no interfaces have a carrier
[ 58.751461][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0
[ 58.766821][ T5458] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts.
syzkaller login: [ 86.700274][ T993] cfg80211: failed to load regulatory.db
2026/03/06 11:22:55 parsed 1 programs
[ 92.360234][ T5799] cgroup: Unknown subsys name 'net'
[ 92.662431][ T5799] cgroup: Unknown subsys name 'cpuset'
[ 92.757337][ T5799] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 94.633641][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 99.649098][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.650518][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.651977][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.689253][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.690333][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.480035][ T5847] chnl_net:caif_netlink_parms(): no params data found
[ 100.846592][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.846617][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.946498][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.946628][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.967174][ T5847] bridge_slave_0: entered allmulticast mode
[ 100.971470][ T5847] bridge_slave_0: entered promiscuous mode
[ 101.004838][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.004984][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.005194][ T5847] bridge_slave_1: entered allmulticast mode
[ 101.032347][ T5847] bridge_slave_1: entered promiscuous mode
[ 101.112759][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.129958][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.137459][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.137480][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.458001][ T5847] team0: Port device team_slave_0 added
[ 101.489426][ T5847] team0: Port device team_slave_1 added
[ 101.662708][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.662725][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.662751][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.681604][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.681649][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.681714][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.738806][ T5113] Bluetooth: hci0: command tx timeout
[ 101.836036][ T5847] hsr_slave_0: entered promiscuous mode
[ 101.843542][ T5847] hsr_slave_1: entered promiscuous mode
[ 102.343806][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 102.362767][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 102.542294][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 102.592683][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 102.719797][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.743366][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.758794][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.759410][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.788361][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.788455][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.165366][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.572527][ T5847] veth0_vlan: entered promiscuous mode
[ 103.607606][ T5847] veth1_vlan: entered promiscuous mode
[ 103.689617][ T5847] veth0_macvtap: entered promiscuous mode
[ 103.695104][ T5847] veth1_macvtap: entered promiscuous mode
[ 103.722587][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.737879][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.763579][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.764923][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.764968][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.765008][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.816915][ T5113] Bluetooth: hci0: command tx timeout
2026/03/06 11:23:10 executed programs: 0
[ 104.121943][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 104.124240][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 104.125034][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 104.145003][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 104.149730][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 104.236193][ T5924] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 104.241487][ T5924] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 104.242598][ T5924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 104.243722][ T5924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 104.244866][ T5924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 104.360351][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 104.364851][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 104.365605][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 104.399450][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 104.403360][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 104.403520][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 104.405370][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 104.410142][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 104.430467][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 104.433971][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 104.436319][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 104.438655][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 104.444967][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 104.446031][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 104.470043][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 106.148208][ T5927] chnl_net:caif_netlink_parms(): no params data found
[ 106.156356][ T5916] chnl_net:caif_netlink_parms(): no params data found
[ 106.178038][ T5920] chnl_net:caif_netlink_parms(): no params data found
[ 106.289611][ T5925] chnl_net:caif_netlink_parms(): no params data found
[ 106.297148][ T5924] Bluetooth: hci1: command tx timeout
[ 106.321635][ T5926] chnl_net:caif_netlink_parms(): no params data found
[ 106.386798][ T5924] Bluetooth: hci2: command tx timeout
[ 106.456818][ T5924] Bluetooth: hci5: command tx timeout
[ 106.536896][ T5924] Bluetooth: hci4: command tx timeout
[ 106.537069][ T5924] Bluetooth: hci3: command tx timeout
[ 106.665803][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.665925][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.666126][ T5927] bridge_slave_0: entered allmulticast mode
[ 106.688462][ T5927] bridge_slave_0: entered promiscuous mode
[ 106.691025][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.691168][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.691351][ T5916] bridge_slave_0: entered allmulticast mode
[ 106.693391][ T5916] bridge_slave_0: entered promiscuous mode
[ 106.740320][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.740434][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.740571][ T5920] bridge_slave_0: entered allmulticast mode
[ 106.742312][ T5920] bridge_slave_0: entered promiscuous mode
[ 106.784226][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.784345][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.784479][ T5927] bridge_slave_1: entered allmulticast mode
[ 106.786460][ T5927] bridge_slave_1: entered promiscuous mode
[ 106.793590][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.793891][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.794323][ T5916] bridge_slave_1: entered allmulticast mode
[ 106.802868][ T5916] bridge_slave_1: entered promiscuous mode
[ 107.090041][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.090160][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.090321][ T5920] bridge_slave_1: entered allmulticast mode
[ 107.092279][ T5920] bridge_slave_1: entered promiscuous mode
[ 107.163334][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.164800][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.165149][ T5925] bridge_slave_0: entered allmulticast mode
[ 107.177934][ T5925] bridge_slave_0: entered promiscuous mode
[ 107.208260][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.208383][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.208520][ T5926] bridge_slave_0: entered allmulticast mode
[ 107.210138][ T5926] bridge_slave_0: entered promiscuous mode
[ 107.260858][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.260972][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.261129][ T5925] bridge_slave_1: entered allmulticast mode
[ 107.263149][ T5925] bridge_slave_1: entered promiscuous mode
[ 107.305480][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.306279][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.306439][ T5926] bridge_slave_1: entered allmulticast mode
[ 107.328633][ T5926] bridge_slave_1: entered promiscuous mode
[ 107.334482][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.353429][ T5916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.379756][ T5920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.401874][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.572487][ T137] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.613349][ T5916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.636124][ T5920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.692303][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.716101][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.755806][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.889078][ T137] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.941178][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.943161][ T5927] team0: Port device team_slave_0 added
[ 107.945709][ T5916] team0: Port device team_slave_0 added
[ 107.981222][ T5920] team0: Port device team_slave_0 added
[ 108.352775][ T5927] team0: Port device team_slave_1 added
[ 108.354807][ T5916] team0: Port device team_slave_1 added
[ 108.376790][ T5113] Bluetooth: hci1: command tx timeout
[ 108.378595][ T5920] team0: Port device team_slave_1 added
[ 108.432717][ T5925] team0: Port device team_slave_0 added
[ 108.456836][ T5113] Bluetooth: hci2: command tx timeout
[ 108.536831][ T5113] Bluetooth: hci5: command tx timeout
[ 108.611005][ T137] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.617200][ T5113] Bluetooth: hci3: command tx timeout
[ 108.617230][ T5924] Bluetooth: hci4: command tx timeout
[ 108.654103][ T5926] team0: Port device team_slave_0 added
[ 108.690352][ T5925] team0: Port device team_slave_1 added
[ 108.716911][ T5926] team0: Port device team_slave_1 added
[ 108.720629][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 108.720644][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 108.720667][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 108.723590][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 108.723604][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 108.723630][ T5916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 108.778088][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 108.778126][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 108.778177][ T5920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 109.001729][ T137] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 109.047885][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.047899][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.047919][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.048968][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.048978][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.048995][ T5916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.083278][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.083314][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.083369][ T5920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.333066][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 109.333078][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.333115][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 109.354393][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 109.354436][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.354499][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 109.432975][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.432986][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.433003][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.435942][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.435953][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.435970][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.627498][ T5916] hsr_slave_0: entered promiscuous mode
[ 109.628535][ T5916] hsr_slave_1: entered promiscuous mode
[ 109.629296][ T5916] debugfs: 'hsr0' already exists in 'hsr'
[ 109.629365][ T5916] Cannot create hsr debugfs directory
[ 109.647133][ T5927] hsr_slave_0: entered promiscuous mode
[ 109.650409][ T5927] hsr_slave_1: entered promiscuous mode
[ 109.652744][ T5927] debugfs: 'hsr0' already exists in 'hsr'
[ 109.652824][ T5927] Cannot create hsr debugfs directory
[ 109.713305][ T5920] hsr_slave_0: entered promiscuous mode
[ 109.714304][ T5920] hsr_slave_1: entered promiscuous mode
[ 109.714984][ T5920] debugfs: 'hsr0' already exists in 'hsr'
[ 109.715001][ T5920] Cannot create hsr debugfs directory
[ 109.796386][ T5925] hsr_slave_0: entered promiscuous mode
[ 109.801179][ T5925] hsr_slave_1: entered promiscuous mode
[ 109.804035][ T5925] debugfs: 'hsr0' already exists in 'hsr'
[ 109.804094][ T5925] Cannot create hsr debugfs directory
[ 109.824537][ T5926] hsr_slave_0: entered promiscuous mode
[ 109.825504][ T5926] hsr_slave_1: entered promiscuous mode
[ 109.826422][ T5926] debugfs: 'hsr0' already exists in 'hsr'
[ 109.826438][ T5926] Cannot create hsr debugfs directory
[ 110.213024][ T137] bridge_slave_1: left allmulticast mode
[ 110.213109][ T137] bridge_slave_1: left promiscuous mode
[ 110.214293][ T137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.318300][ T137] bridge_slave_0: left allmulticast mode
[ 110.318320][ T137] bridge_slave_0: left promiscuous mode
[ 110.318475][ T137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.456978][ T5924] Bluetooth: hci1: command tx timeout
[ 110.537097][ T5924] Bluetooth: hci2: command tx timeout
[ 110.616894][ T5924] Bluetooth: hci5: command tx timeout
[ 110.696965][ T5924] Bluetooth: hci3: command tx timeout
[ 110.696996][ T5924] Bluetooth: hci4: command tx timeout
[ 110.997640][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 111.079278][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 111.099149][ T137] bond0 (unregistering): Released all slaves
[ 112.106985][ T137] hsr_slave_0: left promiscuous mode
[ 112.127312][ T137] hsr_slave_1: left promiscuous mode
[ 112.128396][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 112.128447][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 112.178227][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 112.178257][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 112.249959][ T137] veth1_macvtap: left promiscuous mode
[ 112.250125][ T137] veth0_macvtap: left promiscuous mode
[ 112.250305][ T137] veth1_vlan: left promiscuous mode
[ 112.250505][ T137] veth0_vlan: left promiscuous mode
[ 112.537065][ T5113] Bluetooth: hci1: command tx timeout
[ 112.617057][ T5113] Bluetooth: hci2: command tx timeout
[ 112.706816][ T5113] Bluetooth: hci5: command tx timeout
[ 112.776946][ T5113] Bluetooth: hci4: command tx timeout
[ 112.776979][ T5113] Bluetooth: hci3: command tx timeout
[ 112.959668][ T137] team0 (unregistering): Port device team_slave_1 removed
[ 112.997511][ T137] team0 (unregistering): Port device team_slave_0 removed
[ 113.401178][ T5916] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.441878][ T5916] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.557493][ T5916] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.602164][ T5916] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.951510][ T5916] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.988717][ T5916] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.995353][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.995642][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.032929][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.035452][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.382460][ T5920] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 114.455971][ T5920] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 114.517133][ T5920] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 114.597496][ T5920] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 114.733128][ T5927] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 114.763439][ T5927] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 114.802605][ T5927] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 114.843682][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.870808][ T5927] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 115.001400][ T5925] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 115.038489][ T5925] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 115.085043][ T5925] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 115.139342][ T5925] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 115.273391][ T5926] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 115.321087][ T5926] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 115.360834][ T5926] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 115.398716][ T5926] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 115.434963][ T5916] veth0_vlan: entered promiscuous mode
[ 115.483603][ T5916] veth1_vlan: entered promiscuous mode
[ 115.502490][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0
[ 115.589316][ T5920] 8021q: adding VLAN 0 to HW filter on device team0
[ 115.630976][ T137] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.631086][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.664441][ T5916] veth0_macvtap: entered promiscuous mode
[ 115.673490][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[ 115.676118][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.676242][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.710033][ T5916] veth1_macvtap: entered promiscuous mode
[ 115.765931][ T5927] 8021q: adding VLAN 0 to HW filter on device team0
[ 115.783604][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0
[ 115.804149][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 115.828207][ T178] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.828415][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.855874][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 115.872532][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.872648][ T4825] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.909396][ T1012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.913394][ T1012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.934376][ T5925] 8021q: adding VLAN 0 to HW filter on device team0
[ 115.941481][ T1012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.955500][ T1012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.968959][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.035736][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.036366][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.074957][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.075788][ T4825] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.199126][ T5926] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.246240][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.267860][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.355520][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.355882][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.417516][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.417536][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.539527][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.539546][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.599788][ T5920] 8021q: adding VLAN 0 to HW filter on device batadv0
2026/03/06 11:23:23 executed programs: 10
[ 116.968388][ T5920] veth0_vlan: entered promiscuous mode
[ 117.148530][ T5920] veth1_vlan: entered promiscuous mode
[ 117.392814][ T5920] veth0_macvtap: entered promiscuous mode
[ 117.556634][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.570160][ T5920] veth1_macvtap: entered promiscuous mode
[ 117.867563][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.894559][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 117.927314][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.930277][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.934040][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.935300][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.975718][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.875668][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 118.885950][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.885988][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.108218][ T5925] veth0_vlan: entered promiscuous mode
[ 119.133042][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.133061][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.190817][ T5927] veth0_vlan: entered promiscuous mode
[ 119.196377][ T5925] veth1_vlan: entered promiscuous mode
[ 119.277769][ T5927] veth1_vlan: entered promiscuous mode
[ 119.577917][ T5926] veth0_vlan: entered promiscuous mode
[ 119.611502][ T5925] veth0_macvtap: entered promiscuous mode
[ 119.643268][ T5926] veth1_vlan: entered promiscuous mode
[ 119.646108][ T5925] veth1_macvtap: entered promiscuous mode
[ 119.692877][ T5927] veth0_macvtap: entered promiscuous mode
[ 119.713560][ T5927] veth1_macvtap: entered promiscuous mode
[ 119.743691][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.778725][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 119.911207][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.911279][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.915867][ T137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.935725][ T137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.968910][ T137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.970828][ T5926] veth0_macvtap: entered promiscuous mode
[ 119.996193][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 120.613117][ T5926] veth1_macvtap: entered promiscuous mode
[ 121.394167][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.642643][ T1277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.790074][ T1277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
2026/03/06 11:23:29 executed programs: 27
[ 122.006839][ T166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 123.469172][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 124.758176][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 125.180122][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.180140][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.592062][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.593369][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.593972][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.594946][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.709665][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.709684][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.041339][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.041361][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/03/06 11:23:34 executed programs: 51
[ 128.373283][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.373305][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 129.705460][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 129.705482][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 131.499693][ T4825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 131.499713][ T4825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/03/06 11:23:39 executed programs: 76
[ 132.833223][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.833679][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
2026/03/06 11:23:45 executed programs: 103
2026/03/06 11:23:50 executed programs: 129
2026/03/06 11:23:55 executed programs: 155
2026/03/06 11:24:01 executed programs: 180
2026/03/06 11:24:06 executed programs: 210
2026/03/06 11:24:11 executed programs: 233
2026/03/06 11:24:16 executed programs: 259
2026/03/06 11:24:22 executed programs: 287
[ 175.660471][ T6880] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[ 178.715297][ T6919] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[ 178.717392][ T6928] ==================================================================
[ 178.717405][ T6928] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x360
[ 178.717436][ T6928] Read of size 8 at addr ffff88802c0b6018 by task syz.0.309/6928
[ 178.717452][ T6928]
[ 178.717490][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.0.309 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 178.717511][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 178.717530][ T6928] Call Trace:
[ 178.717540][ T6928]
[ 178.717548][ T6928] dump_stack_lvl+0xe8/0x150
[ 178.717577][ T6928] print_report+0xba/0x230
[ 178.717602][ T6928] ? dvb_device_open+0xc4/0x360
[ 178.717618][ T6928] kasan_report+0x117/0x150
[ 178.717648][ T6928] ? dvb_device_open+0xc4/0x360
[ 178.717669][ T6928] dvb_device_open+0xc4/0x360
[ 178.717687][ T6928] ? rt_spin_unlock+0x160/0x200
[ 178.717707][ T6928] chrdev_open+0x4d0/0x5f0
[ 178.717726][ T6928] ? __pfx_chrdev_open+0x10/0x10
[ 178.717745][ T6928] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0
[ 178.717773][ T6928] ? __pfx_chrdev_open+0x10/0x10
[ 178.717791][ T6928] do_dentry_open+0x83d/0x13e0
[ 178.717817][ T6928] vfs_open+0x3b/0x350
[ 178.717836][ T6928] ? path_openat+0x2e2b/0x38a0
[ 178.717864][ T6928] path_openat+0x2e43/0x38a0
[ 178.717907][ T6928] ? __pfx_path_openat+0x10/0x10
[ 178.717933][ T6928] ? __lock_acquire+0x6b5/0x2cf0
[ 178.717951][ T6928] ? kmem_cache_alloc_noprof+0x33b/0x680
[ 178.717982][ T6928] ? do_raw_spin_lock+0x12b/0x2f0
[ 178.718013][ T6928] do_file_open+0x23e/0x4a0
[ 178.718039][ T6928] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 178.718066][ T6928] ? __pfx_do_file_open+0x10/0x10
[ 178.718090][ T6928] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 178.718120][ T6928] ? alloc_fd+0x64e/0x6c0
[ 178.718147][ T6928] do_sys_openat2+0x113/0x200
[ 178.718169][ T6928] ? __pfx_do_sys_openat2+0x10/0x10
[ 178.718200][ T6928] ? exc_page_fault+0x6a/0xc0
[ 178.718225][ T6928] ? do_user_addr_fault+0xc6f/0x1340
[ 178.718253][ T6928] __x64_sys_openat+0x138/0x170
[ 178.718279][ T6928] do_syscall_64+0x14d/0xf80
[ 178.718303][ T6928] ? trace_irq_disable+0x3b/0x150
[ 178.718324][ T6928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 178.718344][ T6928] ? clear_bhb_loop+0x40/0x90
[ 178.718366][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 178.718384][ T6928] RIP: 0033:0x7fdb6747cfce
[ 178.718406][ T6928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 178.718440][ T6928] RSP: 002b:00007fdb66b1db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 178.718470][ T6928] RAX: ffffffffffffffda RBX: 00007fdb66b1e6c0 RCX: 00007fdb6747cfce
[ 178.718485][ T6928] RDX: 0000000000000002 RSI: 00007fdb66b1dc00 RDI: ffffffffffffff9c
[ 178.718499][ T6928] RBP: 00007fdb66b1dc00 R08: 0000000000000000 R09: 0000000000000000
[ 178.718512][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 178.718526][ T6928] R13: 00007fdb67736038 R14: 00007fdb67735fa0 R15: 00007ffd279dfa88
[ 178.718550][ T6928]
[ 178.718557][ T6928]
[ 178.718561][ T6928] Allocated by task 1:
[ 178.718570][ T6928] kasan_save_track+0x3e/0x80
[ 178.718595][ T6928] __kasan_kmalloc+0x93/0xb0
[ 178.718621][ T6928] __kmalloc_cache_noprof+0x3a6/0x690
[ 178.718649][ T6928] dvb_register_device+0x2fd/0x21e0
[ 178.718679][ T6928] dvb_register_frontend+0x665/0x970
[ 178.718705][ T6928] vidtv_bridge_probe+0x9aa/0xf80
[ 178.718726][ T6928] platform_probe+0xf9/0x190
[ 178.718752][ T6928] really_probe+0x267/0xaf0
[ 178.718770][ T6928] __driver_probe_device+0x18c/0x320
[ 178.718788][ T6928] driver_probe_device+0x4f/0x240
[ 178.718807][ T6928] __driver_attach+0x3e7/0x710
[ 178.718824][ T6928] bus_for_each_dev+0x23e/0x2c0
[ 178.718847][ T6928] bus_add_driver+0x348/0x670
[ 178.718871][ T6928] driver_register+0x23a/0x320
[ 178.718890][ T6928] vidtv_bridge_init+0x28/0x50
[ 178.718910][ T6928] do_one_initcall+0x250/0x8d0
[ 178.718937][ T6928] do_initcall_level+0x104/0x190
[ 178.718960][ T6928] do_initcalls+0x59/0xa0
[ 178.718980][ T6928] kernel_init_freeable+0x2a6/0x3e0
[ 178.719002][ T6928] kernel_init+0x1d/0x1d0
[ 178.719018][ T6928] ret_from_fork+0x51e/0xb90
[ 178.719044][ T6928] ret_from_fork_asm+0x1a/0x30
[ 178.719060][ T6928]
[ 178.719065][ T6928] Freed by task 6919:
[ 178.719073][ T6928] kasan_save_track+0x3e/0x80
[ 178.719098][ T6928] kasan_save_free_info+0x46/0x50
[ 178.719119][ T6928] __kasan_slab_free+0x5c/0x80
[ 178.719145][ T6928] kfree+0x1c1/0x6c0
[ 178.719169][ T6928] dvb_device_open+0x2d6/0x360
[ 178.719185][ T6928] chrdev_open+0x4d0/0x5f0
[ 178.719207][ T6928] do_dentry_open+0x83d/0x13e0
[ 178.719227][ T6928] vfs_open+0x3b/0x350
[ 178.719246][ T6928] path_openat+0x2e43/0x38a0
[ 178.719272][ T6928] do_file_open+0x23e/0x4a0
[ 178.719298][ T6928] do_sys_openat2+0x113/0x200
[ 178.719318][ T6928] __x64_sys_openat+0x138/0x170
[ 178.719338][ T6928] do_syscall_64+0x14d/0xf80
[ 178.719362][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 178.719380][ T6928]
[ 178.719385][ T6928] The buggy address belongs to the object at ffff88802c0b6000
[ 178.719385][ T6928] which belongs to the cache kmalloc-512 of size 512
[ 178.719402][ T6928] The buggy address is located 24 bytes inside of
[ 178.719402][ T6928] freed 512-byte region [ffff88802c0b6000, ffff88802c0b6200)
[ 178.719422][ T6928]
[ 178.719426][ T6928] The buggy address belongs to the physical page:
[ 178.719441][ T6928] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c0b4
[ 178.719459][ T6928] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 178.719474][ T6928] flags: 0x80000000000040(head|node=0|zone=1)
[ 178.719497][ T6928] page_type: f5(slab)
[ 178.719513][ T6928] raw: 0080000000000040 ffff88813fe1cc80 dead000000000100 dead000000000122
[ 178.719529][ T6928] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 178.719546][ T6928] head: 0080000000000040 ffff88813fe1cc80 dead000000000100 dead000000000122
[ 178.719561][ T6928] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 178.719578][ T6928] head: 0080000000000002 ffffea0000b02d01 00000000ffffffff 00000000ffffffff
[ 178.719593][ T6928] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[ 178.719602][ T6928] page dumped because: kasan: bad access detected
[ 178.719615][ T6928] page_owner tracks the page as allocated
[ 178.719622][ T6928] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18132335485, free_ts 0
[ 178.719654][ T6928] post_alloc_hook+0x231/0x280
[ 178.719681][ T6928] get_page_from_freelist+0x28bb/0x2950
[ 178.719703][ T6928] __alloc_frozen_pages_noprof+0x18d/0x380
[ 178.719723][ T6928] allocate_slab+0x77/0x660
[ 178.719742][ T6928] refill_objects+0x334/0x3c0
[ 178.719761][ T6928] __pcs_replace_empty_main+0x328/0x5f0
[ 178.719784][ T6928] __kmalloc_cache_noprof+0x44e/0x690
[ 178.719813][ T6928] bus_add_driver+0x165/0x670
[ 178.719835][ T6928] driver_register+0x23a/0x320
[ 178.719855][ T6928] usb_register_driver+0x1e4/0x390
[ 178.719874][ T6928] do_one_initcall+0x250/0x8d0
[ 178.719901][ T6928] do_initcall_level+0x104/0x190
[ 178.719923][ T6928] do_initcalls+0x59/0xa0
[ 178.719943][ T6928] kernel_init_freeable+0x2a6/0x3e0
[ 178.719965][ T6928] kernel_init+0x1d/0x1d0
[ 178.719980][ T6928] ret_from_fork+0x51e/0xb90
[ 178.720004][ T6928] page_owner free stack trace missing
[ 178.720011][ T6928]
[ 178.720015][ T6928] Memory state around the buggy address:
[ 178.720026][ T6928] ffff88802c0b5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 178.720039][ T6928] ffff88802c0b5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 178.720052][ T6928] >ffff88802c0b6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 178.720061][ T6928] ^
[ 178.720070][ T6928] ffff88802c0b6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 178.720083][ T6928] ffff88802c0b6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 178.720092][ T6928] ==================================================================
[ 178.720108][ T6928] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 178.720122][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.0.309 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 178.720144][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 178.720155][ T6928] Call Trace:
[ 178.720163][ T6928]
[ 178.720171][ T6928] vpanic+0x56c/0xa60
[ 178.720209][ T6928] ? __pfx_vpanic+0x10/0x10
[ 178.720244][ T6928] panic+0xc5/0xd0
[ 178.720272][ T6928] ? __pfx_panic+0x10/0x10
[ 178.720303][ T6928] ? dvb_device_open+0xc4/0x360
[ 178.720321][ T6928] ? rcu_is_watching+0x15/0xb0
[ 178.720346][ T6928] ? dvb_device_open+0xc4/0x360
[ 178.720365][ T6928] check_panic_on_warn+0x89/0xb0
[ 178.720387][ T6928] ? dvb_device_open+0xc4/0x360
[ 178.720421][ T6928] end_report+0x73/0x180
[ 178.720467][ T6928] ? dvb_device_open+0xc4/0x360
[ 178.720487][ T6928] kasan_report+0x128/0x150
[ 178.720521][ T6928] ? dvb_device_open+0xc4/0x360
[ 178.720545][ T6928] dvb_device_open+0xc4/0x360
[ 178.720565][ T6928] ? rt_spin_unlock+0x160/0x200
[ 178.720589][ T6928] chrdev_open+0x4d0/0x5f0
[ 178.720611][ T6928] ? __pfx_chrdev_open+0x10/0x10
[ 178.720632][ T6928] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0
[ 178.720663][ T6928] ? __pfx_chrdev_open+0x10/0x10
[ 178.720684][ T6928] do_dentry_open+0x83d/0x13e0
[ 178.720715][ T6928] vfs_open+0x3b/0x350
[ 178.720737][ T6928] ? path_openat+0x2e2b/0x38a0
[ 178.720767][ T6928] path_openat+0x2e43/0x38a0
[ 178.720816][ T6928] ? __pfx_path_openat+0x10/0x10
[ 178.720848][ T6928] ? __lock_acquire+0x6b5/0x2cf0
[ 178.720869][ T6928] ? kmem_cache_alloc_noprof+0x33b/0x680
[ 178.720905][ T6928] ? do_raw_spin_lock+0x12b/0x2f0
[ 178.720939][ T6928] do_file_open+0x23e/0x4a0
[ 178.720970][ T6928] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 178.721001][ T6928] ? __pfx_do_file_open+0x10/0x10
[ 178.721031][ T6928] ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 178.721065][ T6928] ? alloc_fd+0x64e/0x6c0
[ 178.721095][ T6928] do_sys_openat2+0x113/0x200
[ 178.721121][ T6928] ? __pfx_do_sys_openat2+0x10/0x10
[ 178.721147][ T6928] ? exc_page_fault+0x6a/0xc0
[ 178.721176][ T6928] ? do_user_addr_fault+0xc6f/0x1340
[ 178.721214][ T6928] __x64_sys_openat+0x138/0x170
[ 178.721242][ T6928] do_syscall_64+0x14d/0xf80
[ 178.721270][ T6928] ? trace_irq_disable+0x3b/0x150
[ 178.721295][ T6928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 178.721316][ T6928] ? clear_bhb_loop+0x40/0x90
[ 178.721340][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 178.721361][ T6928] RIP: 0033:0x7fdb6747cfce
[ 178.721379][ T6928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 178.721396][ T6928] RSP: 002b:00007fdb66b1db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 178.721418][ T6928] RAX: ffffffffffffffda RBX: 00007fdb66b1e6c0 RCX: 00007fdb6747cfce
[ 178.721435][ T6928] RDX: 0000000000000002 RSI: 00007fdb66b1dc00 RDI: ffffffffffffff9c
[ 178.721450][ T6928] RBP: 00007fdb66b1dc00 R08: 0000000000000000 R09: 0000000000000000
[ 178.721464][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 178.721479][ T6928] R13: 00007fdb67736038 R14: 00007fdb67735fa0 R15: 00007ffd279dfa88
[ 178.721504][ T6928]
[ 178.722111][ T6928] Kernel Offset: disabled