Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts.
2026/07/12 12:00:06 parsed 1 programs
2026/07/12 12:00:06 serving rpc on tcp://40399
[ 65.262057][ T4198] cgroup: Unknown subsys name 'net'
[ 65.395743][ T4198] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 66.951120][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 68.779420][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 68.787507][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.801528][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 68.821107][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 68.829207][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.837677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 69.152853][ T4235] chnl_net:caif_netlink_parms(): no params data found
[ 69.221673][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.230721][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.239127][ T4235] device bridge_slave_0 entered promiscuous mode
[ 69.251169][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.258362][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.266645][ T4235] device bridge_slave_1 entered promiscuous mode
[ 69.299350][ T4235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 69.312935][ T4235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 69.346360][ T4235] team0: Port device team_slave_0 added
[ 69.355271][ T4235] team0: Port device team_slave_1 added
[ 69.381025][ T4235] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 69.389790][ T4235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 69.417317][ T4235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 69.432495][ T4235] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 69.439527][ T4235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 69.467410][ T4235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 69.508162][ T4235] device hsr_slave_0 entered promiscuous mode
[ 69.515082][ T4235] device hsr_slave_1 entered promiscuous mode
[ 69.658450][ T4235] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 69.670607][ T4235] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 69.682480][ T4235] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 69.693440][ T4235] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 69.779812][ T4235] 8021q: adding VLAN 0 to HW filter on device bond0
[ 69.794024][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 69.804080][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 69.815623][ T4235] 8021q: adding VLAN 0 to HW filter on device team0
[ 69.831610][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 69.841112][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 69.850678][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.857980][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 69.867093][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 69.883714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 69.894657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 69.904050][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.911182][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 69.927429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 69.950591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 69.962143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 69.972466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 69.983323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 69.992503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 70.011269][ T4235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 70.023218][ T4235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 70.034880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 70.047525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 70.056223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 70.066240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 70.074854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 70.085915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 70.215944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 70.229632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 70.243746][ T4235] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 70.269599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 70.281100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 70.302698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 70.312480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 70.321253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 70.330944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 70.343595][ T4235] device veth0_vlan entered promiscuous mode
[ 70.359888][ T4235] device veth1_vlan entered promiscuous mode
[ 70.379736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 70.389879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 70.398624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 70.407020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 70.419482][ T4235] device veth0_macvtap entered promiscuous mode
[ 70.431084][ T4235] device veth1_macvtap entered promiscuous mode
[ 70.459658][ T4235] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 70.468170][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 70.476698][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 70.485043][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 70.494177][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 70.508246][ T4235] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 70.515995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 70.525435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 70.538000][ T4235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.547112][ T4235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.556155][ T4235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.565511][ T4235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.491402][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.498707][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
2026/07/12 12:00:15 executed programs: 0
[ 72.950480][ T4297] chnl_net:caif_netlink_parms(): no params data found
[ 73.016670][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.024033][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.031911][ T4297] device bridge_slave_0 entered promiscuous mode
[ 73.040487][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.048163][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.055821][ T4297] device bridge_slave_1 entered promiscuous mode
[ 73.081516][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 73.093301][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 73.121771][ T4297] team0: Port device team_slave_0 added
[ 73.129935][ T4297] team0: Port device team_slave_1 added
[ 73.149780][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 73.156746][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.182763][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 73.194875][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 73.201978][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.227916][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 73.263330][ T4297] device hsr_slave_0 entered promiscuous mode
[ 73.270383][ T4297] device hsr_slave_1 entered promiscuous mode
[ 73.277515][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 73.285592][ T4297] Cannot create hsr debugfs directory
[ 73.371239][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.847850][ T2302] Bluetooth: hci0: command 0x0409 tx timeout
[ 76.013757][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.081322][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.145630][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.273073][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 76.282738][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 76.292282][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 76.315192][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 76.362110][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0
[ 76.396639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 76.406464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 76.416966][ T4297] 8021q: adding VLAN 0 to HW filter on device team0
[ 76.456473][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 76.465179][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 76.474374][ T145] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.481497][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.489786][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 76.499094][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 76.508180][ T145] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.515240][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.522993][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 76.532352][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 76.542829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 76.571787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 76.581370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 76.589961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 76.601269][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 76.610478][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 76.638991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 76.647745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 76.659393][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 76.668023][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 76.679552][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 76.701202][ T155] device hsr_slave_0 left promiscuous mode
[ 76.708077][ T155] device hsr_slave_1 left promiscuous mode
[ 76.714853][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 76.725922][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 76.737435][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 76.744870][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 76.753276][ T155] device bridge_slave_1 left promiscuous mode
[ 76.760324][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.773676][ T155] device bridge_slave_0 left promiscuous mode
[ 76.779927][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.797874][ T155] device veth1_macvtap left promiscuous mode
[ 76.804451][ T155] device veth0_macvtap left promiscuous mode
[ 76.810962][ T155] device veth1_vlan left promiscuous mode
[ 76.816959][ T155] device veth0_vlan left promiscuous mode
[ 76.927631][ T2302] Bluetooth: hci0: command 0x041b tx timeout
[ 76.977068][ T155] team0 (unregistering): Port device team_slave_1 removed
[ 76.991365][ T155] team0 (unregistering): Port device team_slave_0 removed
[ 77.003816][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 77.021489][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 77.071912][ T155] bond0 (unregistering): Released all slaves
[ 77.163409][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 77.171139][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 77.184664][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.212655][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 77.221984][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 77.239915][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 77.248372][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 77.256620][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 77.264754][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 77.275112][ T4297] device veth0_vlan entered promiscuous mode
[ 77.288516][ T4297] device veth1_vlan entered promiscuous mode
[ 77.315945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 77.324303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 77.332704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 77.341586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 77.352181][ T4297] device veth0_macvtap entered promiscuous mode
[ 77.363518][ T4297] device veth1_macvtap entered promiscuous mode
[ 77.382313][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.390204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 77.400356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 77.409475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 77.419425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 77.430732][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.443013][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.452063][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.462110][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.471111][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.481331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 77.494888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 77.576953][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.589479][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.599759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 77.621930][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.633039][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.641925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 77.731364][ T4310] ==================================================================
[ 77.739671][ T4310] BUG: KASAN: use-after-free in dvb_frontend_release+0x3f8/0x4a0
[ 77.747856][ T4310] Read of size 4 at addr ffff88802941f63c by task syz.0.18/4310
[ 77.755505][ T4310]
[ 77.757845][ T4310] CPU: 0 PID: 4310 Comm: syz.0.18 Not tainted syzkaller #0
[ 77.765058][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 77.775130][ T4310] Call Trace:
[ 77.778429][ T4310]
[ 77.781371][ T4310] dump_stack_lvl+0x188/0x250
[ 77.786079][ T4310] ? show_regs_print_info+0x20/0x20
[ 77.791295][ T4310] ? _printk+0xda/0x130
[ 77.795476][ T4310] ? dvb_frontend_release+0x3f8/0x4a0
[ 77.800966][ T4310] ? load_image+0x410/0x410
[ 77.805499][ T4310] print_address_description+0x60/0x2d0
[ 77.811067][ T4310] ? dvb_frontend_release+0x3f8/0x4a0
[ 77.816456][ T4310] kasan_report+0xdf/0x130
[ 77.820891][ T4310] ? dvb_frontend_release+0x3f8/0x4a0
[ 77.826286][ T4310] dvb_frontend_release+0x3f8/0x4a0
[ 77.831506][ T4310] ? dvb_frontend_open+0x12d0/0x12d0
[ 77.836810][ T4310] __fput+0x212/0x8c0
[ 77.840821][ T4310] task_work_run+0x125/0x1a0
[ 77.845437][ T4310] get_signal+0x123e/0x12e0
[ 77.849982][ T4310] arch_do_signal_or_restart+0xe6/0x12a0
[ 77.855636][ T4310] ? pick_file+0x18c/0x220
[ 77.860075][ T4310] ? __lock_acquire+0x7b50/0x7b50
[ 77.865125][ T4310] ? do_raw_spin_lock+0x128/0x2f0
[ 77.870167][ T4310] ? __rwlock_init+0x140/0x140
[ 77.874950][ T4310] ? get_sigframe_size+0x10/0x10
2026/07/12 12:00:20 executed programs: 3
[ 77.879928][ T4310] ? exit_to_user_mode_loop+0x3b/0x130
[ 77.885411][ T4310] exit_to_user_mode_loop+0x9e/0x130
[ 77.890720][ T4310] exit_to_user_mode_prepare+0xee/0x180
[ 77.896288][ T4310] syscall_exit_to_user_mode+0x16/0x40
[ 77.901761][ T4310] do_syscall_64+0x58/0xa0
[ 77.906195][ T4310] ? clear_bhb_loop+0x30/0x80
[ 77.910886][ T4310] ? clear_bhb_loop+0x30/0x80
[ 77.915580][ T4310] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 77.921573][ T4310] RIP: 0033:0x7f83dbc68e59
[ 77.926011][ T4310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 77.945634][ T4310] RSP: 002b:00007ffc8c117e18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 77.955082][ T4310] RAX: 0000000000000000 RBX: 00007ffc8c117f00 RCX: 00007f83dbc68e59
[ 77.963087][ T4310] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 77.971078][ T4310] RBP: 0000000000012f5a R08: 0000000000000001 R09: 0000000000000000
[ 77.979069][ T4310] R10: 0000001b30820000 R11: 0000000000000246 R12: 0000000000000000
[ 77.987059][ T4310] R13: 00007f83dbef0fac R14: 00007f83dbef0fa8 R15: 00007f83dbef0fa0
[ 77.995078][ T4310]
[ 77.998115][ T4310]
[ 78.000447][ T4310] Allocated by task 1:
[ 78.004525][ T4310] __kasan_kmalloc+0xaf/0xe0
[ 78.009132][ T4310] dvb_register_device+0x300/0x1dc0
[ 78.014350][ T4310] dvb_register_frontend+0x629/0x900
[ 78.019657][ T4310] vidtv_bridge_probe+0x9c1/0xf30
[ 78.024810][ T4310] platform_probe+0x137/0x1c0
[ 78.029504][ T4310] really_probe+0x276/0xc70
[ 78.034026][ T4310] __driver_probe_device+0x1f5/0x390
[ 78.039319][ T4310] driver_probe_device+0x4f/0x420
[ 78.044369][ T4310] __driver_attach+0x45d/0x660
[ 78.049152][ T4310] bus_for_each_dev+0x182/0x1f0
[ 78.054021][ T4310] bus_add_driver+0x324/0x5d0
[ 78.058713][ T4310] driver_register+0x32d/0x430
[ 78.063581][ T4310] vidtv_bridge_init+0x39/0x70
[ 78.068360][ T4310] do_one_initcall+0x272/0x730
[ 78.073141][ T4310] do_initcall_level+0x13d/0x1f0
[ 78.078085][ T4310] do_initcalls+0x4b/0x90
[ 78.082423][ T4310] kernel_init_freeable+0x3d5/0x560
[ 78.087630][ T4310] kernel_init+0x19/0x1b0
[ 78.091973][ T4310] ret_from_fork+0x1f/0x30
[ 78.096410][ T4310]
[ 78.098742][ T4310] Freed by task 4310:
[ 78.102729][ T4310] kasan_set_track+0x4b/0x70
[ 78.107329][ T4310] kasan_set_free_info+0x1f/0x40
[ 78.112279][ T4310] ____kasan_slab_free+0xd5/0x110
[ 78.117317][ T4310] slab_free_freelist_hook+0xec/0x170
[ 78.122706][ T4310] kfree+0xef/0x2a0
[ 78.126523][ T4310] dvb_generic_release+0x11c/0x1b0
[ 78.131644][ T4310] dvb_frontend_release+0x134/0x4a0
[ 78.136975][ T4310] __fput+0x212/0x8c0
[ 78.140987][ T4310] task_work_run+0x125/0x1a0
[ 78.145606][ T4310] get_signal+0x123e/0x12e0
[ 78.150124][ T4310] arch_do_signal_or_restart+0xe6/0x12a0
[ 78.155782][ T4310] exit_to_user_mode_loop+0x9e/0x130
[ 78.161087][ T4310] exit_to_user_mode_prepare+0xee/0x180
[ 78.166669][ T4310] syscall_exit_to_user_mode+0x16/0x40
[ 78.172151][ T4310] do_syscall_64+0x58/0xa0
[ 78.176585][ T4310] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.182489][ T4310]
[ 78.184819][ T4310] The buggy address belongs to the object at ffff88802941f600
[ 78.184819][ T4310] which belongs to the cache kmalloc-256 of size 256
[ 78.198976][ T4310] The buggy address is located 60 bytes inside of
[ 78.198976][ T4310] 256-byte region [ffff88802941f600, ffff88802941f700)
[ 78.212178][ T4310] The buggy address belongs to the page:
[ 78.217815][ T4310] page:ffffea0000a50780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2941e
[ 78.228065][ T4310] head:ffffea0000a50780 order:1 compound_mapcount:0
[ 78.234661][ T4310] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.242663][ T4310] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41b40
[ 78.251263][ T4310] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 78.259922][ T4310] page dumped because: kasan: bad access detected
[ 78.266350][ T4310] page_owner tracks the page as allocated
[ 78.272071][ T4310] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2789, ts 18984920308, free_ts 0
[ 78.290407][ T4310] get_page_from_freelist+0x24f6/0x2670
[ 78.295984][ T4310] __alloc_pages+0x1ee/0x480
[ 78.300598][ T4310] new_slab+0xc0/0x4b0
[ 78.304680][ T4310] ___slab_alloc+0x807/0xdd0
[ 78.309285][ T4310] kmem_cache_alloc_trace+0xf9/0x290
[ 78.314580][ T4310] kthread+0x10a/0x520
[ 78.318664][ T4310] ret_from_fork+0x1f/0x30
[ 78.323097][ T4310] page_owner free stack trace missing
[ 78.328481][ T4310]
[ 78.330829][ T4310] Memory state around the buggy address:
[ 78.336474][ T4310] ffff88802941f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 78.344558][ T4310] ffff88802941f580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 78.352635][ T4310] >ffff88802941f600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 78.360709][ T4310] ^
[ 78.366615][ T4310] ffff88802941f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 78.374684][ T4310] ffff88802941f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 78.383310][ T4310] ==================================================================
[ 78.391689][ T4310] Disabling lock debugging due to kernel taint
[ 78.416398][ T4310] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 78.423645][ T4310] CPU: 0 PID: 4310 Comm: syz.0.18 Tainted: G B syzkaller #0
[ 78.432247][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 78.442315][ T4310] Call Trace:
[ 78.445593][ T4310]
[ 78.448522][ T4310] dump_stack_lvl+0x188/0x250
[ 78.453257][ T4310] ? show_regs_print_info+0x20/0x20
[ 78.458452][ T4310] ? load_image+0x410/0x410
[ 78.462957][ T4310] panic+0x2f8/0x850
[ 78.466862][ T4310] ? bpf_jit_dump+0xd0/0xd0
[ 78.471895][ T4310] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 78.477897][ T4310] ? _raw_spin_unlock+0x40/0x40
[ 78.482758][ T4310] ? print_memory_metadata+0x314/0x400
[ 78.488223][ T4310] ? dvb_frontend_release+0x3f8/0x4a0
[ 78.493594][ T4310] check_panic_on_warn+0x80/0xa0
[ 78.498536][ T4310] ? dvb_frontend_release+0x3f8/0x4a0
[ 78.503914][ T4310] end_report+0x6d/0xf0
[ 78.508071][ T4310] kasan_report+0x102/0x130
[ 78.512573][ T4310] ? dvb_frontend_release+0x3f8/0x4a0
[ 78.517953][ T4310] dvb_frontend_release+0x3f8/0x4a0
[ 78.523170][ T4310] ? dvb_frontend_open+0x12d0/0x12d0
[ 78.528468][ T4310] __fput+0x212/0x8c0
[ 78.532468][ T4310] task_work_run+0x125/0x1a0
[ 78.537078][ T4310] get_signal+0x123e/0x12e0
[ 78.541587][ T4310] arch_do_signal_or_restart+0xe6/0x12a0
[ 78.547222][ T4310] ? pick_file+0x18c/0x220
[ 78.551636][ T4310] ? __lock_acquire+0x7b50/0x7b50
[ 78.556683][ T4310] ? do_raw_spin_lock+0x128/0x2f0
[ 78.561704][ T4310] ? __rwlock_init+0x140/0x140
[ 78.566465][ T4310] ? get_sigframe_size+0x10/0x10
[ 78.571407][ T4310] ? exit_to_user_mode_loop+0x3b/0x130
[ 78.576862][ T4310] exit_to_user_mode_loop+0x9e/0x130
[ 78.582148][ T4310] exit_to_user_mode_prepare+0xee/0x180
[ 78.587690][ T4310] syscall_exit_to_user_mode+0x16/0x40
[ 78.593148][ T4310] do_syscall_64+0x58/0xa0
[ 78.597559][ T4310] ? clear_bhb_loop+0x30/0x80
[ 78.602257][ T4310] ? clear_bhb_loop+0x30/0x80
[ 78.606933][ T4310] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.612826][ T4310] RIP: 0033:0x7f83dbc68e59
[ 78.617244][ T4310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 78.636936][ T4310] RSP: 002b:00007ffc8c117e18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 78.645348][ T4310] RAX: 0000000000000000 RBX: 00007ffc8c117f00 RCX: 00007f83dbc68e59
[ 78.653326][ T4310] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 78.661293][ T4310] RBP: 0000000000012f5a R08: 0000000000000001 R09: 0000000000000000
[ 78.669262][ T4310] R10: 0000001b30820000 R11: 0000000000000246 R12: 0000000000000000
[ 78.677229][ T4310] R13: 00007f83dbef0fac R14: 00007f83dbef0fa8 R15: 00007f83dbef0fa0
[ 78.685210][ T4310]
[ 78.688317][ T4310] Kernel Offset: disabled
[ 78.692661][ T4310] Rebooting in 86400 seconds..