Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts.
2026/06/29 17:30:16 parsed 1 programs
2026/06/29 17:30:16 serving rpc on tcp://34797
[ 70.357256][ T29] kauditd_printk_skb: 2 callbacks suppressed
[ 70.357271][ T29] audit: type=1400 audit(1782754216.509:129): avc: denied { node_bind } for pid=5611 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 72.635013][ T29] audit: type=1400 audit(1782754218.789:130): avc: denied { mounton } for pid=5618 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 72.658631][ T29] audit: type=1400 audit(1782754218.809:131): avc: denied { mount } for pid=5618 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 72.662099][ T5618] cgroup: Unknown subsys name 'net'
[ 72.687713][ T29] audit: type=1400 audit(1782754218.839:132): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 72.834572][ T5618] cgroup: Unknown subsys name 'cpuset'
[ 72.843773][ T5618] cgroup: Unknown subsys name 'rlimit'
[ 72.960794][ T29] audit: type=1400 audit(1782754219.109:133): avc: denied { setattr } for pid=5618 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 72.984220][ T29] audit: type=1400 audit(1782754219.109:134): avc: denied { create } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 73.005004][ T29] audit: type=1400 audit(1782754219.119:135): avc: denied { write } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 73.047121][ T29] audit: type=1400 audit(1782754219.119:136): avc: denied { read } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 73.073340][ T29] audit: type=1400 audit(1782754219.139:137): avc: denied { mounton } for pid=5618 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 73.099034][ T29] audit: type=1400 audit(1782754219.139:138): avc: denied { mount } for pid=5618 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 73.120200][ T5622] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 74.187721][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 76.263145][ T29] kauditd_printk_skb: 4 callbacks suppressed
[ 76.263161][ T29] audit: type=1400 audit(1782754222.419:143): avc: denied { execmem } for pid=5632 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 76.318807][ T29] audit: type=1400 audit(1782754222.449:144): avc: denied { read } for pid=5633 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 76.349247][ T29] audit: type=1400 audit(1782754222.449:145): avc: denied { open } for pid=5633 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 76.373011][ T29] audit: type=1400 audit(1782754222.449:146): avc: denied { mounton } for pid=5633 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 76.397116][ T29] audit: type=1400 audit(1782754222.549:147): avc: denied { mounton } for pid=5633 comm="syz-executor" path="/root/syzkaller.ZWWACG/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 76.421503][ T29] audit: type=1400 audit(1782754222.549:148): avc: denied { mount } for pid=5633 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 76.443576][ T29] audit: type=1400 audit(1782754222.549:149): avc: denied { mounton } for pid=5633 comm="syz-executor" path="/root/syzkaller.ZWWACG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 76.469008][ T29] audit: type=1400 audit(1782754222.549:150): avc: denied { mount } for pid=5633 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 76.491113][ T29] audit: type=1400 audit(1782754222.549:151): avc: denied { mounton } for pid=5633 comm="syz-executor" path="/root/syzkaller.ZWWACG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 76.518343][ T29] audit: type=1400 audit(1782754222.549:152): avc: denied { mounton } for pid=5633 comm="syz-executor" path="/root/syzkaller.ZWWACG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 76.550245][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 77.233749][ T5653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 77.243516][ T5653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 77.251041][ T5653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 77.258928][ T5653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 77.268464][ T5653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.962417][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.983253][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.013901][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.022951][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.607822][ T5705] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.615252][ T5705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.622806][ T5705] bridge_slave_0: entered allmulticast mode
[ 79.630321][ T5705] bridge_slave_0: entered promiscuous mode
[ 79.642494][ T5705] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.649585][ T5705] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.656745][ T5705] bridge_slave_1: entered allmulticast mode
[ 79.665041][ T5705] bridge_slave_1: entered promiscuous mode
[ 79.686312][ T5705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.698537][ T5705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.727777][ T5705] team0: Port device team_slave_0 added
[ 79.735801][ T5705] team0: Port device team_slave_1 added
[ 79.755149][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.762103][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 79.788078][ T5705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.800301][ T5705] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.807243][ T5705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 79.833135][ T5705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.865806][ T5705] hsr_slave_0: entered promiscuous mode
[ 79.872322][ T5705] hsr_slave_1: entered promiscuous mode
[ 79.982063][ T5705] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 79.994604][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 80.002656][ T5705] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 80.012231][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 80.023352][ T5705] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 80.032588][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 80.040692][ T5705] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 80.049366][ T5705] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 80.109738][ T5705] 8021q: adding VLAN 0 to HW filter on device bond0
[ 80.130637][ T5705] 8021q: adding VLAN 0 to HW filter on device team0
[ 80.143265][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.150381][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 80.164609][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.171717][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.410438][ T5705] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 80.450406][ T5705] veth0_vlan: entered promiscuous mode
[ 80.462100][ T5705] veth1_vlan: entered promiscuous mode
[ 80.487265][ T5705] veth0_macvtap: entered promiscuous mode
[ 80.497393][ T5705] veth1_macvtap: entered promiscuous mode
[ 80.513714][ T5705] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 80.527235][ T5705] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.540961][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.549942][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.559374][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.568594][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.688588][ T83] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.768897][ T83] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.844887][ T83] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.945362][ T83] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/29 17:30:27 executed programs: 0
[ 81.083584][ T5653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.091145][ T5653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.100711][ T5653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.109889][ T5653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.117777][ T5653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.299019][ T10] cfg80211: failed to load regulatory.db
[ 81.572278][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.579396][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.586532][ T5747] bridge_slave_0: entered allmulticast mode
[ 81.593555][ T5747] bridge_slave_0: entered promiscuous mode
[ 81.600856][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.608227][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.616744][ T5747] bridge_slave_1: entered allmulticast mode
[ 81.623617][ T5747] bridge_slave_1: entered promiscuous mode
[ 81.650187][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.661114][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.686017][ T5747] team0: Port device team_slave_0 added
[ 81.694113][ T5747] team0: Port device team_slave_1 added
[ 81.717578][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.724553][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 81.750528][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.763071][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.769989][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 81.795927][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.837968][ T5747] hsr_slave_0: entered promiscuous mode
[ 81.844172][ T5747] hsr_slave_1: entered promiscuous mode
[ 81.850589][ T5747] debugfs: 'hsr0' already exists in 'hsr'
[ 81.856678][ T5747] Cannot create hsr debugfs directory
[ 83.212461][ T5653] Bluetooth: hci0: command tx timeout
[ 83.703802][ T83] bridge_slave_1: left allmulticast mode
[ 83.709850][ T83] bridge_slave_1: left promiscuous mode
[ 83.716389][ T83] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.726800][ T83] bridge_slave_0: left allmulticast mode
[ 83.733132][ T83] bridge_slave_0: left promiscuous mode
[ 83.738947][ T83] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.836242][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 83.849059][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 83.861235][ T83] bond0 (unregistering): Released all slaves
[ 83.973699][ T83] hsr_slave_0: left promiscuous mode
[ 83.979768][ T83] hsr_slave_1: left promiscuous mode
[ 83.987183][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 83.996599][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 84.005662][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 84.013819][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 84.029896][ T83] veth1_macvtap: left promiscuous mode
[ 84.035818][ T83] veth0_macvtap: left promiscuous mode
[ 84.041411][ T83] veth1_vlan: left promiscuous mode
[ 84.047256][ T83] veth0_vlan: left promiscuous mode
[ 84.127073][ T29] kauditd_printk_skb: 21 callbacks suppressed
[ 84.127089][ T29] audit: type=1400 audit(1782754230.279:174): avc: denied { write } for pid=5765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.234153][ T29] audit: type=1400 audit(1782754230.389:175): avc: denied { write } for pid=5776 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.311421][ T83] team0 (unregistering): Port device team_slave_1 removed
[ 84.328498][ T83] team0 (unregistering): Port device team_slave_0 removed
[ 84.399462][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[ 84.663363][ T29] audit: type=1400 audit(1782754230.819:176): avc: denied { write } for pid=5779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.750075][ T29] audit: type=1400 audit(1782754230.899:177): avc: denied { write } for pid=5790 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.798354][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.810608][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 84.818653][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.829338][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 84.837366][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.846022][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 84.853737][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.865354][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 84.979322][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.025655][ T5747] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.040252][ T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.047500][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.066217][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.073352][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.211096][ T29] audit: type=1400 audit(1782754231.359:178): avc: denied { write } for pid=5799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 85.292751][ T5653] Bluetooth: hci0: command tx timeout
[ 85.308703][ T29] audit: type=1400 audit(1782754231.459:179): avc: denied { write } for pid=5814 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 85.507813][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.555476][ T5747] veth0_vlan: entered promiscuous mode
[ 85.570924][ T5747] veth1_vlan: entered promiscuous mode
[ 85.604888][ T5747] veth0_macvtap: entered promiscuous mode
[ 85.614717][ T5747] veth1_macvtap: entered promiscuous mode
[ 85.640815][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.650255][ T29] audit: type=1400 audit(1782754231.799:180): avc: denied { write } for pid=5819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 85.678810][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.696032][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.710340][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.721207][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.744726][ T29] audit: type=1400 audit(1782754231.899:181): avc: denied { write } for pid=5833 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 85.773888][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.825884][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.835434][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.858792][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.866700][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.913929][ T29] audit: type=1400 audit(1782754232.069:182): avc: denied { read write } for pid=5835 comm="syz.0.17" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 85.938950][ T29] audit: type=1400 audit(1782754232.069:183): avc: denied { open } for pid=5835 comm="syz.0.17" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[ 85.991123][ T5837] ==================================================================
[ 85.999187][ T5837] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0
[ 86.006884][ T5837] Read of size 8 at addr ffff88802d34f618 by task syz.0.19/5837
[ 86.014482][ T5837]
[ 86.016789][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 86.016803][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 86.016814][ T5837] Call Trace:
[ 86.016819][ T5837]
[ 86.016823][ T5837] dump_stack_lvl+0x100/0x190
[ 86.016843][ T5837] print_report+0x13d/0x4b0
[ 86.016859][ T5837] ? __virt_addr_valid+0x239/0x430
[ 86.016873][ T5837] ? dvb_device_open+0x33f/0x3b0
[ 86.016886][ T5837] kasan_report+0xdf/0x1c0
[ 86.016901][ T5837] ? dvb_device_open+0x33f/0x3b0
[ 86.016914][ T5837] ? __pfx_dvb_device_open+0x10/0x10
[ 86.016927][ T5837] dvb_device_open+0x33f/0x3b0
[ 86.016939][ T5837] ? __pfx_dvb_device_open+0x10/0x10
[ 86.016951][ T5837] chrdev_open+0x234/0x6a0
[ 86.016963][ T5837] ? __pfx_chrdev_open+0x10/0x10
[ 86.016974][ T5837] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 86.016989][ T5837] do_dentry_open+0x6ab/0x14d0
[ 86.016999][ T5837] ? __pfx_chrdev_open+0x10/0x10
[ 86.017011][ T5837] vfs_open+0x82/0x3f0
[ 86.017025][ T5837] path_openat+0x2873/0x4280
[ 86.017039][ T5837] ? __pfx_path_openat+0x10/0x10
[ 86.017051][ T5837] do_file_open+0x20e/0x430
[ 86.017063][ T5837] ? __pfx_do_file_open+0x10/0x10
[ 86.017082][ T5837] ? alloc_fd+0x471/0x7a0
[ 86.017095][ T5837] ? do_getname+0x191/0x390
[ 86.017108][ T5837] do_sys_openat2+0x10f/0x1e0
[ 86.017121][ T5837] ? __pfx_do_sys_openat2+0x10/0x10
[ 86.017134][ T5837] ? __pfx_restore_altstack+0x10/0x10
[ 86.017147][ T5837] __x64_sys_openat+0x12d/0x210
[ 86.017160][ T5837] ? __pfx___x64_sys_openat+0x10/0x10
[ 86.017173][ T5837] ? __do_sys_rt_sigreturn+0x1da/0x2c0
[ 86.017188][ T5837] do_syscall_64+0x115/0x870
[ 86.017204][ T5837] ? clear_bhb_loop+0x40/0x90
[ 86.017216][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.017228][ T5837] RIP: 0033:0x7f104495d68e
[ 86.017240][ T5837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 86.017253][ T5837] RSP: 002b:00007ffe14c669d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 86.017267][ T5837] RAX: ffffffffffffffda RBX: 000055558869d500 RCX: 00007f104495d68e
[ 86.017274][ T5837] RDX: 0000000000000002 RSI: 00007ffe14c66ab0 RDI: ffffffffffffff9c
[ 86.017281][ T5837] RBP: 00007ffe14c66ab0 R08: 0000000000000000 R09: 0000000000000000
[ 86.017288][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 86.017295][ T5837] R13: 00007f1044c15fac R14: 00007f1044c15fa0 R15: 00007f1044c15fa0
[ 86.017305][ T5837]
[ 86.017309][ T5837]
[ 86.265958][ T5837] Allocated by task 1:
[ 86.270012][ T5837] kasan_save_stack+0x30/0x50
[ 86.274679][ T5837] kasan_save_track+0x14/0x30
[ 86.279335][ T5837] __kasan_kmalloc+0xaa/0xb0
[ 86.283903][ T5837] __kmalloc_cache_noprof+0x2e5/0x6c0
[ 86.289261][ T5837] dvb_register_device+0x1d6/0x1e20
[ 86.294438][ T5837] dvb_register_frontend+0x552/0x820
[ 86.299704][ T5837] vidtv_bridge_probe+0x44b/0xa30
[ 86.304710][ T5837] platform_probe+0x106/0x1d0
[ 86.309373][ T5837] really_probe+0x241/0xa60
[ 86.313854][ T5837] __driver_probe_device+0x20e/0x450
[ 86.319117][ T5837] driver_probe_device+0x4a/0x140
[ 86.324119][ T5837] __driver_attach+0x21f/0x5b0
[ 86.328860][ T5837] bus_for_each_dev+0x13e/0x1d0
[ 86.333693][ T5837] bus_add_driver+0x305/0x5b0
[ 86.338346][ T5837] driver_register+0x1e2/0x360
[ 86.343089][ T5837] vidtv_bridge_init+0x52/0x80
[ 86.347834][ T5837] do_one_initcall+0x11d/0x700
[ 86.352574][ T5837] kernel_init_freeable+0x6ea/0x7b0
[ 86.357749][ T5837] kernel_init+0x1f/0x1e0
[ 86.362056][ T5837] ret_from_fork+0x72b/0xd50
[ 86.366628][ T5837] ret_from_fork_asm+0x1a/0x30
[ 86.371366][ T5837]
[ 86.373664][ T5837] Freed by task 5836:
[ 86.377617][ T5837] kasan_save_stack+0x30/0x50
[ 86.382272][ T5837] kasan_save_track+0x14/0x30
[ 86.386927][ T5837] kasan_save_free_info+0x3b/0x70
[ 86.391934][ T5837] __kasan_slab_free+0x5f/0x80
[ 86.396677][ T5837] kfree+0x22b/0x6c0
[ 86.400554][ T5837] dvb_device_put.part.0+0x57/0x90
[ 86.405646][ T5837] dvb_device_open+0x2ba/0x3b0
[ 86.410390][ T5837] chrdev_open+0x234/0x6a0
[ 86.414785][ T5837] do_dentry_open+0x6ab/0x14d0
[ 86.419525][ T5837] vfs_open+0x82/0x3f0
[ 86.423572][ T5837] path_openat+0x2873/0x4280
[ 86.428138][ T5837] do_file_open+0x20e/0x430
[ 86.432618][ T5837] do_sys_openat2+0x10f/0x1e0
[ 86.437273][ T5837] __x64_sys_openat+0x12d/0x210
[ 86.442104][ T5837] do_syscall_64+0x115/0x870
[ 86.446679][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.452551][ T5837]
[ 86.454853][ T5837] The buggy address belongs to the object at ffff88802d34f600
[ 86.454853][ T5837] which belongs to the cache kmalloc-256 of size 256
[ 86.468881][ T5837] The buggy address is located 24 bytes inside of
[ 86.468881][ T5837] freed 256-byte region [ffff88802d34f600, ffff88802d34f700)
[ 86.482564][ T5837]
[ 86.484876][ T5837] The buggy address belongs to the physical page:
[ 86.491259][ T5837] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d34e
[ 86.499997][ T5837] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 86.508472][ T5837] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 86.515994][ T5837] page_type: f5(slab)
[ 86.519955][ T5837] raw: 00fff00000000040 ffff88813fe02b40 dead000000000100 dead000000000122
[ 86.528520][ T5837] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 86.537082][ T5837] head: 00fff00000000040 ffff88813fe02b40 dead000000000100 dead000000000122
[ 86.545729][ T5837] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 86.554379][ T5837] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 86.563028][ T5837] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 86.571667][ T5837] page dumped because: kasan: bad access detected
[ 86.578057][ T5837] page_owner tracks the page as allocated
[ 86.583742][ T5837] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13330676066, free_ts 0
[ 86.603428][ T5837] post_alloc_hook+0xfd/0x120
[ 86.608098][ T5837] get_page_from_freelist+0xf48/0x3530
[ 86.613535][ T5837] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 86.619405][ T5837] new_slab+0xa2/0x650
[ 86.623449][ T5837] refill_objects+0xe3/0x410
[ 86.628016][ T5837] __pcs_replace_empty_main+0x376/0x680
[ 86.633548][ T5837] __kmalloc_cache_noprof+0x479/0x6c0
[ 86.638903][ T5837] dvb_register_device+0x1d6/0x1e20
[ 86.644088][ T5837] dvb_register_frontend+0x552/0x820
[ 86.649355][ T5837] vidtv_bridge_probe+0x44b/0xa30
[ 86.654364][ T5837] platform_probe+0x106/0x1d0
[ 86.659034][ T5837] really_probe+0x241/0xa60
[ 86.663514][ T5837] __driver_probe_device+0x20e/0x450
[ 86.668778][ T5837] driver_probe_device+0x4a/0x140
[ 86.673780][ T5837] __driver_attach+0x21f/0x5b0
[ 86.678611][ T5837] bus_for_each_dev+0x13e/0x1d0
[ 86.683447][ T5837] page_owner free stack trace missing
[ 86.688788][ T5837]
[ 86.691085][ T5837] Memory state around the buggy address:
[ 86.696689][ T5837] ffff88802d34f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.704725][ T5837] ffff88802d34f580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.712765][ T5837] >ffff88802d34f600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.720798][ T5837] ^
[ 86.725618][ T5837] ffff88802d34f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.733653][ T5837] ffff88802d34f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
2026/06/29 17:30:32 executed programs: 3
[ 86.741685][ T5837] ==================================================================
[ 86.764901][ T5837] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 86.772117][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 86.781221][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 86.791266][ T5837] Call Trace:
[ 86.794525][ T5837]
[ 86.797436][ T5837] dump_stack_lvl+0x100/0x190
[ 86.802102][ T5837] vpanic+0x552/0x970
[ 86.806063][ T5837] ? __pfx_vpanic+0x10/0x10
[ 86.810545][ T5837] ? mark_held_locks+0x40/0x70
[ 86.815296][ T5837] ? dvb_device_open+0x33f/0x3b0
[ 86.820216][ T5837] panic+0xd1/0xe0
[ 86.823918][ T5837] ? __pfx_panic+0x10/0x10
[ 86.828315][ T5837] ? dvb_device_open+0x33f/0x3b0
[ 86.833237][ T5837] ? preempt_schedule_common+0x42/0xc0
[ 86.838682][ T5837] ? check_panic_on_warn+0x1f/0x90
[ 86.843774][ T5837] check_panic_on_warn.cold+0x19/0x34
[ 86.849124][ T5837] end_report.part.0+0x3a/0x90
[ 86.853875][ T5837] kasan_report.cold+0xe/0x18
[ 86.858539][ T5837] ? dvb_device_open+0x33f/0x3b0
[ 86.863461][ T5837] ? __pfx_dvb_device_open+0x10/0x10
[ 86.868726][ T5837] dvb_device_open+0x33f/0x3b0
[ 86.873473][ T5837] ? __pfx_dvb_device_open+0x10/0x10
[ 86.878742][ T5837] chrdev_open+0x234/0x6a0
[ 86.883142][ T5837] ? __pfx_chrdev_open+0x10/0x10
[ 86.888061][ T5837] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 86.894374][ T5837] do_dentry_open+0x6ab/0x14d0
[ 86.899142][ T5837] ? __pfx_chrdev_open+0x10/0x10
[ 86.904061][ T5837] vfs_open+0x82/0x3f0
[ 86.908113][ T5837] path_openat+0x2873/0x4280
[ 86.912688][ T5837] ? __pfx_path_openat+0x10/0x10
[ 86.917607][ T5837] do_file_open+0x20e/0x430
[ 86.922092][ T5837] ? __pfx_do_file_open+0x10/0x10
[ 86.927105][ T5837] ? alloc_fd+0x471/0x7a0
[ 86.931415][ T5837] ? do_getname+0x191/0x390
[ 86.935902][ T5837] do_sys_openat2+0x10f/0x1e0
[ 86.940560][ T5837] ? __pfx_do_sys_openat2+0x10/0x10
[ 86.945740][ T5837] ? __pfx_restore_altstack+0x10/0x10
[ 86.951092][ T5837] __x64_sys_openat+0x12d/0x210
[ 86.955925][ T5837] ? __pfx___x64_sys_openat+0x10/0x10
[ 86.961279][ T5837] ? __do_sys_rt_sigreturn+0x1da/0x2c0
[ 86.966725][ T5837] do_syscall_64+0x115/0x870
[ 86.971304][ T5837] ? clear_bhb_loop+0x40/0x90
[ 86.975961][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.981843][ T5837] RIP: 0033:0x7f104495d68e
[ 86.986235][ T5837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 87.005818][ T5837] RSP: 002b:00007ffe14c669d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 87.014209][ T5837] RAX: ffffffffffffffda RBX: 000055558869d500 RCX: 00007f104495d68e
[ 87.022158][ T5837] RDX: 0000000000000002 RSI: 00007ffe14c66ab0 RDI: ffffffffffffff9c
[ 87.030109][ T5837] RBP: 00007ffe14c66ab0 R08: 0000000000000000 R09: 0000000000000000
[ 87.038058][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 87.046008][ T5837] R13: 00007f1044c15fac R14: 00007f1044c15fa0 R15: 00007f1044c15fa0
[ 87.053968][ T5837]
[ 87.057232][ T5837] Kernel Offset: disabled
[ 87.061529][ T5837] Rebooting in 86400 seconds..