Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts.
2026/06/29 17:35:25 parsed 1 programs
2026/06/29 17:35:25 serving rpc on tcp://33649
[ 75.653588][ T29] kauditd_printk_skb: 5 callbacks suppressed
[ 75.653606][ T29] audit: type=1400 audit(1782754525.277:129): avc: denied { node_bind } for pid=5612 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 77.981347][ T29] audit: type=1400 audit(1782754527.597:130): avc: denied { mounton } for pid=5620 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 78.005477][ T29] audit: type=1400 audit(1782754527.627:131): avc: denied { mount } for pid=5620 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 78.009219][ T5620] cgroup: Unknown subsys name 'net'
[ 78.036168][ T29] audit: type=1400 audit(1782754527.657:132): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 78.197497][ T5620] cgroup: Unknown subsys name 'cpuset'
[ 78.206288][ T5620] cgroup: Unknown subsys name 'rlimit'
[ 78.351127][ T29] audit: type=1400 audit(1782754527.967:133): avc: denied { setattr } for pid=5620 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 78.374877][ T29] audit: type=1400 audit(1782754527.967:134): avc: denied { create } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 78.395675][ T29] audit: type=1400 audit(1782754527.967:135): avc: denied { write } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 78.443348][ T29] audit: type=1400 audit(1782754527.967:136): avc: denied { read } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 78.464437][ T29] audit: type=1400 audit(1782754528.017:137): avc: denied { mounton } for pid=5620 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 78.490253][ T29] audit: type=1400 audit(1782754528.017:138): avc: denied { mount } for pid=5620 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 78.515750][ T5626] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 79.554590][ T5620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 81.542868][ T29] kauditd_printk_skb: 4 callbacks suppressed
[ 81.542885][ T29] audit: type=1400 audit(1782754531.157:143): avc: denied { execmem } for pid=5633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 81.578497][ T29] audit: type=1400 audit(1782754531.197:144): avc: denied { read } for pid=5634 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 81.623666][ T29] audit: type=1400 audit(1782754531.197:145): avc: denied { open } for pid=5634 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 81.670323][ T29] audit: type=1400 audit(1782754531.217:146): avc: denied { mounton } for pid=5634 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 81.737449][ T29] audit: type=1400 audit(1782754531.357:147): avc: denied { mounton } for pid=5634 comm="syz-executor" path="/root/syzkaller.l10djD/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 81.778733][ T29] audit: type=1400 audit(1782754531.377:148): avc: denied { mount } for pid=5634 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 81.801347][ T29] audit: type=1400 audit(1782754531.387:149): avc: denied { mounton } for pid=5634 comm="syz-executor" path="/root/syzkaller.l10djD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 81.826731][ T29] audit: type=1400 audit(1782754531.387:150): avc: denied { mount } for pid=5634 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 81.848858][ T29] audit: type=1400 audit(1782754531.387:151): avc: denied { mounton } for pid=5634 comm="syz-executor" path="/root/syzkaller.l10djD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 81.875538][ T29] audit: type=1400 audit(1782754531.387:152): avc: denied { mounton } for pid=5634 comm="syz-executor" path="/root/syzkaller.l10djD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 81.908425][ T5634] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 82.591070][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 82.602402][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.611765][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.620259][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.636576][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 84.197573][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.210378][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.244589][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.253441][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.239098][ T5706] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.246385][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.253832][ T5706] bridge_slave_0: entered allmulticast mode
[ 85.260797][ T5706] bridge_slave_0: entered promiscuous mode
[ 85.270062][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.277394][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.284710][ T5706] bridge_slave_1: entered allmulticast mode
[ 85.291582][ T5706] bridge_slave_1: entered promiscuous mode
[ 85.317641][ T5706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.328680][ T5706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.353175][ T5706] team0: Port device team_slave_0 added
[ 85.361195][ T5706] team0: Port device team_slave_1 added
[ 85.381305][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.388333][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.414283][ T5706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.426984][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.433971][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.459938][ T5706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.494084][ T5706] hsr_slave_0: entered promiscuous mode
[ 85.500507][ T5706] hsr_slave_1: entered promiscuous mode
[ 85.625468][ T5706] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 85.638449][ T5706] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 85.651672][ T5706] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 85.661338][ T5706] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 85.669378][ T5706] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 85.680415][ T5706] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 85.688600][ T5706] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.698220][ T5706] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 85.777477][ T5706] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.804090][ T5706] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.816872][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.824617][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.841567][ T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.848723][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.115002][ T5706] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 86.161549][ T5706] veth0_vlan: entered promiscuous mode
[ 86.177557][ T5706] veth1_vlan: entered promiscuous mode
[ 86.208046][ T5706] veth0_macvtap: entered promiscuous mode
[ 86.219880][ T5706] veth1_macvtap: entered promiscuous mode
[ 86.238901][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 86.252218][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 86.272549][ T1119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.282308][ T1119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.296234][ T1119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.305982][ T1119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.445937][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.521486][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.628754][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.660496][ T86] cfg80211: failed to load regulatory.db
[ 86.702021][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/29 17:35:36 executed programs: 0
[ 86.940182][ T29] kauditd_printk_skb: 19 callbacks suppressed
[ 86.940198][ T29] audit: type=1400 audit(1782754536.557:172): avc: denied { read write } for pid=5747 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 86.961611][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.971317][ T29] audit: type=1400 audit(1782754536.557:173): avc: denied { open } for pid=5747 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 86.986238][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.009485][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.017830][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.026218][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 87.397529][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.405278][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.412454][ T5747] bridge_slave_0: entered allmulticast mode
[ 87.419536][ T5747] bridge_slave_0: entered promiscuous mode
[ 87.427858][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.435799][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.443004][ T5747] bridge_slave_1: entered allmulticast mode
[ 87.450193][ T5747] bridge_slave_1: entered promiscuous mode
[ 87.478421][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.490301][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.516443][ T5747] team0: Port device team_slave_0 added
[ 87.524125][ T5747] team0: Port device team_slave_1 added
[ 87.548341][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.555452][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 87.582916][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.595425][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.602398][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 87.628459][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.669083][ T5747] hsr_slave_0: entered promiscuous mode
[ 87.675608][ T5747] hsr_slave_1: entered promiscuous mode
[ 87.682378][ T5747] debugfs: 'hsr0' already exists in 'hsr'
[ 87.688358][ T5747] Cannot create hsr debugfs directory
[ 88.813941][ T47] bridge_slave_1: left allmulticast mode
[ 88.820568][ T47] bridge_slave_1: left promiscuous mode
[ 88.828444][ T47] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.842679][ T47] bridge_slave_0: left allmulticast mode
[ 88.848485][ T47] bridge_slave_0: left promiscuous mode
[ 88.857730][ T47] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.040812][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 89.054468][ T4928] Bluetooth: hci0: command tx timeout
[ 89.069995][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 89.071006][ T29] audit: type=1400 audit(1782754538.687:174): avc: denied { write } for pid=5766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.107795][ T47] bond0 (unregistering): Released all slaves
[ 89.196463][ T29] audit: type=1400 audit(1782754538.807:175): avc: denied { write } for pid=5777 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.231361][ T47] hsr_slave_0: left promiscuous mode
[ 89.242029][ T47] hsr_slave_1: left promiscuous mode
[ 89.248342][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 89.256193][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 89.266173][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 89.273643][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 89.285580][ T47] veth1_macvtap: left promiscuous mode
[ 89.291205][ T47] veth0_macvtap: left promiscuous mode
[ 89.297590][ T47] veth1_vlan: left promiscuous mode
[ 89.302936][ T47] veth0_vlan: left promiscuous mode
[ 89.453047][ T47] team0 (unregistering): Port device team_slave_1 removed
[ 89.470224][ T47] team0 (unregistering): Port device team_slave_0 removed
[ 89.557259][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[ 89.884390][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 89.911984][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 89.921971][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 89.923839][ T29] audit: type=1400 audit(1782754539.547:176): avc: denied { write } for pid=5780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 89.958038][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 90.006430][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 90.030896][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 90.039080][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.057389][ T29] audit: type=1400 audit(1782754539.677:177): avc: denied { write } for pid=5791 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 90.060580][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 90.195462][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.220363][ T5747] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.234058][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.241235][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.256944][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.264146][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.508052][ T29] audit: type=1400 audit(1782754540.127:178): avc: denied { write } for pid=5801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 90.581367][ T29] audit: type=1400 audit(1782754540.197:179): avc: denied { write } for pid=5817 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 90.755830][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.820688][ T5747] veth0_vlan: entered promiscuous mode
[ 90.835736][ T5747] veth1_vlan: entered promiscuous mode
[ 90.873858][ T5747] veth0_macvtap: entered promiscuous mode
[ 90.888363][ T5747] veth1_macvtap: entered promiscuous mode
[ 90.913220][ T29] audit: type=1400 audit(1782754540.527:180): avc: denied { write } for pid=5821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 90.939236][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 90.955536][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.982083][ T1007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.990965][ T29] audit: type=1400 audit(1782754540.597:181): avc: denied { write } for pid=5835 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 91.017206][ T1007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.060709][ T1007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.071791][ T1007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.117737][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.130780][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.144043][ T4928] Bluetooth: hci0: command tx timeout
[ 91.161854][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.170174][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.267559][ T5841] ==================================================================
[ 91.275661][ T5841] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0
[ 91.283371][ T5841] Read of size 8 at addr ffff88802ccc9018 by task syz.0.19/5841
[ 91.290983][ T5841]
[ 91.293319][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 91.293334][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 91.293347][ T5841] Call Trace:
[ 91.293353][ T5841]
[ 91.293358][ T5841] dump_stack_lvl+0x100/0x190
[ 91.293382][ T5841] print_report+0x13d/0x4b0
[ 91.293398][ T5841] ? __virt_addr_valid+0x239/0x430
[ 91.293413][ T5841] ? dvb_device_open+0x33f/0x3b0
[ 91.293426][ T5841] kasan_report+0xdf/0x1c0
[ 91.293442][ T5841] ? dvb_device_open+0x33f/0x3b0
[ 91.293455][ T5841] ? __pfx_dvb_device_open+0x10/0x10
[ 91.293467][ T5841] dvb_device_open+0x33f/0x3b0
[ 91.293480][ T5841] ? __pfx_dvb_device_open+0x10/0x10
[ 91.293492][ T5841] chrdev_open+0x234/0x6a0
[ 91.293504][ T5841] ? __pfx_chrdev_open+0x10/0x10
[ 91.293515][ T5841] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 91.293531][ T5841] do_dentry_open+0x6ab/0x14d0
[ 91.293541][ T5841] ? __pfx_chrdev_open+0x10/0x10
[ 91.293553][ T5841] vfs_open+0x82/0x3f0
[ 91.293567][ T5841] path_openat+0x2873/0x4280
[ 91.293581][ T5841] ? __pfx_path_openat+0x10/0x10
[ 91.293594][ T5841] do_file_open+0x20e/0x430
[ 91.293606][ T5841] ? __pfx_do_file_open+0x10/0x10
[ 91.293622][ T5841] ? alloc_fd+0x471/0x7a0
[ 91.293633][ T5841] ? do_getname+0x191/0x390
[ 91.293648][ T5841] do_sys_openat2+0x10f/0x1e0
[ 91.293661][ T5841] ? __pfx_do_sys_openat2+0x10/0x10
[ 91.293674][ T5841] ? __pfx_restore_altstack+0x10/0x10
[ 91.293687][ T5841] __x64_sys_openat+0x12d/0x210
[ 91.293700][ T5841] ? __pfx___x64_sys_openat+0x10/0x10
[ 91.293713][ T5841] ? __do_sys_rt_sigreturn+0x1da/0x2c0
[ 91.293729][ T5841] do_syscall_64+0x115/0x870
[ 91.293745][ T5841] ? clear_bhb_loop+0x40/0x90
[ 91.293757][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.293769][ T5841] RIP: 0033:0x7fd61e55d68e
[ 91.293784][ T5841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 91.293798][ T5841] RSP: 002b:00007ffcb3645a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 91.293811][ T5841] RAX: ffffffffffffffda RBX: 0000555572808500 RCX: 00007fd61e55d68e
[ 91.293818][ T5841] RDX: 0000000000000002 RSI: 00007ffcb3645b40 RDI: ffffffffffffff9c
[ 91.293825][ T5841] RBP: 00007ffcb3645b40 R08: 0000000000000000 R09: 0000000000000000
[ 91.293833][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 91.293839][ T5841] R13: 00007fd61e815fac R14: 00007fd61e815fa0 R15: 00007fd61e815fa0
[ 91.293850][ T5841]
[ 91.293854][ T5841]
[ 91.543139][ T5841] Allocated by task 1:
[ 91.547192][ T5841] kasan_save_stack+0x30/0x50
[ 91.551854][ T5841] kasan_save_track+0x14/0x30
[ 91.556506][ T5841] __kasan_kmalloc+0xaa/0xb0
[ 91.561071][ T5841] __kmalloc_cache_noprof+0x2e5/0x6c0
[ 91.566426][ T5841] dvb_register_device+0x1d6/0x1e20
[ 91.571606][ T5841] dvb_register_frontend+0x552/0x820
[ 91.576882][ T5841] vidtv_bridge_probe+0x44b/0xa30
[ 91.581906][ T5841] platform_probe+0x106/0x1d0
[ 91.586631][ T5841] really_probe+0x241/0xa60
[ 91.591120][ T5841] __driver_probe_device+0x20e/0x450
[ 91.596404][ T5841] driver_probe_device+0x4a/0x140
[ 91.601437][ T5841] __driver_attach+0x21f/0x5b0
[ 91.606176][ T5841] bus_for_each_dev+0x13e/0x1d0
[ 91.611007][ T5841] bus_add_driver+0x305/0x5b0
[ 91.615659][ T5841] driver_register+0x1e2/0x360
[ 91.620402][ T5841] vidtv_bridge_init+0x52/0x80
[ 91.625156][ T5841] do_one_initcall+0x11d/0x700
[ 91.629932][ T5841] kernel_init_freeable+0x6ea/0x7b0
[ 91.635115][ T5841] kernel_init+0x1f/0x1e0
[ 91.639422][ T5841] ret_from_fork+0x72b/0xd50
[ 91.643994][ T5841] ret_from_fork_asm+0x1a/0x30
[ 91.648754][ T5841]
[ 91.651085][ T5841] Freed by task 5840:
[ 91.655062][ T5841] kasan_save_stack+0x30/0x50
[ 91.659752][ T5841] kasan_save_track+0x14/0x30
[ 91.664410][ T5841] kasan_save_free_info+0x3b/0x70
[ 91.669417][ T5841] __kasan_slab_free+0x5f/0x80
[ 91.674172][ T5841] kfree+0x22b/0x6c0
[ 91.678079][ T5841] dvb_device_put.part.0+0x57/0x90
[ 91.683173][ T5841] dvb_device_open+0x2ba/0x3b0
[ 91.687912][ T5841] chrdev_open+0x234/0x6a0
[ 91.692310][ T5841] do_dentry_open+0x6ab/0x14d0
[ 91.697076][ T5841] vfs_open+0x82/0x3f0
[ 91.701124][ T5841] path_openat+0x2873/0x4280
[ 91.705687][ T5841] do_file_open+0x20e/0x430
[ 91.710164][ T5841] do_sys_openat2+0x10f/0x1e0
[ 91.714818][ T5841] __x64_sys_openat+0x12d/0x210
[ 91.719678][ T5841] do_syscall_64+0x115/0x870
[ 91.724295][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.730191][ T5841]
[ 91.732507][ T5841] The buggy address belongs to the object at ffff88802ccc9000
[ 91.732507][ T5841] which belongs to the cache kmalloc-256 of size 256
[ 91.746570][ T5841] The buggy address is located 24 bytes inside of
[ 91.746570][ T5841] freed 256-byte region [ffff88802ccc9000, ffff88802ccc9100)
[ 91.760261][ T5841]
[ 91.762589][ T5841] The buggy address belongs to the physical page:
[ 91.768981][ T5841] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ccc8
[ 91.777750][ T5841] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 91.786291][ T5841] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 91.793853][ T5841] page_type: f5(slab)
[ 91.797812][ T5841] raw: 00fff00000000040 ffff88813fe02b40 dead000000000100 dead000000000122
[ 91.806388][ T5841] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 91.814980][ T5841] head: 00fff00000000040 ffff88813fe02b40 dead000000000100 dead000000000122
[ 91.823637][ T5841] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 91.832307][ T5841] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 91.840959][ T5841] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 91.849634][ T5841] page dumped because: kasan: bad access detected
[ 91.856032][ T5841] page_owner tracks the page as allocated
[ 91.861722][ T5841] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15967092982, free_ts 0
[ 91.881445][ T5841] post_alloc_hook+0xfd/0x120
[ 91.886119][ T5841] get_page_from_freelist+0xf48/0x3530
[ 91.891558][ T5841] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 91.897428][ T5841] new_slab+0xa2/0x650
[ 91.901473][ T5841] refill_objects+0xe3/0x410
[ 91.906039][ T5841] __pcs_replace_empty_main+0x376/0x680
[ 91.911567][ T5841] __kmalloc_cache_noprof+0x479/0x6c0
[ 91.916948][ T5841] bus_add_driver+0x92/0x5b0
[ 91.921515][ T5841] driver_register+0x1e2/0x360
[ 91.926264][ T5841] i2c_register_driver+0xd9/0x1f0
[ 91.931274][ T5841] do_one_initcall+0x11d/0x700
[ 91.936018][ T5841] kernel_init_freeable+0x6ea/0x7b0
[ 91.941192][ T5841] kernel_init+0x1f/0x1e0
[ 91.945497][ T5841] ret_from_fork+0x72b/0xd50
[ 91.950068][ T5841] ret_from_fork_asm+0x1a/0x30
[ 91.954809][ T5841] page_owner free stack trace missing
[ 91.960185][ T5841]
[ 91.962486][ T5841] Memory state around the buggy address:
[ 91.968099][ T5841] ffff88802ccc8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 91.976154][ T5841] ffff88802ccc8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 91.984212][ T5841] >ffff88802ccc9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.992294][ T5841] ^
[ 91.997120][ T5841] ffff88802ccc9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 92.005165][ T5841] ffff88802ccc9100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 92.013198][ T5841] ==================================================================
[ 92.026380][ T5841] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 92.033628][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 92.042755][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 92.052818][ T5841] Call Trace:
[ 92.056114][ T5841]
[ 92.059066][ T5841] dump_stack_lvl+0x100/0x190
[ 92.063778][ T5841] vpanic+0x552/0x970
[ 92.067769][ T5841] ? __pfx_vpanic+0x10/0x10
[ 92.072272][ T5841] ? mark_held_locks+0x40/0x70
[ 92.077026][ T5841] ? dvb_device_open+0x33f/0x3b0
[ 92.081955][ T5841] panic+0xd1/0xe0
[ 92.085661][ T5841] ? __pfx_panic+0x10/0x10
[ 92.090054][ T5841] ? dvb_device_open+0x33f/0x3b0
[ 92.094972][ T5841] ? preempt_schedule_common+0x42/0xc0
[ 92.100414][ T5841] ? check_panic_on_warn+0x1f/0x90
[ 92.105505][ T5841] check_panic_on_warn.cold+0x19/0x34
[ 92.110907][ T5841] end_report.part.0+0x3a/0x90
[ 92.115682][ T5841] kasan_report.cold+0xe/0x18
[ 92.120368][ T5841] ? dvb_device_open+0x33f/0x3b0
[ 92.125299][ T5841] ? __pfx_dvb_device_open+0x10/0x10
[ 92.130588][ T5841] dvb_device_open+0x33f/0x3b0
[ 92.135354][ T5841] ? __pfx_dvb_device_open+0x10/0x10
[ 92.140667][ T5841] chrdev_open+0x234/0x6a0
[ 92.145075][ T5841] ? __pfx_chrdev_open+0x10/0x10
[ 92.150002][ T5841] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 92.156323][ T5841] do_dentry_open+0x6ab/0x14d0
[ 92.161075][ T5841] ? __pfx_chrdev_open+0x10/0x10
[ 92.166000][ T5841] vfs_open+0x82/0x3f0
[ 92.170063][ T5841] path_openat+0x2873/0x4280
[ 92.174659][ T5841] ? __pfx_path_openat+0x10/0x10
[ 92.179590][ T5841] do_file_open+0x20e/0x430
[ 92.184082][ T5841] ? __pfx_do_file_open+0x10/0x10
[ 92.189107][ T5841] ? alloc_fd+0x471/0x7a0
[ 92.193426][ T5841] ? do_getname+0x191/0x390
[ 92.197920][ T5841] do_sys_openat2+0x10f/0x1e0
[ 92.202590][ T5841] ? __pfx_do_sys_openat2+0x10/0x10
[ 92.207779][ T5841] ? __pfx_restore_altstack+0x10/0x10
[ 92.213144][ T5841] __x64_sys_openat+0x12d/0x210
[ 92.217988][ T5841] ? __pfx___x64_sys_openat+0x10/0x10
[ 92.223351][ T5841] ? __do_sys_rt_sigreturn+0x1da/0x2c0
[ 92.228807][ T5841] do_syscall_64+0x115/0x870
[ 92.233391][ T5841] ? clear_bhb_loop+0x40/0x90
[ 92.238079][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.243960][ T5841] RIP: 0033:0x7fd61e55d68e
[ 92.248384][ T5841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 92.268011][ T5841] RSP: 002b:00007ffcb3645a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 92.276416][ T5841] RAX: ffffffffffffffda RBX: 0000555572808500 RCX: 00007fd61e55d68e
[ 92.284377][ T5841] RDX: 0000000000000002 RSI: 00007ffcb3645b40 RDI: ffffffffffffff9c
[ 92.292337][ T5841] RBP: 00007ffcb3645b40 R08: 0000000000000000 R09: 0000000000000000
[ 92.300301][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 92.308265][ T5841] R13: 00007fd61e815fac R14: 00007fd61e815fa0 R15: 00007fd61e815fa0
[ 92.316232][ T5841]
[ 92.319524][ T5841] Kernel Offset: disabled
[ 92.323828][ T5841] Rebooting in 86400 seconds..