/27 13:09:31 serving rpc on tcp://41679
[ 66.985777][ T4198] cgroup: Unknown subsys name 'net'
[ 67.098978][ T4198] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 68.622874][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 70.650500][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 70.673042][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 70.695248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 70.711394][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 70.719340][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 70.727258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 71.266774][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.273354][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.453751][ T4250] chnl_net:caif_netlink_parms(): no params data found
[ 71.520998][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.529992][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.538515][ T4250] device bridge_slave_0 entered promiscuous mode
[ 71.549386][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.556822][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.566162][ T4250] device bridge_slave_1 entered promiscuous mode
[ 71.594551][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.608299][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.636536][ T4250] team0: Port device team_slave_0 added
[ 71.644919][ T4250] team0: Port device team_slave_1 added
[ 71.665352][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.672326][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.698838][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.712145][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.719344][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.745402][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.784368][ T4250] device hsr_slave_0 entered promiscuous mode
[ 71.791463][ T4250] device hsr_slave_1 entered promiscuous mode
[ 71.926807][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 71.936924][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 71.946444][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 71.956009][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 71.979931][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.987349][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.995209][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.002384][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.088457][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0
[ 72.110876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 72.133024][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.147119][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.158060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 72.180812][ T4250] 8021q: adding VLAN 0 to HW filter on device team0
[ 72.205938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 72.215650][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.222808][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.236087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 72.245024][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.252105][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.275024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 72.287828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 72.299249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 72.311596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 72.325626][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 72.336373][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 72.426170][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 72.433775][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 72.446561][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 72.468183][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 72.479554][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 72.518503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 72.527200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 72.536356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 72.552499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 72.562334][ T4250] device veth0_vlan entered promiscuous mode
[ 72.591274][ T4250] device veth1_vlan entered promiscuous mode
[ 72.611158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 72.619426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 72.627774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 72.636486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 72.647731][ T4250] device veth0_macvtap entered promiscuous mode
[ 72.659264][ T4250] device veth1_macvtap entered promiscuous mode
[ 72.695272][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 72.703362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 72.711407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 72.719967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 72.728795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 72.739756][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 72.765537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 72.775713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 72.789124][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.798610][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.807469][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.817183][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/06/27 13:09:41 executed programs: 0
[ 74.979237][ T4303] chnl_net:caif_netlink_parms(): no params data found
[ 75.031647][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.040031][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.048571][ T4303] device bridge_slave_0 entered promiscuous mode
[ 75.058600][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.065731][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.073923][ T4303] device bridge_slave_1 entered promiscuous mode
[ 75.105582][ T468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 75.122588][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.133965][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.156664][ T4303] team0: Port device team_slave_0 added
[ 75.164623][ T4303] team0: Port device team_slave_1 added
[ 75.180783][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.188180][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.214941][ T4303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.227156][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.234376][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.260339][ T4303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.290201][ T4303] device hsr_slave_0 entered promiscuous mode
[ 75.296992][ T4303] device hsr_slave_1 entered promiscuous mode
[ 75.304080][ T4303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 75.311922][ T4303] Cannot create hsr debugfs directory
[ 76.863333][ T4265] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.882030][ T468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.938352][ T468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.009630][ T468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.801277][ T4303] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.810660][ T4303] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.821864][ T4303] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.836905][ T4303] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 78.902650][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.914742][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 78.922761][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 78.932323][ T4303] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.953218][ T4323] Bluetooth: hci0: command 0x041b tx timeout
[ 78.965210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 78.975675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 78.984934][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.992024][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.001087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 79.016913][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 79.025684][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 79.034359][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.041435][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.067984][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 79.079670][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 79.090721][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 79.099827][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 79.110627][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 79.138388][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 79.147290][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 79.161320][ T4303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 79.171796][ T4303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 79.185847][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 79.194327][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 79.203137][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 79.211562][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 79.220246][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 79.300366][ T468] device hsr_slave_0 left promiscuous mode
[ 79.309371][ T468] device hsr_slave_1 left promiscuous mode
[ 79.316382][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 79.326398][ T468] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 79.336665][ T468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 79.347248][ T468] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 79.355151][ T468] device bridge_slave_1 left promiscuous mode
[ 79.362019][ T468] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.378940][ T468] device bridge_slave_0 left promiscuous mode
[ 79.385288][ T468] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.404368][ T468] device veth1_macvtap left promiscuous mode
[ 79.410578][ T468] device veth0_macvtap left promiscuous mode
[ 79.417317][ T468] device veth1_vlan left promiscuous mode
[ 79.423390][ T468] device veth0_vlan left promiscuous mode
[ 79.592121][ T468] team0 (unregistering): Port device team_slave_1 removed
[ 79.606999][ T468] team0 (unregistering): Port device team_slave_0 removed
[ 79.619914][ T468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 79.635331][ T468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 79.693815][ T468] bond0 (unregistering): Released all slaves
[ 79.764954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 79.772427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 79.785314][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.804746][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 79.814187][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 79.842333][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 79.850748][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 79.864269][ T4303] device veth0_vlan entered promiscuous mode
[ 79.870689][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 79.879074][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 79.892078][ T4303] device veth1_vlan entered promiscuous mode
[ 79.916827][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 79.925665][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 79.933971][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 79.942383][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 79.955354][ T4303] device veth0_macvtap entered promiscuous mode
[ 79.965139][ T4303] device veth1_macvtap entered promiscuous mode
[ 79.980288][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.989273][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 79.997847][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 80.007246][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 80.019240][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.029747][ T4303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.038870][ T4303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.048260][ T4303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.057271][ T4303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.073680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 80.082201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 80.135968][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.146654][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.155306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/06/27 13:09:46 executed programs: 2
[ 80.179597][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.188038][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.195883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 80.300445][ T4354] ==================================================================
[ 80.308848][ T4354] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360
[ 80.316093][ T4354] Read of size 8 at addr ffff888028488e18 by task syz.0.19/4354
[ 80.323742][ T4354]
[ 80.326097][ T4354] CPU: 0 PID: 4354 Comm: syz.0.19 Not tainted syzkaller #0
[ 80.333345][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 80.343432][ T4354] Call Trace:
[ 80.346827][ T4354]
[ 80.349789][ T4354] dump_stack_lvl+0x188/0x250
[ 80.354552][ T4354] ? show_regs_print_info+0x20/0x20
[ 80.359869][ T4354] ? _printk+0xda/0x130
[ 80.364051][ T4354] ? dvb_device_open+0xc5/0x360
[ 80.368936][ T4354] ? load_image+0x410/0x410
[ 80.373485][ T4354] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 80.378976][ T4354] print_address_description+0x60/0x2d0
[ 80.384590][ T4354] ? dvb_device_open+0xc5/0x360
[ 80.389471][ T4354] kasan_report+0xdf/0x130
[ 80.393922][ T4354] ? dvb_device_open+0xc5/0x360
[ 80.398808][ T4354] dvb_device_open+0xc5/0x360
[ 80.403546][ T4354] chrdev_open+0x585/0x5f0
[ 80.408007][ T4354] ? cd_forget+0x160/0x160
[ 80.412467][ T4354] ? fsnotify_perm+0x3a7/0x560
[ 80.417264][ T4354] ? cd_forget+0x160/0x160
[ 80.421719][ T4354] do_dentry_open+0x7f7/0xf90
[ 80.426450][ T4354] ? vfs_open+0x2b/0x80
[ 80.430658][ T4354] path_openat+0x2718/0x2fb0
[ 80.435296][ T4354] ? __kasan_slab_alloc+0xa9/0xc0
[ 80.440352][ T4354] ? do_filp_open+0x400/0x400
[ 80.445084][ T4354] do_filp_open+0x1df/0x400
[ 80.449628][ T4354] ? vfs_tmpfile+0x300/0x300
[ 80.454271][ T4354] ? _raw_spin_unlock+0x24/0x40
[ 80.459160][ T4354] ? alloc_fd+0x59e/0x650
[ 80.463537][ T4354] do_sys_openat2+0x14b/0x500
[ 80.468241][ T4354] ? __lock_acquire+0x7b50/0x7b50
[ 80.473318][ T4354] ? do_sys_open+0xe0/0xe0
[ 80.477770][ T4354] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 80.483779][ T4354] ? lock_chain_count+0x20/0x20
[ 80.488666][ T4354] __x64_sys_openat+0x135/0x160
[ 80.493544][ T4354] do_syscall_64+0x4c/0xa0
[ 80.497984][ T4354] ? clear_bhb_loop+0x30/0x80
[ 80.502720][ T4354] ? clear_bhb_loop+0x30/0x80
[ 80.507426][ T4354] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 80.513353][ T4354] RIP: 0033:0x7ff665d5768e
[ 80.517807][ T4354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 80.537438][ T4354] RSP: 002b:00007ffdccbb07a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 80.545885][ T4354] RAX: ffffffffffffffda RBX: 00005555700aa500 RCX: 00007ff665d5768e
[ 80.553891][ T4354] RDX: 0000000000000002 RSI: 00007ffdccbb0880 RDI: ffffffffffffff9c
[ 80.561919][ T4354] RBP: 00007ffdccbb0880 R08: 0000000000000000 R09: 0000000000000000
[ 80.569923][ T4354] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 80.577925][ T4354] R13: 00007ff66600ffac R14: 00007ff66600ffa0 R15: 00007ff66600ffa0
[ 80.585954][ T4354]
[ 80.588996][ T4354]
[ 80.591344][ T4354] Allocated by task 1:
[ 80.595424][ T4354] __kasan_kmalloc+0xaf/0xe0
[ 80.600044][ T4354] dvb_register_device+0x300/0x1dc0
[ 80.605275][ T4354] dvb_register_frontend+0x629/0x900
[ 80.610584][ T4354] vidtv_bridge_probe+0x9c1/0xf30
[ 80.615633][ T4354] platform_probe+0x137/0x1c0
[ 80.620330][ T4354] really_probe+0x276/0xc70
[ 80.624857][ T4354] __driver_probe_device+0x1f5/0x390
[ 80.630186][ T4354] driver_probe_device+0x4f/0x420
[ 80.635232][ T4354] __driver_attach+0x45d/0x660
[ 80.640102][ T4354] bus_for_each_dev+0x182/0x1f0
[ 80.644980][ T4354] bus_add_driver+0x324/0x5d0
[ 80.649885][ T4354] driver_register+0x32d/0x430
[ 80.654675][ T4354] vidtv_bridge_init+0x39/0x70
[ 80.659471][ T4354] do_one_initcall+0x272/0x730
[ 80.664266][ T4354] do_initcall_level+0x13d/0x1f0
[ 80.669319][ T4354] do_initcalls+0x4b/0x90
[ 80.673713][ T4354] kernel_init_freeable+0x3d5/0x560
[ 80.678935][ T4354] kernel_init+0x19/0x1b0
[ 80.683324][ T4354] ret_from_fork+0x1f/0x30
[ 80.687774][ T4354]
[ 80.690128][ T4354] Freed by task 4353:
[ 80.694123][ T4354] kasan_set_track+0x4b/0x70
[ 80.698772][ T4354] kasan_set_free_info+0x1f/0x40
[ 80.703732][ T4354] ____kasan_slab_free+0xd5/0x110
[ 80.708785][ T4354] slab_free_freelist_hook+0xec/0x170
[ 80.714185][ T4354] kfree+0xef/0x2a0
[ 80.718013][ T4354] dvb_device_open+0x2d2/0x360
[ 80.722798][ T4354] chrdev_open+0x585/0x5f0
[ 80.727239][ T4354] do_dentry_open+0x7f7/0xf90
[ 80.732074][ T4354] path_openat+0x2718/0x2fb0
[ 80.736699][ T4354] do_filp_open+0x1df/0x400
[ 80.741240][ T4354] do_sys_openat2+0x14b/0x500
[ 80.745939][ T4354] __x64_sys_openat+0x135/0x160
[ 80.750815][ T4354] do_syscall_64+0x4c/0xa0
[ 80.755261][ T4354] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 80.761178][ T4354]
[ 80.763518][ T4354] The buggy address belongs to the object at ffff888028488e00
[ 80.763518][ T4354] which belongs to the cache kmalloc-256 of size 256
[ 80.777619][ T4354] The buggy address is located 24 bytes inside of
[ 80.777619][ T4354] 256-byte region [ffff888028488e00, ffff888028488f00)
[ 80.790934][ T4354] The buggy address belongs to the page:
[ 80.796596][ T4354] page:ffffea0000a12200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28488
[ 80.806772][ T4354] head:ffffea0000a12200 order:1 compound_mapcount:0
[ 80.813384][ T4354] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 80.821401][ T4354] raw: 00fff00000010200 ffffea0000a8a400 0000000400000003 ffff888016c41b40
[ 80.830016][ T4354] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 80.838625][ T4354] page dumped because: kasan: bad access detected
[ 80.845078][ T4354] page_owner tracks the page as allocated
[ 80.850892][ T4354] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 20491897149, free_ts 0
[ 80.868889][ T4354] get_page_from_freelist+0x24f6/0x2670
[ 80.874477][ T4354] __alloc_pages+0x1ee/0x480
[ 80.879096][ T4354] alloc_page_interleave+0x24/0x1e0
[ 80.884317][ T4354] new_slab+0xc0/0x4b0
[ 80.888405][ T4354] ___slab_alloc+0x807/0xdd0
[ 80.893015][ T4354] __kmalloc_node+0x142/0x3a0
[ 80.897717][ T4354] kvmalloc_node+0x84/0x130
[ 80.902241][ T4354] v4l2_ctrl_new+0x70f/0x1310
[ 80.906942][ T4354] v4l2_ctrl_new_std+0x247/0x300
[ 80.911908][ T4354] handler_new_ref+0x14f/0x8d0
[ 80.916782][ T4354] v4l2_ctrl_add_handler+0x197/0x280
[ 80.922097][ T4354] vivid_create_controls+0x2932/0x3380
[ 80.927584][ T4354] vivid_probe+0x39ff/0x6240
[ 80.932333][ T4354] platform_probe+0x137/0x1c0
[ 80.937046][ T4354] really_probe+0x276/0xc70
[ 80.941592][ T4354] __driver_probe_device+0x1f5/0x390
[ 80.946928][ T4354] page_owner free stack trace missing
[ 80.952319][ T4354]
[ 80.954668][ T4354] Memory state around the buggy address:
[ 80.960320][ T4354] ffff888028488d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.968557][ T4354] ffff888028488d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.976680][ T4354] >ffff888028488e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 80.984773][ T4354] ^
[ 80.989654][ T4354] ffff888028488e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 80.997749][ T4354] ffff888028488f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 81.005840][ T4354] ==================================================================
[ 81.013935][ T4354] Disabling lock debugging due to kernel taint
[ 81.035922][ T4354] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 81.043164][ T4354] CPU: 0 PID: 4354 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 81.051788][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 81.061899][ T4354] Call Trace:
[ 81.065208][ T4354]
[ 81.068161][ T4354] dump_stack_lvl+0x188/0x250
[ 81.072877][ T4354] ? show_regs_print_info+0x20/0x20
[ 81.078114][ T4354] ? load_image+0x410/0x410
[ 81.082648][ T4354] panic+0x2f8/0x850
[ 81.086575][ T4354] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 81.092773][ T4354] ? bpf_jit_dump+0xd0/0xd0
[ 81.097314][ T4354] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 81.103327][ T4354] ? _raw_spin_unlock+0x40/0x40
[ 81.108209][ T4354] ? dvb_device_open+0xc5/0x360
[ 81.113095][ T4354] check_panic_on_warn+0x80/0xa0
[ 81.118072][ T4354] ? dvb_device_open+0xc5/0x360
[ 81.122951][ T4354] end_report+0x6d/0xf0
[ 81.127140][ T4354] kasan_report+0x102/0x130
[ 81.131681][ T4354] ? dvb_device_open+0xc5/0x360
[ 81.136564][ T4354] dvb_device_open+0xc5/0x360
[ 81.141277][ T4354] chrdev_open+0x585/0x5f0
[ 81.145737][ T4354] ? cd_forget+0x160/0x160
[ 81.150191][ T4354] ? fsnotify_perm+0x3a7/0x560
[ 81.154988][ T4354] ? cd_forget+0x160/0x160
[ 81.159438][ T4354] do_dentry_open+0x7f7/0xf90
[ 81.164247][ T4354] ? vfs_open+0x2b/0x80
[ 81.168442][ T4354] path_openat+0x2718/0x2fb0
[ 81.173161][ T4354] ? __kasan_slab_alloc+0xa9/0xc0
[ 81.178222][ T4354] ? do_filp_open+0x400/0x400
[ 81.182939][ T4354] do_filp_open+0x1df/0x400
[ 81.187491][ T4354] ? vfs_tmpfile+0x300/0x300
[ 81.192147][ T4354] ? _raw_spin_unlock+0x24/0x40
[ 81.197038][ T4354] ? alloc_fd+0x59e/0x650
[ 81.201410][ T4354] do_sys_openat2+0x14b/0x500
[ 81.206121][ T4354] ? __lock_acquire+0x7b50/0x7b50
[ 81.211186][ T4354] ? do_sys_open+0xe0/0xe0
[ 81.215631][ T4354] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 81.221738][ T4354] ? lock_chain_count+0x20/0x20
[ 81.226631][ T4354] __x64_sys_openat+0x135/0x160
[ 81.231519][ T4354] do_syscall_64+0x4c/0xa0
[ 81.236113][ T4354] ? clear_bhb_loop+0x30/0x80
[ 81.241008][ T4354] ? clear_bhb_loop+0x30/0x80
[ 81.245718][ T4354] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.251647][ T4354] RIP: 0033:0x7ff665d5768e
[ 81.256094][ T4354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 81.275737][ T4354] RSP: 002b:00007ffdccbb07a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 81.284187][ T4354] RAX: ffffffffffffffda RBX: 00005555700aa500 RCX: 00007ff665d5768e
[ 81.292188][ T4354] RDX: 0000000000000002 RSI: 00007ffdccbb0880 RDI: ffffffffffffff9c
[ 81.300275][ T4354] RBP: 00007ffdccbb0880 R08: 0000000000000000 R09: 0000000000000000
[ 81.308414][ T4354] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 81.316415][ T4354] R13: 00007ff66600ffac R14: 00007ff66600ffa0 R15: 00007ff66600ffa0
[ 81.324414][ T4354]
[ 81.327557][ T4354] Kernel Offset: disabled
[ 81.331919][ T4354] Rebooting in 86400 seconds..