[ 92.188153][ T1255] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts.
2026/06/30 00:11:49 parsed 1 programs
2026/06/30 00:11:49 serving rpc on tcp://36219
[ 100.916702][ T5618] cgroup: Unknown subsys name 'net'
[ 101.168553][ T5618] cgroup: Unknown subsys name 'cpuset'
[ 101.212586][ T5618] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 103.225053][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 109.956700][ T4921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 109.958774][ T4921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 109.959605][ T4921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 109.960960][ T4921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 109.961735][ T4921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 110.937244][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.937264][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.049339][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.049361][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.496338][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.498102][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.498373][ T5700] bridge_slave_0: entered allmulticast mode
[ 113.500971][ T5700] bridge_slave_0: entered promiscuous mode
[ 113.549030][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.549270][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.549476][ T5700] bridge_slave_1: entered allmulticast mode
[ 113.552238][ T5700] bridge_slave_1: entered promiscuous mode
[ 113.629074][ T5700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 113.642068][ T5700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.694475][ T5700] team0: Port device team_slave_0 added
[ 113.699092][ T5700] team0: Port device team_slave_1 added
[ 113.746792][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.746812][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.746842][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.751006][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.751019][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.751039][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 114.221584][ T5700] hsr_slave_0: entered promiscuous mode
[ 114.230349][ T5700] hsr_slave_1: entered promiscuous mode
[ 115.120045][ T5700] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 115.156553][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 115.160653][ T5700] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 115.195142][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 115.196689][ T5700] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 115.231495][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 115.241795][ T5700] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 115.290114][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 115.481689][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0
[ 115.590150][ T5700] 8021q: adding VLAN 0 to HW filter on device team0
[ 115.632875][ T995] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.633252][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.689469][ T995] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.689596][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.258734][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.376792][ T5700] veth0_vlan: entered promiscuous mode
[ 116.427093][ T5700] veth1_vlan: entered promiscuous mode
[ 116.497282][ T5700] veth0_macvtap: entered promiscuous mode
[ 116.529965][ T5700] veth1_macvtap: entered promiscuous mode
[ 116.593512][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 116.614287][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 116.653367][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.653450][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.653489][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.653527][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.458266][ T995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.175585][ T995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/30 00:12:12 executed programs: 0
[ 118.888155][ T4921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 118.927143][ T4921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 118.930043][ T4921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 118.931800][ T4921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 118.958975][ T4921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 118.976471][ T995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.471793][ T995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.014950][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.015214][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.015434][ T5746] bridge_slave_0: entered allmulticast mode
[ 120.019480][ T5746] bridge_slave_0: entered promiscuous mode
[ 120.064033][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.064481][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.064809][ T5746] bridge_slave_1: entered allmulticast mode
[ 120.097474][ T5746] bridge_slave_1: entered promiscuous mode
[ 120.183065][ T995] bridge_slave_1: left allmulticast mode
[ 120.183277][ T995] bridge_slave_1: left promiscuous mode
[ 120.189723][ T995] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.343417][ T995] bridge_slave_0: left allmulticast mode
[ 120.343446][ T995] bridge_slave_0: left promiscuous mode
[ 120.345757][ T995] bridge0: port 1(bridge_slave_0) entered disabled state
[ 121.125087][ T60] Bluetooth: hci0: command tx timeout
[ 121.134198][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 121.212977][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 121.234586][ T995] bond0 (unregistering): Released all slaves
[ 121.378594][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 121.396134][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 121.491665][ T5746] team0: Port device team_slave_0 added
[ 121.515785][ T5746] team0: Port device team_slave_1 added
[ 121.712132][ T995] hsr_slave_0: left promiscuous mode
[ 121.752071][ T995] hsr_slave_1: left promiscuous mode
[ 121.753423][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 121.757974][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 121.796597][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 121.796628][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 121.896296][ T995] veth1_macvtap: left promiscuous mode
[ 121.896563][ T995] veth0_macvtap: left promiscuous mode
[ 121.896901][ T995] veth1_vlan: left promiscuous mode
[ 121.897262][ T995] veth0_vlan: left promiscuous mode
[ 122.684241][ T995] team0 (unregistering): Port device team_slave_1 removed
[ 122.742722][ T995] team0 (unregistering): Port device team_slave_0 removed
[ 122.966084][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1
[ 123.064783][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 123.064797][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.064816][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 123.070853][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.070865][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.070886][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.202439][ T60] Bluetooth: hci0: command tx timeout
[ 123.281234][ T5746] hsr_slave_0: entered promiscuous mode
[ 123.287507][ T5746] hsr_slave_1: entered promiscuous mode
[ 124.115900][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2
[ 125.282157][ T60] Bluetooth: hci0: command tx timeout
[ 125.660902][ T5746] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 125.725641][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 125.729360][ T5746] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 125.770471][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 125.783289][ T5746] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 125.830506][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 125.835708][ T5746] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 125.880345][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 126.107946][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0
[ 126.225318][ T5746] 8021q: adding VLAN 0 to HW filter on device team0
[ 126.249577][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.249829][ T1506] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 126.310901][ T44] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.311100][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.135413][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.350389][ T5746] veth0_vlan: entered promiscuous mode
[ 127.364752][ T60] Bluetooth: hci0: command tx timeout
[ 127.446020][ T5746] veth1_vlan: entered promiscuous mode
[ 127.551484][ T5746] veth0_macvtap: entered promiscuous mode
[ 127.571290][ T5746] veth1_macvtap: entered promiscuous mode
[ 127.621474][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.643383][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.690271][ T995] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.690325][ T995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.690364][ T995] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.690402][ T995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.122758][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.122780][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.222468][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.222489][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/06/30 00:12:21 executed programs: 2
[ 128.536687][ T5877] ==================================================================
[ 128.536702][ T5877] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350
[ 128.536735][ T5877] Read of size 8 at addr ffff88802c78a418 by task syz.0.19/5877
[ 128.536749][ T5877]
[ 128.536771][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.536795][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 128.536814][ T5877] Call Trace:
[ 128.536825][ T5877]
[ 128.536833][ T5877] dump_stack_lvl+0xe8/0x150
[ 128.536856][ T5877] print_address_description+0x55/0x1e0
[ 128.536882][ T5877] ? dvb_device_open+0xc4/0x350
[ 128.536906][ T5877] print_report+0x58/0x70
[ 128.536928][ T5877] kasan_report+0x117/0x150
[ 128.536951][ T5877] ? dvb_device_open+0xc4/0x350
[ 128.536980][ T5877] dvb_device_open+0xc4/0x350
[ 128.537006][ T5877] ? rt_spin_unlock+0x163/0x200
[ 128.537026][ T5877] chrdev_open+0x4dc/0x600
[ 128.537066][ T5877] ? __pfx_chrdev_open+0x10/0x10
[ 128.537091][ T5877] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 128.537123][ T5877] ? __pfx_chrdev_open+0x10/0x10
[ 128.537154][ T5877] do_dentry_open+0x849/0x1420
[ 128.537181][ T5877] vfs_open+0x3b/0x350
[ 128.537197][ T5877] ? path_openat+0x2e49/0x3850
[ 128.537220][ T5877] path_openat+0x2e60/0x3850
[ 128.537245][ T5877] ? kmem_cache_alloc_noprof+0x358/0x680
[ 128.537262][ T5877] ? __x64_sys_openat+0x138/0x170
[ 128.537279][ T5877] ? do_syscall_64+0x174/0x580
[ 128.537302][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.537328][ T5877] do_file_open+0x23e/0x4a0
[ 128.537350][ T5877] ? lockdep_hardirqs_on+0x7a/0x110
[ 128.537373][ T5877] ? __pfx_do_file_open+0x10/0x10
[ 128.537404][ T5877] ? alloc_fd+0x654/0x6d0
[ 128.537425][ T5877] do_sys_openat2+0x115/0x200
[ 128.537444][ T5877] ? __pfx_do_sys_openat2+0x10/0x10
[ 128.537462][ T5877] ? exc_page_fault+0x6a/0xc0
[ 128.537484][ T5877] ? do_user_addr_fault+0xc4a/0x1340
[ 128.537507][ T5877] __x64_sys_openat+0x138/0x170
[ 128.537527][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.537548][ T5877] do_syscall_64+0x174/0x580
[ 128.537572][ T5877] ? trace_irq_disable+0x3b/0x140
[ 128.537595][ T5877] ? clear_bhb_loop+0x40/0x90
[ 128.537615][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.537634][ T5877] RIP: 0033:0x7fea4f19d68e
[ 128.537662][ T5877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 128.537680][ T5877] RSP: 002b:00007ffe18fc8258 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 128.537707][ T5877] RAX: ffffffffffffffda RBX: 0000555582485500 RCX: 00007fea4f19d68e
[ 128.537719][ T5877] RDX: 0000000000000002 RSI: 00007ffe18fc8330 RDI: ffffffffffffff9c
[ 128.537731][ T5877] RBP: 00007ffe18fc8330 R08: 0000000000000000 R09: 0000000000000000
[ 128.537741][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 128.537752][ T5877] R13: 00007fea4f455fac R14: 00007fea4f455fa0 R15: 00007fea4f455fa0
[ 128.537772][ T5877]
[ 128.537779][ T5877]
[ 128.537783][ T5877] Allocated by task 1:
[ 128.537791][ T5877] kasan_save_track+0x3e/0x80
[ 128.537810][ T5877] __kasan_kmalloc+0x93/0xb0
[ 128.537827][ T5877] __kmalloc_cache_noprof+0x3cd/0x670
[ 128.537845][ T5877] dvb_register_device+0x309/0x1dd0
[ 128.537868][ T5877] dvb_register_frontend+0x619/0x900
[ 128.537888][ T5877] vidtv_bridge_probe+0x9d5/0xf60
[ 128.537904][ T5877] platform_probe+0xf9/0x190
[ 128.537924][ T5877] really_probe+0x254/0xae0
[ 128.537947][ T5877] __driver_probe_device+0x1e8/0x360
[ 128.537968][ T5877] driver_probe_device+0x4f/0x240
[ 128.537990][ T5877] __driver_attach+0x339/0x600
[ 128.538011][ T5877] bus_for_each_dev+0x23e/0x2c0
[ 128.538026][ T5877] bus_add_driver+0x348/0x670
[ 128.538051][ T5877] driver_register+0x23a/0x320
[ 128.538075][ T5877] vidtv_bridge_init+0x3d/0x60
[ 128.538096][ T5877] do_one_initcall+0x250/0x870
[ 128.538115][ T5877] do_initcall_level+0x10a/0x1a0
[ 128.538136][ T5877] do_initcalls+0x59/0xa0
[ 128.538156][ T5877] kernel_init_freeable+0x29d/0x3e0
[ 128.538173][ T5877] kernel_init+0x1d/0x1d0
[ 128.538198][ T5877] ret_from_fork+0x514/0xb70
[ 128.538216][ T5877] ret_from_fork_asm+0x1a/0x30
[ 128.538235][ T5877]
[ 128.538239][ T5877] Freed by task 5876:
[ 128.538247][ T5877] kasan_save_track+0x3e/0x80
[ 128.538264][ T5877] kasan_save_free_info+0x40/0x50
[ 128.538288][ T5877] __kasan_slab_free+0x5c/0x80
[ 128.538304][ T5877] kfree+0x1c5/0x6c0
[ 128.538316][ T5877] dvb_device_open+0x2c1/0x350
[ 128.538339][ T5877] chrdev_open+0x4dc/0x600
[ 128.538362][ T5877] do_dentry_open+0x849/0x1420
[ 128.538376][ T5877] vfs_open+0x3b/0x350
[ 128.538390][ T5877] path_openat+0x2e60/0x3850
[ 128.538410][ T5877] do_file_open+0x23e/0x4a0
[ 128.538430][ T5877] do_sys_openat2+0x115/0x200
[ 128.538445][ T5877] __x64_sys_openat+0x138/0x170
[ 128.538461][ T5877] do_syscall_64+0x174/0x580
[ 128.538481][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.538503][ T5877]
[ 128.538507][ T5877] The buggy address belongs to the object at ffff88802c78a400
[ 128.538507][ T5877] which belongs to the cache kmalloc-512 of size 512
[ 128.538523][ T5877] The buggy address is located 24 bytes inside of
[ 128.538523][ T5877] freed 512-byte region [ffff88802c78a400, ffff88802c78a600)
[ 128.538549][ T5877]
[ 128.538555][ T5877] The buggy address belongs to the physical page:
[ 128.538575][ T5877] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c788
[ 128.538597][ T5877] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 128.538614][ T5877] flags: 0x80000000000040(head|node=0|zone=1)
[ 128.538637][ T5877] page_type: f5(slab)
[ 128.538653][ T5877] raw: 0080000000000040 ffff88813fea9c80 dead000000000100 dead000000000122
[ 128.538668][ T5877] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 128.538683][ T5877] head: 0080000000000040 ffff88813fea9c80 dead000000000100 dead000000000122
[ 128.538697][ T5877] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 128.538712][ T5877] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[ 128.538726][ T5877] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[ 128.538734][ T5877] page dumped because: kasan: bad access detected
[ 128.538747][ T5877] page_owner tracks the page as allocated
[ 128.538753][ T5877] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20965619431
[ 128.538781][ T5877] post_alloc_hook+0x1f9/0x250
[ 128.538799][ T5877] get_page_from_freelist+0x264c/0x26c0
[ 128.538818][ T5877] __alloc_frozen_pages_noprof+0x1a6/0x390
[ 128.538838][ T5877] allocate_slab+0x79/0x5e0
[ 128.538862][ T5877] refill_objects+0x2d8/0x350
[ 128.538884][ T5877] __pcs_replace_empty_main+0x330/0x690
[ 128.538906][ T5877] __kmalloc_cache_noprof+0x467/0x670
[ 128.538923][ T5877] device_add+0xb6/0xb80
[ 128.538942][ T5877] wakeup_source_sysfs_add+0x1d3/0x2c0
[ 128.538966][ T5877] wakeup_source_register+0x17f/0x390
[ 128.538984][ T5877] device_wakeup_enable+0xd0/0x270
[ 128.539002][ T5877] cmos_platform_probe+0x54c/0xdc0
[ 128.539017][ T5877] platform_probe+0xf9/0x190
[ 128.539047][ T5877] really_probe+0x254/0xae0
[ 128.539072][ T5877] __driver_probe_device+0x1e8/0x360
[ 128.539095][ T5877] driver_probe_device+0x4f/0x240
[ 128.539122][ T5877] page_owner free stack trace missing
[ 128.539129][ T5877]
[ 128.539134][ T5877] Memory state around the buggy address:
[ 128.539144][ T5877] ffff88802c78a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 128.539158][ T5877] ffff88802c78a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 128.539172][ T5877] >ffff88802c78a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 128.539182][ T5877] ^
[ 128.539193][ T5877] ffff88802c78a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 128.539206][ T5877] ffff88802c78a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 128.539215][ T5877] ==================================================================
[ 128.539323][ T5877] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 128.539341][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.539365][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 128.539377][ T5877] Call Trace:
[ 128.539385][ T5877]
[ 128.539394][ T5877] vpanic+0x56c/0xa60
[ 128.539429][ T5877] ? __pfx_vpanic+0x10/0x10
[ 128.539458][ T5877] ? __pfx___schedule+0x10/0x10
[ 128.539485][ T5877] panic+0xc5/0xd0
[ 128.539515][ T5877] ? __pfx_panic+0x10/0x10
[ 128.539545][ T5877] ? preempt_schedule_thunk+0x16/0x40
[ 128.539582][ T5877] ? dvb_device_open+0xc4/0x350
[ 128.539611][ T5877] check_panic_on_warn+0x89/0xb0
[ 128.539638][ T5877] ? dvb_device_open+0xc4/0x350
[ 128.539669][ T5877] end_report+0x73/0x170
[ 128.539693][ T5877] ? dvb_device_open+0xc4/0x350
[ 128.539721][ T5877] kasan_report+0x128/0x150
[ 128.539747][ T5877] ? dvb_device_open+0xc4/0x350
[ 128.539781][ T5877] dvb_device_open+0xc4/0x350
[ 128.539812][ T5877] ? rt_spin_unlock+0x163/0x200
[ 128.539833][ T5877] chrdev_open+0x4dc/0x600
[ 128.539866][ T5877] ? __pfx_chrdev_open+0x10/0x10
[ 128.539896][ T5877] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 128.539929][ T5877] ? __pfx_chrdev_open+0x10/0x10
[ 128.539959][ T5877] do_dentry_open+0x849/0x1420
[ 128.539986][ T5877] vfs_open+0x3b/0x350
[ 128.540005][ T5877] ? path_openat+0x2e49/0x3850
[ 128.540034][ T5877] path_openat+0x2e60/0x3850
[ 128.540073][ T5877] ? kmem_cache_alloc_noprof+0x358/0x680
[ 128.540095][ T5877] ? __x64_sys_openat+0x138/0x170
[ 128.540115][ T5877] ? do_syscall_64+0x174/0x580
[ 128.540141][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.540173][ T5877] do_file_open+0x23e/0x4a0
[ 128.540200][ T5877] ? lockdep_hardirqs_on+0x7a/0x110
[ 128.540228][ T5877] ? __pfx_do_file_open+0x10/0x10
[ 128.540268][ T5877] ? alloc_fd+0x654/0x6d0
[ 128.540294][ T5877] do_sys_openat2+0x115/0x200
[ 128.540317][ T5877] ? __pfx_do_sys_openat2+0x10/0x10
[ 128.540340][ T5877] ? exc_page_fault+0x6a/0xc0
[ 128.540366][ T5877] ? do_user_addr_fault+0xc4a/0x1340
[ 128.540393][ T5877] __x64_sys_openat+0x138/0x170
[ 128.540416][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.540438][ T5877] do_syscall_64+0x174/0x580
[ 128.540463][ T5877] ? trace_irq_disable+0x3b/0x140
[ 128.540490][ T5877] ? clear_bhb_loop+0x40/0x90
[ 128.540514][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.540535][ T5877] RIP: 0033:0x7fea4f19d68e
[ 128.540554][ T5877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 128.540572][ T5877] RSP: 002b:00007ffe18fc8258 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 128.540596][ T5877] RAX: ffffffffffffffda RBX: 0000555582485500 RCX: 00007fea4f19d68e
[ 128.540612][ T5877] RDX: 0000000000000002 RSI: 00007ffe18fc8330 RDI: ffffffffffffff9c
[ 128.540626][ T5877] RBP: 00007ffe18fc8330 R08: 0000000000000000 R09: 0000000000000000
[ 128.540640][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 128.540654][ T5877] R13: 00007fea4f455fac R14: 00007fea4f455fa0 R15: 00007fea4f455fa0
[ 128.540679][ T5877]
[ 128.540983][ T5877] Kernel Offset: disabled