Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts.
2026/09/13 14:38:52 parsed 1 programs
2026/09/13 14:38:52 serving rpc on tcp://41415
[ 83.637442][ T5627] cgroup: Unknown subsys name 'net'
[ 83.732255][ T5627] cgroup: Unknown subsys name 'cpuset'
[ 83.735468][ T5627] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 85.383162][ T5627] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 88.703584][ T5641] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 88.707969][ T5641] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 88.740177][ T5641] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 88.741838][ T5641] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 88.748372][ T5641] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 89.605247][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.605880][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.605982][ T5652] bridge_slave_0: entered allmulticast mode
[ 89.607261][ T5652] bridge_slave_0: entered promiscuous mode
[ 89.620300][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.620684][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.620985][ T5652] bridge_slave_1: entered allmulticast mode
[ 89.626561][ T5652] bridge_slave_1: entered promiscuous mode
[ 89.676191][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.682403][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.713425][ T5652] team0: Port device team_slave_0 added
[ 89.715565][ T5652] team0: Port device team_slave_1 added
[ 89.743613][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.743624][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 89.743640][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 89.745328][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 89.745355][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 89.745374][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.857806][ T5652] hsr_slave_0: entered promiscuous mode
[ 89.859354][ T5652] hsr_slave_1: entered promiscuous mode
[ 90.015098][ T5652] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 90.027197][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 90.028223][ T5652] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 90.044605][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 90.045466][ T5652] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 90.048624][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 90.071341][ T5652] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.074258][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 90.112045][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.112129][ T5652] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.112489][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.112580][ T5652] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.142635][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.159115][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.206469][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.229509][ T5652] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.236130][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.236204][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.259192][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.259516][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.623745][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.665605][ T5652] veth0_vlan: entered promiscuous mode
[ 90.677113][ T5652] veth1_vlan: entered promiscuous mode
[ 90.707905][ T5652] veth0_macvtap: entered promiscuous mode
[ 90.716571][ T5652] veth1_macvtap: entered promiscuous mode
[ 90.733853][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 90.749116][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.790550][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.829203][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.829250][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.829286][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.952767][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.036461][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.125681][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.231207][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.819467][ T10] cfg80211: failed to load regulatory.db
[ 91.821694][ T5710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.822992][ T5710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.823787][ T5710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.824965][ T5710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.825475][ T5710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 92.140720][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.140747][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.184037][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.184052][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.174774][ T50] bridge_slave_1: left allmulticast mode
[ 94.174814][ T50] bridge_slave_1: left promiscuous mode
[ 94.175595][ T50] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.203420][ T50] bridge_slave_0: left allmulticast mode
[ 94.203446][ T50] bridge_slave_0: left promiscuous mode
[ 94.203660][ T50] bridge0: port 1(bridge_slave_0) entered disabled state
2026/09/13 14:39:06 executed programs: 0
[ 94.370294][ T5710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.372732][ T5710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.373504][ T5710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.374509][ T5710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.381179][ T5710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.486059][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 94.498306][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 94.508716][ T50] bond0 (unregistering): Released all slaves
[ 94.643907][ T50] hsr_slave_0: left promiscuous mode
[ 94.644935][ T50] hsr_slave_1: left promiscuous mode
[ 94.645921][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 94.645947][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 94.649387][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 94.649407][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 94.708378][ T50] veth1_macvtap: left promiscuous mode
[ 94.714128][ T50] veth0_macvtap: left promiscuous mode
[ 94.714327][ T50] veth1_vlan: left promiscuous mode
[ 94.714504][ T50] veth0_vlan: left promiscuous mode
[ 95.109134][ T50] team0 (unregistering): Port device team_slave_1 removed
[ 95.145602][ T50] team0 (unregistering): Port device team_slave_0 removed
[ 95.427064][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1
[ 95.964051][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.964386][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.964528][ T5753] bridge_slave_0: entered allmulticast mode
[ 95.966336][ T5753] bridge_slave_0: entered promiscuous mode
[ 96.000508][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.000665][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.000778][ T5753] bridge_slave_1: entered allmulticast mode
[ 96.004282][ T5753] bridge_slave_1: entered promiscuous mode
[ 96.449493][ T52] Bluetooth: hci0: command tx timeout
[ 96.534452][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.537143][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2
[ 96.547137][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.604892][ T5753] team0: Port device team_slave_0 added
[ 96.621963][ T5753] team0: Port device team_slave_1 added
[ 96.701363][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.701379][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 96.701403][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.703280][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.703292][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 96.703315][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.841963][ T5753] hsr_slave_0: entered promiscuous mode
[ 96.843046][ T5753] hsr_slave_1: entered promiscuous mode
[ 97.688021][ T5753] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.701202][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 97.702383][ T5753] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.706241][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 97.707029][ T5753] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.739332][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 97.741940][ T5753] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.746155][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 97.872673][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.898093][ T5753] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.910343][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.910457][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.918308][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.918505][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.426906][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.491994][ T5753] veth0_vlan: entered promiscuous mode
[ 98.505514][ T5753] veth1_vlan: entered promiscuous mode
[ 98.529064][ T52] Bluetooth: hci0: command tx timeout
[ 98.546865][ T5753] veth0_macvtap: entered promiscuous mode
[ 98.558390][ T5753] veth1_macvtap: entered promiscuous mode
[ 98.578276][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.594026][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.628672][ T1289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.628716][ T1289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.628751][ T1289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.628785][ T1289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.736197][ T1289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.736214][ T1289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.795282][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.795303][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.159184][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 99.310063][ T10] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[ 99.311827][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 99.311881][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 99.359639][ T10] as10x_usb: device has been detected
[ 99.361167][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 99.382277][ T10] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[ 99.432569][ T10] as10x_usb: error during firmware upload part1
[ 99.432966][ T10] Registered device Abilis Systems DVB-Titan
[ 100.608555][ T52] Bluetooth: hci0: command tx timeout
[ 102.689058][ T52] Bluetooth: hci0: command tx timeout
2026/09/13 14:39:17 executed programs: 3
[ 104.623110][ T1633] usb 1-1: USB disconnect, device number 2
[ 104.672362][ T1633] Unregistered device Abilis Systems DVB-Titan
[ 104.681012][ T1633] as10x_usb: device has been disconnected
[ 104.999883][ T1633] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 105.149282][ T1633] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[ 105.150334][ T1633] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 105.150380][ T1633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 105.174165][ T1633] as10x_usb: device has been detected
[ 105.176393][ T1633] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 105.205464][ T1633] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[ 105.229904][ T1633] as10x_usb: error during firmware upload part1
[ 105.230561][ T1633] Registered device Abilis Systems DVB-Titan
[ 110.378286][ T10] usb 1-1: USB disconnect, device number 3
2026/09/13 14:39:23 executed programs: 4
[ 110.425616][ T10] Unregistered device Abilis Systems DVB-Titan
[ 110.432280][ T10] as10x_usb: device has been disconnected
[ 110.748556][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 110.910067][ T10] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[ 110.911321][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 110.911355][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 110.949103][ T10] as10x_usb: device has been detected
[ 110.949964][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 110.972833][ T10] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[ 110.989097][ T10] as10x_usb: error during firmware upload part1
[ 110.989696][ T10] Registered device Abilis Systems DVB-Titan
[ 116.132537][ T5881] ==================================================================
[ 116.132585][ T5881] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340
[ 116.132628][ T5881] Read of size 8 at addr ffff88802b726a18 by task syz.0.19/5881
[ 116.132643][ T5881]
[ 116.132668][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 116.132689][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 116.132708][ T5881] Call Trace:
[ 116.132720][ T5881]
[ 116.132728][ T5881] dump_stack_lvl+0xe8/0x150
[ 116.132757][ T5881] print_address_description+0x55/0x1e0
[ 116.132783][ T5881] ? dvb_device_open+0xc4/0x340
[ 116.132811][ T5881] print_report+0x58/0x70
[ 116.132852][ T5881] kasan_report+0x117/0x150
[ 116.132874][ T5881] ? dvb_device_open+0xc4/0x340
[ 116.132903][ T5881] dvb_device_open+0xc4/0x340
[ 116.132928][ T5881] ? do_raw_spin_unlock+0xf5/0x200
[ 116.132957][ T5881] chrdev_open+0x4d9/0x600
[ 116.132979][ T5881] ? __pfx_chrdev_open+0x10/0x10
[ 116.132999][ T5881] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 116.133022][ T5881] ? __pfx_chrdev_open+0x10/0x10
[ 116.133041][ T5881] do_dentry_open+0x816/0x1380
[ 116.133068][ T5881] vfs_open+0x3b/0x340
[ 116.133088][ T5881] ? path_openat+0x1428/0x1d60
[ 116.133137][ T5881] path_openat+0x1443/0x1d60
[ 116.133162][ T5881] do_file_open+0x23e/0x4a0
[ 116.133180][ T5881] ? __pfx_do_file_open+0x10/0x10
[ 116.133206][ T5881] ? _raw_spin_unlock+0x28/0x50
[ 116.133231][ T5881] ? alloc_fd+0x651/0x6c0
[ 116.133258][ T5881] do_sys_openat2+0x115/0x200
[ 116.133280][ T5881] ? __pfx_do_sys_openat2+0x10/0x10
[ 116.133303][ T5881] ? exc_page_fault+0x6a/0xc0
[ 116.133324][ T5881] __ia32_compat_sys_openat+0x131/0x160
[ 116.133349][ T5881] do_int80_emulation+0x198/0x500
[ 116.133370][ T5881] ? trace_irq_disable+0x3b/0x140
[ 116.133388][ T5881] ? asm_int80_emulation+0x1a/0x20
[ 116.133404][ T5881] ? clear_bhb_loop+0x70/0xc0
[ 116.133428][ T5881] ? clear_bhb_loop+0x70/0xc0
[ 116.133442][ T5881] asm_int80_emulation+0x1a/0x20
[ 116.133455][ T5881] RIP: 0023:0xf71b75ab
[ 116.133472][ T5881] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 116.133486][ T5881] RSP: 002b:00000000f685d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 116.133505][ T5881] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f685d100
[ 116.133518][ T5881] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 0000000000000000
[ 116.133525][ T5881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 116.133533][ T5881] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 116.133541][ T5881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 116.133554][ T5881]
[ 116.133559][ T5881]
[ 116.133562][ T5881] Allocated by task 1:
[ 116.133568][ T5881] kasan_save_track+0x3e/0x80
[ 116.133581][ T5881] __kasan_kmalloc+0x93/0xb0
[ 116.133594][ T5881] __kmalloc_cache_noprof+0x321/0x600
[ 116.133607][ T5881] dvb_register_device+0x309/0x1dd0
[ 116.133623][ T5881] dvb_register_frontend+0x603/0x900
[ 116.133637][ T5881] vidtv_bridge_probe+0x9d5/0xf60
[ 116.133657][ T5881] platform_probe+0xf9/0x190
[ 116.133668][ T5881] really_probe+0x254/0xae0
[ 116.133681][ T5881] __driver_probe_device+0x1e8/0x360
[ 116.133694][ T5881] driver_probe_device+0x4f/0x240
[ 116.133725][ T5881] __driver_attach+0x339/0x600
[ 116.133738][ T5881] bus_for_each_dev+0x23b/0x2c0
[ 116.133756][ T5881] bus_add_driver+0x345/0x670
[ 116.133773][ T5881] driver_register+0x23a/0x320
[ 116.133789][ T5881] vidtv_bridge_init+0x3d/0x60
[ 116.133805][ T5881] do_one_initcall+0x250/0x870
[ 116.133824][ T5881] do_initcall_level+0x10a/0x1a0
[ 116.133836][ T5881] do_initcalls+0x59/0xa0
[ 116.133847][ T5881] kernel_init_freeable+0x29d/0x3e0
[ 116.133859][ T5881] kernel_init+0x22/0x1d0
[ 116.133875][ T5881] ret_from_fork+0x514/0xb70
[ 116.133885][ T5881] ret_from_fork_asm+0x1a/0x30
[ 116.133920][ T5881]
[ 116.133923][ T5881] Freed by task 5877:
[ 116.133930][ T5881] kasan_save_track+0x3e/0x80
[ 116.133942][ T5881] kasan_save_free_info+0x40/0x50
[ 116.133960][ T5881] __kasan_slab_free+0x5c/0x80
[ 116.133973][ T5881] kfree+0x1c5/0x650
[ 116.133991][ T5881] dvb_device_open+0x2b8/0x340
[ 116.134008][ T5881] chrdev_open+0x4d9/0x600
[ 116.134021][ T5881] do_dentry_open+0x816/0x1380
[ 116.134035][ T5881] vfs_open+0x3b/0x340
[ 116.134048][ T5881] path_openat+0x1443/0x1d60
[ 116.134059][ T5881] do_file_open+0x23e/0x4a0
[ 116.134070][ T5881] do_sys_openat2+0x115/0x200
[ 116.134084][ T5881] __ia32_compat_sys_openat+0x131/0x160
[ 116.134107][ T5881] do_int80_emulation+0x198/0x500
[ 116.134121][ T5881] asm_int80_emulation+0x1a/0x20
[ 116.134133][ T5881]
[ 116.134136][ T5881] The buggy address belongs to the object at ffff88802b726a00
[ 116.134136][ T5881] which belongs to the cache kmalloc-256 of size 256
[ 116.134147][ T5881] The buggy address is located 24 bytes inside of
[ 116.134147][ T5881] freed 256-byte region [ffff88802b726a00, ffff88802b726b00)
[ 116.134162][ T5881]
[ 116.134165][ T5881] The buggy address belongs to the physical page:
[ 116.134178][ T5881] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b726
[ 116.134193][ T5881] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 116.134204][ T5881] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 116.134221][ T5881] page_type: f5(slab)
[ 116.134234][ T5881] raw: 00fff00000000040 ffff88801b041b40 dead000000000122 0000000000000000
[ 116.134245][ T5881] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 116.134257][ T5881] head: 00fff00000000040 ffff88801b041b40 dead000000000122 0000000000000000
[ 116.134268][ T5881] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 116.134280][ T5881] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 116.134291][ T5881] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 116.134298][ T5881] page dumped because: kasan: bad access detected
[ 116.134308][ T5881] page_owner tracks the page as allocated
[ 116.134313][ T5881] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17486333566
[ 116.134334][ T5881] post_alloc_hook+0x1f9/0x250
[ 116.134353][ T5881] get_page_from_freelist+0x2209/0x2280
[ 116.134366][ T5881] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 116.134379][ T5881] allocate_slab+0x7d/0x620
[ 116.134395][ T5881] refill_objects+0x2d5/0x350
[ 116.134411][ T5881] __pcs_replace_empty_main+0x2c8/0x6c0
[ 116.134427][ T5881] __kmalloc_cache_noprof+0x39b/0x600
[ 116.134438][ T5881] bus_add_driver+0x162/0x670
[ 116.134456][ T5881] driver_register+0x23a/0x320
[ 116.134471][ T5881] usb_register_driver+0x1e4/0x390
[ 116.134487][ T5881] uvc_init+0x22/0x40
[ 116.134500][ T5881] do_one_initcall+0x250/0x870
[ 116.134518][ T5881] do_initcall_level+0x10a/0x1a0
[ 116.134551][ T5881] do_initcalls+0x59/0xa0
[ 116.134567][ T5881] kernel_init_freeable+0x29d/0x3e0
[ 116.134583][ T5881] kernel_init+0x22/0x1d0
[ 116.134609][ T5881] page_owner free stack trace missing
[ 116.134614][ T5881]
[ 116.134617][ T5881] Memory state around the buggy address:
[ 116.134624][ T5881] ffff88802b726900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.134633][ T5881] ffff88802b726980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.134642][ T5881] >ffff88802b726a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 116.134649][ T5881] ^
[ 116.134656][ T5881] ffff88802b726a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 116.134664][ T5881] ffff88802b726b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.134671][ T5881] ==================================================================
[ 116.134690][ T5881] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 116.898877][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 116.908001][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 116.918074][ T5881] Call Trace:
[ 116.921372][ T5881]
[ 116.924322][ T5881] vpanic+0x56d/0xa60
[ 116.928330][ T5881] ? rcu_is_watching+0x16/0xb0
[ 116.933127][ T5881] ? __pfx_vpanic+0x10/0x10
[ 116.937664][ T5881] panic+0xc5/0xd0
[ 116.941404][ T5881] ? __pfx_panic+0x10/0x10
[ 116.945839][ T5881] ? dvb_device_open+0xc4/0x340
[ 116.950706][ T5881] ? dvb_device_open+0xc4/0x340
[ 116.955592][ T5881] check_panic_on_warn+0x89/0xb0
[ 116.960545][ T5881] ? dvb_device_open+0xc4/0x340
[ 116.965408][ T5881] end_report+0x73/0x170
[ 116.969673][ T5881] ? dvb_device_open+0xc4/0x340
[ 116.974544][ T5881] kasan_report+0x128/0x150
[ 116.979073][ T5881] ? dvb_device_open+0xc4/0x340
[ 116.983951][ T5881] dvb_device_open+0xc4/0x340
[ 116.988651][ T5881] ? do_raw_spin_unlock+0xf5/0x200
[ 116.993804][ T5881] chrdev_open+0x4d9/0x600
[ 116.998256][ T5881] ? __pfx_chrdev_open+0x10/0x10
[ 117.003236][ T5881] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 117.009589][ T5881] ? __pfx_chrdev_open+0x10/0x10
[ 117.014543][ T5881] do_dentry_open+0x816/0x1380
[ 117.019333][ T5881] vfs_open+0x3b/0x340
[ 117.023421][ T5881] ? path_openat+0x1428/0x1d60
[ 117.028197][ T5881] path_openat+0x1443/0x1d60
[ 117.032810][ T5881] do_file_open+0x23e/0x4a0
[ 117.037358][ T5881] ? __pfx_do_file_open+0x10/0x10
[ 117.042424][ T5881] ? _raw_spin_unlock+0x28/0x50
[ 117.047293][ T5881] ? alloc_fd+0x651/0x6c0
[ 117.051668][ T5881] do_sys_openat2+0x115/0x200
[ 117.056368][ T5881] ? __pfx_do_sys_openat2+0x10/0x10
[ 117.061585][ T5881] ? exc_page_fault+0x6a/0xc0
[ 117.066302][ T5881] __ia32_compat_sys_openat+0x131/0x160
[ 117.071876][ T5881] do_int80_emulation+0x198/0x500
[ 117.076919][ T5881] ? trace_irq_disable+0x3b/0x140
[ 117.081956][ T5881] ? asm_int80_emulation+0x1a/0x20
[ 117.087087][ T5881] ? clear_bhb_loop+0x70/0xc0
[ 117.091777][ T5881] ? clear_bhb_loop+0x70/0xc0
[ 117.096485][ T5881] asm_int80_emulation+0x1a/0x20
[ 117.101426][ T5881] RIP: 0023:0xf71b75ab
[ 117.105509][ T5881] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 117.125299][ T5881] RSP: 002b:00000000f685d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 117.133749][ T5881] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f685d100
[ 117.141738][ T5881] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 0000000000000000
[ 117.149723][ T5881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 117.157704][ T5881] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 117.165684][ T5881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 117.173675][ T5881]
[ 117.177298][ T5881] Kernel Offset: disabled
[ 117.181668][ T5881] Rebooting in 86400 seconds..