Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. 2026/05/27 09:38:24 parsed 1 programs [ 91.070617][ T5784] cgroup: Unknown subsys name 'net' [ 91.207479][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.130715][ T27] cfg80211: failed to load regulatory.db [ 93.140135][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.425210][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.433808][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.473330][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.483069][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.653711][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 96.755560][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.763705][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.771060][ T5832] bridge_slave_0: entered allmulticast mode [ 96.778203][ T5832] bridge_slave_0: entered promiscuous mode [ 96.790464][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.797672][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.806115][ T5832] bridge_slave_1: entered allmulticast mode [ 96.815766][ T5832] bridge_slave_1: entered promiscuous mode [ 96.851100][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.863475][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.899786][ T5832] team0: Port device team_slave_0 added [ 96.909615][ T5832] team0: Port device team_slave_1 added [ 96.946143][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.953217][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.979851][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.993918][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.001159][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.027246][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.073692][ T5832] hsr_slave_0: entered promiscuous mode [ 97.080337][ T5832] hsr_slave_1: entered promiscuous mode [ 97.271354][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.283730][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.294273][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.315376][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.345970][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.353312][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.361617][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.368882][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.456217][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.477048][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.491828][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.519090][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.531817][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.539065][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.557406][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.565047][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.800182][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.853935][ T5832] veth0_vlan: entered promiscuous mode [ 97.867817][ T5832] veth1_vlan: entered promiscuous mode [ 97.914768][ T5832] veth0_macvtap: entered promiscuous mode [ 97.925741][ T5832] veth1_macvtap: entered promiscuous mode [ 97.945810][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.963717][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.980583][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.992011][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.001702][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.010820][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.161098][ T5832] syz-executor (5832) used greatest stack depth: 20904 bytes left [ 98.195708][ T4361] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.687848][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.696936][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.708054][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.716784][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.725206][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.733364][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/05/27 09:38:36 executed programs: 0 [ 100.497084][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.505470][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.514770][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.523439][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.532956][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.541268][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.616066][ T4361] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.724494][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 100.795725][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.802994][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.810344][ T5885] bridge_slave_0: entered allmulticast mode [ 100.817729][ T5885] bridge_slave_0: entered promiscuous mode [ 100.826488][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.834291][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.841820][ T5885] bridge_slave_1: entered allmulticast mode [ 100.849421][ T5885] bridge_slave_1: entered promiscuous mode [ 100.885044][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.897396][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.931736][ T5885] team0: Port device team_slave_0 added [ 100.940391][ T5885] team0: Port device team_slave_1 added [ 100.966875][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.974003][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.000890][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.013405][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.020530][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.046606][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.090904][ T5885] hsr_slave_0: entered promiscuous mode [ 101.097743][ T5885] hsr_slave_1: entered promiscuous mode [ 101.104556][ T5885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.113489][ T5885] Cannot create hsr debugfs directory [ 102.609675][ T51] Bluetooth: hci0: command tx timeout [ 102.850148][ T4361] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.914514][ T4361] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.843107][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.856949][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.871518][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.900572][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.943548][ T4361] hsr_slave_0: left promiscuous mode [ 103.951920][ T4361] hsr_slave_1: left promiscuous mode [ 103.958278][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.966257][ T4361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.983460][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.991680][ T4361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.000121][ T4361] bridge_slave_1: left allmulticast mode [ 104.005832][ T4361] bridge_slave_1: left promiscuous mode [ 104.013079][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.026559][ T4361] bridge_slave_0: left allmulticast mode [ 104.033888][ T4361] bridge_slave_0: left promiscuous mode [ 104.040291][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.071507][ T4361] veth1_macvtap: left promiscuous mode [ 104.078022][ T4361] veth0_macvtap: left promiscuous mode [ 104.084306][ T4361] veth1_vlan: left promiscuous mode [ 104.091842][ T4361] veth0_vlan: left promiscuous mode [ 104.580001][ T4361] team0 (unregistering): Port device team_slave_1 removed [ 104.616995][ T4361] team0 (unregistering): Port device team_slave_0 removed [ 104.657163][ T4361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.689481][ T51] Bluetooth: hci0: command tx timeout [ 104.704079][ T4361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.957208][ T4361] bond0 (unregistering): Released all slaves [ 105.114026][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.141644][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.160994][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.168188][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.191012][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.198443][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.439714][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.517465][ T5885] veth0_vlan: entered promiscuous mode [ 105.545324][ T5885] veth1_vlan: entered promiscuous mode [ 105.597355][ T5885] veth0_macvtap: entered promiscuous mode [ 105.615454][ T5885] veth1_macvtap: entered promiscuous mode [ 105.655769][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.672726][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.685933][ T5885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.695139][ T5885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.704337][ T5885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.714303][ T5885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.782492][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.796821][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.857350][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.865631][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/27 09:38:42 executed programs: 2 [ 106.026151][ T5926] ================================================================== [ 106.034306][ T5926] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x3ff/0x4a0 [ 106.042626][ T5926] Read of size 4 at addr ffff8880273b023c by task syz.0.18/5926 [ 106.050275][ T5926] [ 106.052655][ T5926] CPU: 0 PID: 5926 Comm: syz.0.18 Not tainted syzkaller #0 [ 106.059884][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.070005][ T5926] Call Trace: [ 106.073334][ T5926] [ 106.076313][ T5926] dump_stack_lvl+0x18c/0x250 [ 106.081064][ T5926] ? read_lock_is_recursive+0x20/0x20 [ 106.086482][ T5926] ? show_regs_print_info+0x20/0x20 [ 106.091721][ T5926] ? load_image+0x420/0x420 [ 106.096246][ T5926] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 106.101731][ T5926] ? __virt_addr_valid+0x18c/0x540 [ 106.106866][ T5926] ? __virt_addr_valid+0x469/0x540 [ 106.112023][ T5926] print_report+0xa8/0x210 [ 106.116459][ T5926] ? dvb_frontend_release+0x3ff/0x4a0 [ 106.121885][ T5926] kasan_report+0x117/0x150 [ 106.126455][ T5926] ? dvb_frontend_release+0x3ff/0x4a0 [ 106.131858][ T5926] dvb_frontend_release+0x3ff/0x4a0 [ 106.137108][ T5926] ? dvb_frontend_open+0x1460/0x1460 [ 106.142435][ T5926] __fput+0x234/0x970 [ 106.146454][ T5926] task_work_run+0x1d4/0x260 [ 106.151267][ T5926] ? task_work_cancel+0x220/0x220 [ 106.156317][ T5926] get_signal+0x1235/0x13f0 [ 106.160840][ T5926] arch_do_signal_or_restart+0xc2/0x800 [ 106.166407][ T5926] ? get_sigframe_size+0x20/0x20 [ 106.171387][ T5926] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.176885][ T5926] exit_to_user_mode_loop+0x70/0x110 [ 106.182211][ T5926] exit_to_user_mode_prepare+0xee/0x180 [ 106.187776][ T5926] syscall_exit_to_user_mode+0x1a/0x50 [ 106.193346][ T5926] do_syscall_64+0x61/0xb0 [ 106.197808][ T5926] ? clear_bhb_loop+0x40/0x90 [ 106.202520][ T5926] ? clear_bhb_loop+0x40/0x90 [ 106.207242][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.213186][ T5926] RIP: 0033:0x7fb7c079ce59 [ 106.217757][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.237406][ T5926] RSP: 002b:00007ffddb3ff5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 106.245872][ T5926] RAX: 0000000000000000 RBX: 00007ffddb3ff6b0 RCX: 00007fb7c079ce59 [ 106.253947][ T5926] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 106.261931][ T5926] RBP: 0000000000019de5 R08: 0000000000000001 R09: 0000000000000000 [ 106.269917][ T5926] R10: 0000001b33c20000 R11: 0000000000000246 R12: 0000000000000000 [ 106.277914][ T5926] R13: 00007fb7c0a15fac R14: 00007fb7c0a15fa8 R15: 00007fb7c0a15fa0 [ 106.285927][ T5926] [ 106.288966][ T5926] [ 106.291320][ T5926] Allocated by task 1: [ 106.295413][ T5926] kasan_set_track+0x4e/0x70 [ 106.300057][ T5926] __kasan_kmalloc+0x8f/0xa0 [ 106.304659][ T5926] dvb_register_device+0x2fd/0x2210 [ 106.309879][ T5926] dvb_register_frontend+0x649/0x930 [ 106.315212][ T5926] vidtv_bridge_probe+0x9ab/0xf80 [ 106.320251][ T5926] platform_probe+0x13b/0x1c0 [ 106.324942][ T5926] really_probe+0x25b/0xb20 [ 106.329459][ T5926] __driver_probe_device+0x1ef/0x390 [ 106.334752][ T5926] driver_probe_device+0x4f/0x420 [ 106.339787][ T5926] __driver_attach+0x44e/0x6e0 [ 106.344558][ T5926] bus_for_each_dev+0x235/0x2b0 [ 106.349414][ T5926] bus_add_driver+0x340/0x630 [ 106.354098][ T5926] driver_register+0x23a/0x310 [ 106.358903][ T5926] vidtv_bridge_init+0x3d/0x70 [ 106.363726][ T5926] do_one_initcall+0x242/0x790 [ 106.368503][ T5926] do_initcall_level+0x137/0x1f0 [ 106.373461][ T5926] do_initcalls+0x69/0xd0 [ 106.377916][ T5926] kernel_init_freeable+0x3ed/0x580 [ 106.383211][ T5926] kernel_init+0x1d/0x1c0 [ 106.387561][ T5926] ret_from_fork+0x48/0x80 [ 106.392002][ T5926] ret_from_fork_asm+0x11/0x20 [ 106.396799][ T5926] [ 106.399145][ T5926] Freed by task 5926: [ 106.403142][ T5926] kasan_set_track+0x4e/0x70 [ 106.407745][ T5926] kasan_save_free_info+0x2e/0x50 [ 106.412783][ T5926] ____kasan_slab_free+0x126/0x1e0 [ 106.417919][ T5926] slab_free_freelist_hook+0x130/0x1a0 [ 106.423397][ T5926] __kmem_cache_free+0xba/0x1e0 [ 106.428380][ T5926] dvb_generic_release+0x123/0x1b0 [ 106.433507][ T5926] dvb_frontend_release+0x138/0x4a0 [ 106.438729][ T5926] __fput+0x234/0x970 [ 106.442737][ T5926] task_work_run+0x1d4/0x260 [ 106.447339][ T5926] get_signal+0x1235/0x13f0 [ 106.451867][ T5926] arch_do_signal_or_restart+0xc2/0x800 [ 106.457468][ T5926] exit_to_user_mode_loop+0x70/0x110 [ 106.462809][ T5926] exit_to_user_mode_prepare+0xee/0x180 [ 106.468364][ T5926] syscall_exit_to_user_mode+0x1a/0x50 [ 106.473868][ T5926] do_syscall_64+0x61/0xb0 [ 106.478290][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.484198][ T5926] [ 106.486534][ T5926] The buggy address belongs to the object at ffff8880273b0200 [ 106.486534][ T5926] which belongs to the cache kmalloc-256 of size 256 [ 106.500614][ T5926] The buggy address is located 60 bytes inside of [ 106.500614][ T5926] freed 256-byte region [ffff8880273b0200, ffff8880273b0300) [ 106.514383][ T5926] [ 106.516719][ T5926] The buggy address belongs to the physical page: [ 106.523147][ T5926] page:ffffea00009cec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x273b0 [ 106.533334][ T5926] head:ffffea00009cec00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 106.542299][ T5926] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 106.550301][ T5926] page_type: 0xffffffff() [ 106.554642][ T5926] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 106.563234][ T5926] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 106.571825][ T5926] page dumped because: kasan: bad access detected [ 106.578250][ T5926] page_owner tracks the page as allocated [ 106.584018][ T5926] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19523995695, free_ts 0 [ 106.603762][ T5926] post_alloc_hook+0x1c1/0x200 [ 106.608548][ T5926] get_page_from_freelist+0x1951/0x19e0 [ 106.614119][ T5926] __alloc_pages+0x1f0/0x460 [ 106.618755][ T5926] alloc_page_interleave+0x24/0x1e0 [ 106.624002][ T5926] alloc_slab_page+0x5d/0x160 [ 106.628712][ T5926] new_slab+0x87/0x2d0 [ 106.632820][ T5926] ___slab_alloc+0xc5d/0x12f0 [ 106.637508][ T5926] __kmem_cache_alloc_node+0x19e/0x250 [ 106.642983][ T5926] kmalloc_trace+0x2a/0xe0 [ 106.647431][ T5926] bus_add_driver+0x162/0x630 [ 106.652115][ T5926] driver_register+0x23a/0x310 [ 106.656892][ T5926] vidtv_bridge_init+0x3d/0x70 [ 106.661671][ T5926] do_one_initcall+0x242/0x790 [ 106.666441][ T5926] do_initcall_level+0x137/0x1f0 [ 106.671389][ T5926] do_initcalls+0x69/0xd0 [ 106.675762][ T5926] kernel_init_freeable+0x3ed/0x580 [ 106.680967][ T5926] page_owner free stack trace missing [ 106.686331][ T5926] [ 106.688750][ T5926] Memory state around the buggy address: [ 106.694412][ T5926] ffff8880273b0100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.702507][ T5926] ffff8880273b0180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.710577][ T5926] >ffff8880273b0200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.718656][ T5926] ^ [ 106.724581][ T5926] ffff8880273b0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.732651][ T5926] ffff8880273b0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.740715][ T5926] ================================================================== [ 106.752972][ T5926] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.760200][ T5926] CPU: 1 PID: 5926 Comm: syz.0.18 Not tainted syzkaller #0 [ 106.767401][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.777466][ T5926] Call Trace: [ 106.780753][ T5926] [ 106.783686][ T5926] dump_stack_lvl+0x18c/0x250 [ 106.788377][ T5926] ? show_regs_print_info+0x20/0x20 [ 106.793578][ T5926] ? load_image+0x420/0x420 [ 106.798095][ T5926] panic+0x2dc/0x730 [ 106.802008][ T5926] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.808200][ T5926] ? bpf_jit_dump+0xd0/0xd0 [ 106.812746][ T5926] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 106.818929][ T5926] ? _raw_spin_unlock+0x40/0x40 [ 106.823806][ T5926] ? dvb_frontend_release+0x3ff/0x4a0 [ 106.829205][ T5926] check_panic_on_warn+0x84/0xa0 [ 106.834164][ T5926] ? dvb_frontend_release+0x3ff/0x4a0 [ 106.839570][ T5926] end_report+0x6f/0x130 [ 106.843838][ T5926] kasan_report+0x128/0x150 [ 106.848363][ T5926] ? dvb_frontend_release+0x3ff/0x4a0 [ 106.853774][ T5926] dvb_frontend_release+0x3ff/0x4a0 [ 106.859010][ T5926] ? dvb_frontend_open+0x1460/0x1460 [ 106.864326][ T5926] __fput+0x234/0x970 [ 106.868335][ T5926] task_work_run+0x1d4/0x260 [ 106.872957][ T5926] ? task_work_cancel+0x220/0x220 [ 106.878010][ T5926] get_signal+0x1235/0x13f0 [ 106.882544][ T5926] arch_do_signal_or_restart+0xc2/0x800 [ 106.888122][ T5926] ? get_sigframe_size+0x20/0x20 [ 106.893128][ T5926] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.898615][ T5926] exit_to_user_mode_loop+0x70/0x110 [ 106.904202][ T5926] exit_to_user_mode_prepare+0xee/0x180 [ 106.909861][ T5926] syscall_exit_to_user_mode+0x1a/0x50 [ 106.915433][ T5926] do_syscall_64+0x61/0xb0 [ 106.919872][ T5926] ? clear_bhb_loop+0x40/0x90 [ 106.924599][ T5926] ? clear_bhb_loop+0x40/0x90 [ 106.929306][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.935239][ T5926] RIP: 0033:0x7fb7c079ce59 [ 106.939671][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.959301][ T5926] RSP: 002b:00007ffddb3ff5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 106.967749][ T5926] RAX: 0000000000000000 RBX: 00007ffddb3ff6b0 RCX: 00007fb7c079ce59 [ 106.975910][ T5926] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 106.983992][ T5926] RBP: 0000000000019de5 R08: 0000000000000001 R09: 0000000000000000 [ 106.992069][ T5926] R10: 0000001b33c20000 R11: 0000000000000246 R12: 0000000000000000 [ 107.000060][ T5926] R13: 00007fb7c0a15fac R14: 00007fb7c0a15fa8 R15: 00007fb7c0a15fa0 [ 107.008074][ T5926] [ 107.011781][ T5926] Kernel Offset: disabled [ 107.016143][ T5926] Rebooting in 86400 seconds..