Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts.
2026/06/23 18:55:26 parsed 1 programs
2026/06/23 18:55:26 serving rpc on tcp://42915
[ 83.014923][ T5619] cgroup: Unknown subsys name 'net'
[ 83.266430][ T5619] cgroup: Unknown subsys name 'cpuset'
[ 83.312103][ T5619] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 84.999853][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.797188][ T1255] cfg80211: failed to load regulatory.db
[ 89.726051][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.727667][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.728337][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.729322][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.730245][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.476929][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.476953][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.559088][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.559108][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.170920][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.173058][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.173305][ T5695] bridge_slave_0: entered allmulticast mode
[ 93.178662][ T5695] bridge_slave_0: entered promiscuous mode
[ 93.213061][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.213293][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.213470][ T5695] bridge_slave_1: entered allmulticast mode
[ 93.215231][ T5695] bridge_slave_1: entered promiscuous mode
[ 93.283350][ T5695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.287527][ T5695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.330939][ T5695] team0: Port device team_slave_0 added
[ 93.339167][ T5695] team0: Port device team_slave_1 added
[ 93.384369][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.384380][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 93.384394][ T5695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.387453][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.387462][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 93.387476][ T5695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.480534][ T5695] hsr_slave_0: entered promiscuous mode
[ 93.482659][ T5695] hsr_slave_1: entered promiscuous mode
[ 94.403148][ T5695] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.435577][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 94.484394][ T5695] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.525678][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 94.529214][ T5695] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.556702][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 94.558782][ T5695] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.609893][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 94.814791][ T5695] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.861749][ T5695] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.880264][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.880434][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.913245][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.913399][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.502476][ T5695] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.601015][ T5695] veth0_vlan: entered promiscuous mode
[ 95.626975][ T5695] veth1_vlan: entered promiscuous mode
[ 95.706312][ T5695] veth0_macvtap: entered promiscuous mode
[ 95.718295][ T5695] veth1_macvtap: entered promiscuous mode
[ 95.839224][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.864408][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.894841][ T1295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.894889][ T1295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.894909][ T1295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.894927][ T1295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.656172][ T2332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/23 18:55:44 executed programs: 0
[ 97.739686][ T2332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.838008][ T4923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.840243][ T4923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.840988][ T4923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.858004][ T4923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.860471][ T4923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.391257][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.392109][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.392350][ T5745] bridge_slave_0: entered allmulticast mode
[ 98.395736][ T5745] bridge_slave_0: entered promiscuous mode
[ 98.400696][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.401064][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.402597][ T5745] bridge_slave_1: entered allmulticast mode
[ 98.405623][ T5745] bridge_slave_1: entered promiscuous mode
[ 98.465958][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.473465][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.517752][ T5745] team0: Port device team_slave_0 added
[ 98.520557][ T5745] team0: Port device team_slave_1 added
[ 98.588710][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.588721][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.588735][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.639122][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.639137][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.639162][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.886749][ T2332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.987343][ T5745] hsr_slave_0: entered promiscuous mode
[ 98.988464][ T5745] hsr_slave_1: entered promiscuous mode
[ 98.989518][ T5745] debugfs: 'hsr0' already exists in 'hsr'
[ 98.989598][ T5745] Cannot create hsr debugfs directory
[ 99.209325][ T2332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.865320][ T2332] bridge_slave_1: left allmulticast mode
[ 99.865457][ T2332] bridge_slave_1: left promiscuous mode
[ 99.869351][ T2332] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.993408][ T60] Bluetooth: hci0: command tx timeout
[ 100.055156][ T2332] bridge_slave_0: left allmulticast mode
[ 100.055189][ T2332] bridge_slave_0: left promiscuous mode
[ 100.055450][ T2332] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.772135][ T2332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.832319][ T2332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.853475][ T2332] bond0 (unregistering): Released all slaves
[ 101.006105][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1
[ 101.401531][ T2332] hsr_slave_0: left promiscuous mode
[ 101.441537][ T2332] hsr_slave_1: left promiscuous mode
[ 101.442405][ T2332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 101.442458][ T2332] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 101.482959][ T2332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 101.482984][ T2332] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 101.544398][ T2332] veth1_macvtap: left promiscuous mode
[ 101.544551][ T2332] veth0_macvtap: left promiscuous mode
[ 101.544734][ T2332] veth1_vlan: left promiscuous mode
[ 101.544909][ T2332] veth0_vlan: left promiscuous mode
[ 102.071569][ T60] Bluetooth: hci0: command tx timeout
[ 102.202199][ T2332] team0 (unregistering): Port device team_slave_1 removed
[ 102.242074][ T2332] team0 (unregistering): Port device team_slave_0 removed
[ 102.409749][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2
[ 103.469925][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.506674][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 103.507603][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.546829][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 103.548372][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.588948][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 103.589851][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.624959][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 103.745400][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.987481][ T5745] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.005358][ T67] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.005587][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.035530][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.036290][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.151506][ T60] Bluetooth: hci0: command tx timeout
[ 104.511304][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.602589][ T5745] veth0_vlan: entered promiscuous mode
[ 104.624999][ T5745] veth1_vlan: entered promiscuous mode
[ 104.673074][ T5745] veth0_macvtap: entered promiscuous mode
[ 104.682394][ T5745] veth1_macvtap: entered promiscuous mode
[ 104.798951][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.838590][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 104.861879][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.866540][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.898476][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.900860][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.241182][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.241201][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.335945][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.335963][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/06/23 18:55:52 executed programs: 2
[ 105.543982][ T5837] ==================================================================
[ 105.543996][ T5837] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x360
[ 105.544028][ T5837] Read of size 8 at addr ffff88802c7dd018 by task syz.0.19/5837
[ 105.544043][ T5837]
[ 105.544066][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 105.544086][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 105.544104][ T5837] Call Trace:
[ 105.544114][ T5837]
[ 105.544122][ T5837] dump_stack_lvl+0xe8/0x150
[ 105.544145][ T5837] print_address_description+0x55/0x1e0
[ 105.544169][ T5837] ? dvb_device_open+0xc4/0x360
[ 105.544192][ T5837] print_report+0x58/0x70
[ 105.544212][ T5837] kasan_report+0x117/0x150
[ 105.544234][ T5837] ? dvb_device_open+0xc4/0x360
[ 105.544260][ T5837] dvb_device_open+0xc4/0x360
[ 105.544285][ T5837] ? rt_spin_unlock+0x160/0x200
[ 105.544305][ T5837] chrdev_open+0x4d0/0x5f0
[ 105.544331][ T5837] ? __pfx_chrdev_open+0x10/0x10
[ 105.544355][ T5837] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0
[ 105.544381][ T5837] ? __pfx_chrdev_open+0x10/0x10
[ 105.544405][ T5837] do_dentry_open+0x83d/0x13e0
[ 105.544436][ T5837] vfs_open+0x3b/0x350
[ 105.544460][ T5837] ? path_openat+0x2e04/0x37e0
[ 105.544483][ T5837] path_openat+0x2e24/0x37e0
[ 105.544505][ T5837] ? __lock_acquire+0x6b5/0x2d10
[ 105.544529][ T5837] ? kmem_cache_alloc_noprof+0x354/0x6c0
[ 105.544556][ T5837] ? do_sys_openat2+0xcc/0x200
[ 105.544581][ T5837] do_file_open+0x23e/0x4a0
[ 105.544602][ T5837] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 105.544625][ T5837] ? __pfx_do_file_open+0x10/0x10
[ 105.544645][ T5837] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 105.544671][ T5837] ? alloc_fd+0x679/0x6f0
[ 105.544693][ T5837] do_sys_openat2+0x115/0x200
[ 105.544711][ T5837] ? __pfx_do_sys_openat2+0x10/0x10
[ 105.544731][ T5837] ? __task_pid_nr_ns+0x28/0x470
[ 105.544752][ T5837] __x64_sys_openat+0x138/0x170
[ 105.544771][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.544788][ T5837] do_syscall_64+0x174/0x580
[ 105.544811][ T5837] ? trace_irq_disable+0x3b/0x140
[ 105.544833][ T5837] ? clear_bhb_loop+0x40/0x90
[ 105.544854][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.544879][ T5837] RIP: 0033:0x7ffb40f4d68e
[ 105.544901][ T5837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 105.544917][ T5837] RSP: 002b:00007ffefbd505b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 105.544938][ T5837] RAX: ffffffffffffffda RBX: 000055558fdc1500 RCX: 00007ffb40f4d68e
[ 105.544952][ T5837] RDX: 0000000000000002 RSI: 00007ffefbd50690 RDI: ffffffffffffff9c
[ 105.544965][ T5837] RBP: 00007ffefbd50690 R08: 0000000000000000 R09: 0000000000000000
[ 105.544977][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 105.544989][ T5837] R13: 00007ffb41205fac R14: 00007ffb41205fa0 R15: 00007ffb41205fa0
[ 105.545010][ T5837]
[ 105.545017][ T5837]
[ 105.545021][ T5837] Allocated by task 1:
[ 105.545030][ T5837] kasan_save_track+0x3e/0x80
[ 105.545046][ T5837] __kasan_kmalloc+0x93/0xb0
[ 105.545062][ T5837] __kmalloc_cache_noprof+0x3d0/0x6d0
[ 105.545077][ T5837] dvb_register_device+0x2fd/0x21e0
[ 105.545098][ T5837] dvb_register_frontend+0x631/0x920
[ 105.545117][ T5837] vidtv_bridge_probe+0x9aa/0xf80
[ 105.545141][ T5837] platform_probe+0xf9/0x190
[ 105.545160][ T5837] really_probe+0x267/0xaf0
[ 105.545181][ T5837] __driver_probe_device+0x1e2/0x350
[ 105.545201][ T5837] driver_probe_device+0x4f/0x240
[ 105.545223][ T5837] __driver_attach+0x33c/0x600
[ 105.545243][ T5837] bus_for_each_dev+0x23e/0x2c0
[ 105.545257][ T5837] bus_add_driver+0x348/0x670
[ 105.545271][ T5837] driver_register+0x23a/0x320
[ 105.545293][ T5837] vidtv_bridge_init+0x3d/0x60
[ 105.545314][ T5837] do_one_initcall+0x250/0x870
[ 105.545332][ T5837] do_initcall_level+0x104/0x190
[ 105.545356][ T5837] do_initcalls+0x59/0xa0
[ 105.545375][ T5837] kernel_init_freeable+0x2a6/0x3e0
[ 105.545395][ T5837] kernel_init+0x1d/0x1d0
[ 105.545418][ T5837] ret_from_fork+0x514/0xb70
[ 105.545437][ T5837] ret_from_fork_asm+0x1a/0x30
[ 105.545458][ T5837]
[ 105.545462][ T5837] Freed by task 5836:
[ 105.545471][ T5837] kasan_save_track+0x3e/0x80
[ 105.545485][ T5837] kasan_save_free_info+0x46/0x50
[ 105.545508][ T5837] __kasan_slab_free+0x5c/0x80
[ 105.545523][ T5837] kfree+0x1c5/0x6c0
[ 105.545545][ T5837] dvb_device_open+0x2d6/0x360
[ 105.545565][ T5837] chrdev_open+0x4d0/0x5f0
[ 105.545586][ T5837] do_dentry_open+0x83d/0x13e0
[ 105.545610][ T5837] vfs_open+0x3b/0x350
[ 105.545633][ T5837] path_openat+0x2e24/0x37e0
[ 105.545652][ T5837] do_file_open+0x23e/0x4a0
[ 105.545670][ T5837] do_sys_openat2+0x115/0x200
[ 105.545684][ T5837] __x64_sys_openat+0x138/0x170
[ 105.545699][ T5837] do_syscall_64+0x174/0x580
[ 105.545718][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.545735][ T5837]
[ 105.545739][ T5837] The buggy address belongs to the object at ffff88802c7dd000
[ 105.545739][ T5837] which belongs to the cache kmalloc-512 of size 512
[ 105.545754][ T5837] The buggy address is located 24 bytes inside of
[ 105.545754][ T5837] freed 512-byte region [ffff88802c7dd000, ffff88802c7dd200)
[ 105.545772][ T5837]
[ 105.545777][ T5837] The buggy address belongs to the physical page:
[ 105.545800][ T5837] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c7dc
[ 105.545817][ T5837] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 105.545831][ T5837] flags: 0x80000000000040(head|node=0|zone=1)
[ 105.545853][ T5837] page_type: f5(slab)
[ 105.545875][ T5837] raw: 0080000000000040 ffff88813fe30c80 dead000000000100 dead000000000122
[ 105.545890][ T5837] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 105.545906][ T5837] head: 0080000000000040 ffff88813fe30c80 dead000000000100 dead000000000122
[ 105.545922][ T5837] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 105.545937][ T5837] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[ 105.545952][ T5837] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[ 105.545961][ T5837] page dumped because: kasan: bad access detected
[ 105.545978][ T5837] page_owner tracks the page as allocated
[ 105.545984][ T5837] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1255, tgid 1255 (kworker/0:3), ts 14448062089, free_ts 14440335109
[ 105.546015][ T5837] post_alloc_hook+0x1f9/0x250
[ 105.546041][ T5837] get_page_from_freelist+0x265c/0x26e0
[ 105.546059][ T5837] __alloc_frozen_pages_noprof+0x18d/0x380
[ 105.546077][ T5837] allocate_slab+0x76/0x5d0
[ 105.546097][ T5837] refill_objects+0x2d9/0x350
[ 105.546118][ T5837] __pcs_replace_empty_main+0x331/0x690
[ 105.546139][ T5837] __kmalloc_cache_noprof+0x482/0x6d0
[ 105.546156][ T5837] device_add+0xbe/0xb90
[ 105.546173][ T5837] cdev_device_add+0x1d6/0x390
[ 105.546195][ T5837] evdev_connect+0x354/0x400
[ 105.546210][ T5837] input_register_device+0xcd0/0x1130
[ 105.546233][ T5837] atkbd_connect+0x6f9/0x9f0
[ 105.546249][ T5837] serio_driver_probe+0x7f/0xa0
[ 105.546271][ T5837] really_probe+0x267/0xaf0
[ 105.546292][ T5837] __driver_probe_device+0x1e2/0x350
[ 105.546312][ T5837] driver_probe_device+0x4f/0x240
[ 105.546333][ T5837] page last free pid 1 tgid 1 stack trace:
[ 105.546342][ T5837] __free_frozen_pages+0x10af/0x1190
[ 105.546358][ T5837] stack_depot_save_flags+0x40e/0x810
[ 105.546381][ T5837] kasan_save_track+0x4f/0x80
[ 105.546395][ T5837] __kasan_kmalloc+0x93/0xb0
[ 105.546410][ T5837] __kmalloc_cache_noprof+0x3d0/0x6d0
[ 105.546427][ T5837] dvb_module_probe+0x64/0x310
[ 105.546447][ T5837] vidtv_bridge_probe+0x93b/0xf80
[ 105.546471][ T5837] platform_probe+0xf9/0x190
[ 105.546489][ T5837] really_probe+0x267/0xaf0
[ 105.546510][ T5837] __driver_probe_device+0x1e2/0x350
[ 105.546530][ T5837] driver_probe_device+0x4f/0x240
[ 105.546551][ T5837] __driver_attach+0x33c/0x600
[ 105.546571][ T5837] bus_for_each_dev+0x23e/0x2c0
[ 105.546583][ T5837] bus_add_driver+0x348/0x670
[ 105.546596][ T5837] driver_register+0x23a/0x320
[ 105.546618][ T5837] vidtv_bridge_init+0x3d/0x60
[ 105.546640][ T5837]
[ 105.546644][ T5837] Memory state around the buggy address:
[ 105.546654][ T5837] ffff88802c7dcf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.546666][ T5837] ffff88802c7dcf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.546677][ T5837] >ffff88802c7dd000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.546686][ T5837] ^
[ 105.546694][ T5837] ffff88802c7dd080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.546704][ T5837] ffff88802c7dd100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.546711][ T5837] ==================================================================
[ 105.546728][ T5837] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 105.546741][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 105.546759][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 105.546769][ T5837] Call Trace:
[ 105.546775][ T5837]
[ 105.546782][ T5837] vpanic+0x56c/0xa60
[ 105.546806][ T5837] ? __pfx_vpanic+0x10/0x10
[ 105.546832][ T5837] panic+0xc5/0xd0
[ 105.546854][ T5837] ? __pfx_panic+0x10/0x10
[ 105.546888][ T5837] ? dvb_device_open+0xc4/0x360
[ 105.546911][ T5837] ? rcu_is_watching+0x15/0xb0
[ 105.546939][ T5837] ? dvb_device_open+0xc4/0x360
[ 105.546962][ T5837] check_panic_on_warn+0x89/0xb0
[ 105.546983][ T5837] ? dvb_device_open+0xc4/0x360
[ 105.547005][ T5837] end_report+0x73/0x170
[ 105.547023][ T5837] ? dvb_device_open+0xc4/0x360
[ 105.547045][ T5837] kasan_report+0x128/0x150
[ 105.547063][ T5837] ? dvb_device_open+0xc4/0x360
[ 105.547089][ T5837] dvb_device_open+0xc4/0x360
[ 105.547111][ T5837] ? rt_spin_unlock+0x160/0x200
[ 105.547128][ T5837] chrdev_open+0x4d0/0x5f0
[ 105.547151][ T5837] ? __pfx_chrdev_open+0x10/0x10
[ 105.547174][ T5837] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0
[ 105.547199][ T5837] ? __pfx_chrdev_open+0x10/0x10
[ 105.547223][ T5837] do_dentry_open+0x83d/0x13e0
[ 105.547253][ T5837] vfs_open+0x3b/0x350
[ 105.547277][ T5837] ? path_openat+0x2e04/0x37e0
[ 105.547299][ T5837] path_openat+0x2e24/0x37e0
[ 105.547320][ T5837] ? __lock_acquire+0x6b5/0x2d10
[ 105.547342][ T5837] ? kmem_cache_alloc_noprof+0x354/0x6c0
[ 105.547369][ T5837] ? do_sys_openat2+0xcc/0x200
[ 105.547394][ T5837] do_file_open+0x23e/0x4a0
[ 105.547414][ T5837] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 105.547438][ T5837] ? __pfx_do_file_open+0x10/0x10
[ 105.547457][ T5837] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 105.547483][ T5837] ? alloc_fd+0x679/0x6f0
[ 105.547503][ T5837] do_sys_openat2+0x115/0x200
[ 105.547520][ T5837] ? __pfx_do_sys_openat2+0x10/0x10
[ 105.547540][ T5837] ? __task_pid_nr_ns+0x28/0x470
[ 105.547562][ T5837] __x64_sys_openat+0x138/0x170
[ 105.547580][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.547599][ T5837] do_syscall_64+0x174/0x580
[ 105.547620][ T5837] ? trace_irq_disable+0x3b/0x140
[ 105.547641][ T5837] ? clear_bhb_loop+0x40/0x90
[ 105.547661][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.547679][ T5837] RIP: 0033:0x7ffb40f4d68e
[ 105.547694][ T5837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 105.547708][ T5837] RSP: 002b:00007ffefbd505b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 105.547728][ T5837] RAX: ffffffffffffffda RBX: 000055558fdc1500 RCX: 00007ffb40f4d68e
[ 105.547741][ T5837] RDX: 0000000000000002 RSI: 00007ffefbd50690 RDI: ffffffffffffff9c
[ 105.547753][ T5837] RBP: 00007ffefbd50690 R08: 0000000000000000 R09: 0000000000000000
[ 105.547764][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 105.547776][ T5837] R13: 00007ffb41205fac R14: 00007ffb41205fa0 R15: 00007ffb41205fa0
[ 105.547796][ T5837]
[ 105.548049][ T5837] Kernel Offset: disabled