Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts.
2026/09/06 08:41:56 parsed 1 programs
2026/09/06 08:41:56 serving rpc on tcp://45619
[ 71.889388][ T5624] cgroup: Unknown subsys name 'net'
[ 72.016446][ T5624] cgroup: Unknown subsys name 'cpuset'
[ 72.024611][ T5624] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 73.400728][ T5624] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 76.182742][ T5634] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 77.691656][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.692168][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.692297][ T5663] bridge_slave_0: entered allmulticast mode
[ 77.694626][ T5663] bridge_slave_0: entered promiscuous mode
[ 77.699101][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.699229][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.699933][ T5663] bridge_slave_1: entered allmulticast mode
[ 77.701475][ T5663] bridge_slave_1: entered promiscuous mode
[ 77.732820][ T5663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 77.736565][ T5663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 77.772139][ T5663] team0: Port device team_slave_0 added
[ 77.775428][ T5663] team0: Port device team_slave_1 added
[ 77.794074][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 77.794098][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 77.794138][ T5663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 77.796460][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 77.796472][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 77.796493][ T5663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 77.842277][ T5663] hsr_slave_0: entered promiscuous mode
[ 77.844328][ T5663] hsr_slave_1: entered promiscuous mode
[ 77.995339][ T5663] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.007099][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 78.008407][ T5663] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.018480][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 78.020328][ T5663] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.031458][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 78.032922][ T5663] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 78.037651][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 78.066053][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.066192][ T5663] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.067326][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.067442][ T5663] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.125067][ T5663] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.138309][ T50] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.146429][ T50] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.161837][ T5663] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.170255][ T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.170358][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.180069][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.180156][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.451489][ T5663] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.492484][ T5663] veth0_vlan: entered promiscuous mode
[ 78.501119][ T5663] veth1_vlan: entered promiscuous mode
[ 78.525854][ T5663] veth0_macvtap: entered promiscuous mode
[ 78.530357][ T5663] veth1_macvtap: entered promiscuous mode
[ 78.546938][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 78.551438][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 78.603797][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.603851][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.603895][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.603925][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.736727][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.836126][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.918844][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.018454][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.219030][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.219085][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.253198][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.253799][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.937898][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.946268][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.953911][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 79.961736][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 79.969735][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/09/06 08:42:08 executed programs: 0
[ 80.757528][ T4933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.766423][ T4933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.778905][ T4933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.780018][ T4933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.780544][ T4933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.145187][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.145334][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.145470][ T5750] bridge_slave_0: entered allmulticast mode
[ 81.147051][ T5750] bridge_slave_0: entered promiscuous mode
[ 81.149829][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.149973][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.150345][ T5750] bridge_slave_1: entered allmulticast mode
[ 81.151973][ T5750] bridge_slave_1: entered promiscuous mode
[ 81.182435][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.186743][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.218096][ T5750] team0: Port device team_slave_0 added
[ 81.220723][ T5750] team0: Port device team_slave_1 added
[ 81.241800][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.241835][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 81.242211][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.244450][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.244462][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 81.244482][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.307912][ T5750] hsr_slave_0: entered promiscuous mode
[ 81.308782][ T5750] hsr_slave_1: entered promiscuous mode
[ 81.309433][ T5750] debugfs: 'hsr0' already exists in 'hsr'
[ 81.309514][ T5750] Cannot create hsr debugfs directory
[ 81.485875][ T1217] cfg80211: failed to load regulatory.db
[ 81.722203][ T50] bridge_slave_1: left allmulticast mode
[ 81.722260][ T50] bridge_slave_1: left promiscuous mode
[ 81.722856][ T50] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.747697][ T50] bridge_slave_0: left allmulticast mode
[ 81.747722][ T50] bridge_slave_0: left promiscuous mode
[ 81.749128][ T50] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.860667][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 81.871675][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 81.886253][ T50] bond0 (unregistering): Released all slaves
[ 81.966082][ T50] hsr_slave_0: left promiscuous mode
[ 81.972294][ T50] hsr_slave_1: left promiscuous mode
[ 81.979834][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 81.987463][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 81.996018][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 82.003732][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 82.021026][ T50] veth1_macvtap: left promiscuous mode
[ 82.025027][ T50] veth0_macvtap: left promiscuous mode
[ 82.025133][ T50] veth1_vlan: left promiscuous mode
[ 82.025248][ T50] veth0_vlan: left promiscuous mode
[ 82.326812][ T50] team0 (unregistering): Port device team_slave_1 removed
[ 82.345328][ T50] team0 (unregistering): Port device team_slave_0 removed
[ 82.479919][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[ 82.790229][ T5750] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.811392][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 82.812256][ T5750] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.830797][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 82.833643][ T5750] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.847426][ T52] Bluetooth: hci0: command tx timeout
[ 82.853330][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 83.232618][ T5750] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.242293][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 83.425370][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.536196][ T5750] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.567441][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.567934][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.584028][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.584811][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.341253][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.400716][ T5750] veth0_vlan: entered promiscuous mode
[ 84.419336][ T5750] veth1_vlan: entered promiscuous mode
[ 84.450706][ T5750] veth0_macvtap: entered promiscuous mode
[ 84.455830][ T5750] veth1_macvtap: entered promiscuous mode
[ 84.469402][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.475763][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.506523][ T3384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.506577][ T3384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.506626][ T3384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.506660][ T3384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.564351][ T3384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.564397][ T3384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.599181][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.599221][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.698173][ T5840] ==================================================================
[ 84.698188][ T5840] BUG: KASA
** replaying previous printk message **
[ 84.698188][ T5840] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340
[ 84.698223][ T5840] Read of size 8 at addr ffff88802c07ce18 by task syz.0.19/5840
[ 84.698237][ T5840]
[ 84.698253][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 84.698271][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 84.698288][ T5840] Call Trace:
[ 84.698298][ T5840]
[ 84.698305][ T5840] dump_stack_lvl+0xe8/0x150
[ 84.698331][ T5840] print_address_description+0x55/0x1e0
[ 84.698353][ T5840] ? dvb_device_open+0xc4/0x340
[ 84.698370][ T5840] print_report+0x58/0x70
[ 84.698390][ T5840] kasan_report+0x117/0x150
[ 84.698411][ T5840] ? dvb_device_open+0xc4/0x340
[ 84.698434][ T5840] dvb_device_open+0xc4/0x340
[ 84.698453][ T5840] ? do_raw_spin_unlock+0xf5/0x200
[ 84.698479][ T5840] chrdev_open+0x4d9/0x600
[ 84.698498][ T5840] ? __pfx_chrdev_open+0x10/0x10
[ 84.698516][ T5840] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 84.698537][ T5840] ? __pfx_chrdev_open+0x10/0x10
[ 84.698554][ T5840] do_dentry_open+0x816/0x1380
[ 84.698578][ T5840] vfs_open+0x3b/0x340
[ 84.698595][ T5840] ? path_openat+0x1428/0x1d60
[ 84.698620][ T5840] path_openat+0x1443/0x1d60
[ 84.698649][ T5840] do_file_open+0x23e/0x4a0
[ 84.698672][ T5840] ? __pfx_do_file_open+0x10/0x10
[ 84.698706][ T5840] ? _raw_spin_unlock+0x28/0x50
[ 84.698727][ T5840] ? alloc_fd+0x651/0x6c0
[ 84.698752][ T5840] do_sys_openat2+0x115/0x200
[ 84.698782][ T5840] ? __pfx_do_sys_openat2+0x10/0x10
[ 84.698805][ T5840] ? __task_pid_nr_ns+0x28/0x470
[ 84.698821][ T5840] __x64_sys_openat+0x138/0x170
[ 84.698842][ T5840] do_syscall_64+0x166/0x520
[ 84.698868][ T5840] ? trace_irq_disable+0x3b/0x140
[ 84.698885][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.698902][ T5840] ? clear_bhb_loop+0x70/0xc0
[ 84.698922][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.698939][ T5840] RIP: 0033:0x7fc3fdb5e98e
[ 84.698961][ T5840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 84.698976][ T5840] RSP: 002b:00007ffea8055d78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 84.698999][ T5840] RAX: ffffffffffffffda RBX: 0000555569755500 RCX: 00007fc3fdb5e98e
[ 84.699012][ T5840] RDX: 0000000000040002 RSI: 00007ffea8055e50 RDI: ffffffffffffff9c
[ 84.699025][ T5840] RBP: 00007ffea8055e50 R08: 0000000000000000 R09: 0000000000000000
[ 84.699036][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 84.699047][ T5840] R13: 00007fc3fde25fac R14: 00007fc3fde25fa0 R15: 00007fc3fde25fa0
[ 84.699067][ T5840]
[ 84.699073][ T5840]
[ 84.699078][ T5840] Allocated by task 1:
[ 84.699086][ T5840] kasan_save_track+0x3e/0x80
[ 84.699101][ T5840] __kasan_kmalloc+0x93/0xb0
[ 84.699117][ T5840] __kmalloc_cache_noprof+0x321/0x600
[ 84.699142][ T5840] dvb_register_device+0x309/0x1dd0
[ 84.699159][ T5840] dvb_register_frontend+0x603/0x900
[ 84.699175][ T5840] vidtv_bridge_probe+0x9d5/0xf60
[ 84.699196][ T5840] platform_probe+0xf9/0x190
[ 84.699218][ T5840] really_probe+0x254/0xae0
[ 84.699233][ T5840] __driver_probe_device+0x1e8/0x360
[ 84.699247][ T5840] driver_probe_device+0x4f/0x240
[ 84.699261][ T5840] __driver_attach+0x339/0x600
[ 84.699275][ T5840] bus_for_each_dev+0x23b/0x2c0
[ 84.699293][ T5840] bus_add_driver+0x345/0x670
[ 84.699312][ T5840] driver_register+0x23a/0x320
[ 84.699329][ T5840] vidtv_bridge_init+0x3d/0x60
[ 84.699344][ T5840] do_one_initcall+0x250/0x870
[ 84.699366][ T5840] do_initcall_level+0x10a/0x1a0
[ 84.699385][ T5840] do_initcalls+0x59/0xa0
[ 84.699403][ T5840] kernel_init_freeable+0x29d/0x3e0
[ 84.699421][ T5840] kernel_init+0x22/0x1d0
[ 84.699438][ T5840] ret_from_fork+0x514/0xb70
[ 84.699452][ T5840] ret_from_fork_asm+0x1a/0x30
[ 84.699474][ T5840]
[ 84.699478][ T5840] Freed by task 5839:
[ 84.699486][ T5840] kasan_save_track+0x3e/0x80
[ 84.699501][ T5840] kasan_save_free_info+0x40/0x50
[ 84.699521][ T5840] __kasan_slab_free+0x5c/0x80
[ 84.699537][ T5840] kfree+0x1c5/0x650
[ 84.699556][ T5840] dvb_device_open+0x2b8/0x340
[ 84.699574][ T5840] chrdev_open+0x4d9/0x600
[ 84.699589][ T5840] do_dentry_open+0x816/0x1380
[ 84.699604][ T5840] vfs_open+0x3b/0x340
[ 84.699620][ T5840] path_openat+0x1443/0x1d60
[ 84.699643][ T5840] do_file_open+0x23e/0x4a0
[ 84.699663][ T5840] do_sys_openat2+0x115/0x200
[ 84.699679][ T5840] __x64_sys_openat+0x138/0x170
[ 84.699691][ T5840] do_syscall_64+0x166/0x520
[ 84.699707][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.699719][ T5840]
[ 84.699722][ T5840] The buggy address belongs to the object at ffff88802c07ce00
[ 84.699722][ T5840] which belongs to the cache kmalloc-256 of size 256
[ 84.699734][ T5840] The buggy address is located 24 bytes inside of
[ 84.699734][ T5840] freed 256-byte region [ffff88802c07ce00, ffff88802c07cf00)
[ 84.699748][ T5840]
[ 84.699752][ T5840] The buggy address belongs to the physical page:
[ 84.699765][ T5840] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c07c
[ 84.699788][ T5840] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 84.699801][ T5840] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 84.699823][ T5840] page_type: f5(slab)
[ 84.699836][ T5840] raw: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122
[ 84.699848][ T5840] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 84.699862][ T5840] head: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122
[ 84.699874][ T5840] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 84.699886][ T5840] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 84.699898][ T5840] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 84.699905][ T5840] page dumped because: kasan: bad access detected
[ 84.699918][ T5840] page_owner tracks the page as allocated
[ 84.699924][ T5840] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13040310869
[ 84.699948][ T5840] post_alloc_hook+0x1f9/0x250
[ 84.699970][ T5840] get_page_from_freelist+0x2209/0x2280
[ 84.699981][ T5840] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 84.699993][ T5840] allocate_slab+0x7d/0x620
[ 84.700006][ T5840] refill_objects+0x2d5/0x350
[ 84.700021][ T5840] __pcs_replace_empty_main+0x2c8/0x6c0
[ 84.700036][ T5840] __kmalloc_cache_noprof+0x39b/0x600
[ 84.700058][ T5840] dvb_register_device+0x309/0x1dd0
[ 84.700075][ T5840] dvb_register_frontend+0x603/0x900
[ 84.700090][ T5840] vidtv_bridge_probe+0x9d5/0xf60
[ 84.700109][ T5840] platform_probe+0xf9/0x190
[ 84.700130][ T5840] really_probe+0x254/0xae0
[ 84.700142][ T5840] __driver_probe_device+0x1e8/0x360
[ 84.700153][ T5840] driver_probe_device+0x4f/0x240
[ 84.700166][ T5840] __driver_attach+0x339/0x600
[ 84.700178][ T5840] bus_for_each_dev+0x23b/0x2c0
[ 84.700197][ T5840] page_owner free stack trace missing
[ 84.700203][ T5840]
[ 84.700207][ T5840] Memory state around the buggy address:
[ 84.700216][ T5840] ffff88802c07cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.700226][ T5840] ffff88802c07cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.700235][ T5840] >ffff88802c07ce00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.700243][ T5840] ^
[ 84.700251][ T5840] ffff88802c07ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.700261][ T5840] ffff88802c07cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.700269][ T5840] ==================================================================
[ 84.714944][ T5840] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.464502][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 85.473592][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 85.483633][ T5840] Call Trace:
[ 85.486908][ T5840]
[ 85.489833][ T5840] vpanic+0x56d/0xa60
[ 85.493813][ T5840] ? __pfx_vpanic+0x10/0x10
[ 85.498309][ T5840] ? __pfx___schedule+0x10/0x10
[ 85.503159][ T5840] panic+0xc5/0xd0
[ 85.506884][ T5840] ? __pfx_panic+0x10/0x10
[ 85.511292][ T5840] ? preempt_schedule_thunk+0x16/0x40
[ 85.516651][ T5840] ? dvb_device_open+0xc4/0x340
[ 85.521495][ T5840] check_panic_on_warn+0x89/0xb0
[ 85.526415][ T5840] ? dvb_device_open+0xc4/0x340
[ 85.531253][ T5840] end_report+0x73/0x170
[ 85.535488][ T5840] ? dvb_device_open+0xc4/0x340
[ 85.540326][ T5840] kasan_report+0x128/0x150
[ 85.544820][ T5840] ? dvb_device_open+0xc4/0x340
[ 85.549663][ T5840] dvb_device_open+0xc4/0x340
[ 85.554330][ T5840] ? do_raw_spin_unlock+0xf5/0x200
[ 85.559432][ T5840] chrdev_open+0x4d9/0x600
[ 85.563834][ T5840] ? __pfx_chrdev_open+0x10/0x10
[ 85.568760][ T5840] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 85.575073][ T5840] ? __pfx_chrdev_open+0x10/0x10
[ 85.580002][ T5840] do_dentry_open+0x816/0x1380
[ 85.584771][ T5840] vfs_open+0x3b/0x340
[ 85.588833][ T5840] ? path_openat+0x1428/0x1d60
[ 85.593596][ T5840] path_openat+0x1443/0x1d60
[ 85.598194][ T5840] do_file_open+0x23e/0x4a0
[ 85.602693][ T5840] ? __pfx_do_file_open+0x10/0x10
[ 85.607714][ T5840] ? _raw_spin_unlock+0x28/0x50
[ 85.612558][ T5840] ? alloc_fd+0x651/0x6c0
[ 85.616883][ T5840] do_sys_openat2+0x115/0x200
[ 85.621550][ T5840] ? __pfx_do_sys_openat2+0x10/0x10
[ 85.626749][ T5840] ? __task_pid_nr_ns+0x28/0x470
[ 85.631675][ T5840] __x64_sys_openat+0x138/0x170
[ 85.636514][ T5840] do_syscall_64+0x166/0x520
[ 85.641098][ T5840] ? trace_irq_disable+0x3b/0x140
[ 85.646112][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.652179][ T5840] ? clear_bhb_loop+0x70/0xc0
[ 85.656846][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.662723][ T5840] RIP: 0033:0x7fc3fdb5e98e
[ 85.667124][ T5840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 85.686716][ T5840] RSP: 002b:00007ffea8055d78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 85.695115][ T5840] RAX: ffffffffffffffda RBX: 0000555569755500 RCX: 00007fc3fdb5e98e
[ 85.703068][ T5840] RDX: 0000000000040002 RSI: 00007ffea8055e50 RDI: ffffffffffffff9c
[ 85.711021][ T5840] RBP: 00007ffea8055e50 R08: 0000000000000000 R09: 0000000000000000
[ 85.718981][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 85.726938][ T5840] R13: 00007fc3fde25fac R14: 00007fc3fde25fa0 R15: 00007fc3fde25fa0
[ 85.734901][ T5840]
[ 85.738158][ T5840] Kernel Offset: disabled
[ 85.742469][ T5840] Rebooting in 86400 seconds..