Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. 2026/02/17 10:38:07 parsed 1 programs [ 85.094251][ T5832] cgroup: Unknown subsys name 'net' [ 85.219966][ T5832] cgroup: Unknown subsys name 'cpuset' [ 85.228912][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.848441][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.005596][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.307237][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 90.394205][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.402001][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.409765][ T5853] bridge_slave_0: entered allmulticast mode [ 90.417685][ T5853] bridge_slave_0: entered promiscuous mode [ 90.427645][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.435180][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.442506][ T5853] bridge_slave_1: entered allmulticast mode [ 90.450208][ T5853] bridge_slave_1: entered promiscuous mode [ 90.492614][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.505313][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.537188][ T5853] team0: Port device team_slave_0 added [ 90.545637][ T5853] team0: Port device team_slave_1 added [ 90.572840][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.580125][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.607339][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.621745][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.628778][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.654783][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.701916][ T5853] hsr_slave_0: entered promiscuous mode [ 90.709140][ T5853] hsr_slave_1: entered promiscuous mode [ 90.877080][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.890692][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.901468][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.913501][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.949720][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.957320][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.965142][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.972656][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.042949][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.067780][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.077505][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.094988][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.109934][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.117368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.134211][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.141725][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.337383][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.401540][ T5853] veth0_vlan: entered promiscuous mode [ 91.416871][ T5853] veth1_vlan: entered promiscuous mode [ 91.455691][ T5853] veth0_macvtap: entered promiscuous mode [ 91.467219][ T5853] veth1_macvtap: entered promiscuous mode [ 91.492587][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.510055][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.528241][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.537988][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.549883][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.558977][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.711228][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.722720][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.732003][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.742338][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.751256][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.759137][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.790191][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.862582][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.971123][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.007838][ T9] cfg80211: failed to load regulatory.db [ 93.124602][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.133646][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.172478][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.181823][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.243143][ T12] bridge_slave_1: left allmulticast mode [ 94.249540][ T12] bridge_slave_1: left promiscuous mode [ 94.257029][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.272927][ T12] bridge_slave_0: left allmulticast mode [ 94.291807][ T12] bridge_slave_0: left promiscuous mode [ 94.302366][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.652316][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.663342][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.673552][ T12] bond0 (unregistering): Released all slaves [ 94.786441][ T12] hsr_slave_0: left promiscuous mode [ 94.792894][ T12] hsr_slave_1: left promiscuous mode [ 94.799917][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.808804][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.819625][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.829418][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.847352][ T12] veth1_macvtap: left promiscuous mode [ 94.853109][ T12] veth0_macvtap: left promiscuous mode [ 94.859230][ T12] veth1_vlan: left promiscuous mode [ 94.864611][ T12] veth0_vlan: left promiscuous mode [ 95.231516][ T12] team0 (unregistering): Port device team_slave_1 removed [ 95.253802][ T12] team0 (unregistering): Port device team_slave_0 removed 2026/02/17 10:38:22 executed programs: 0 [ 96.765309][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.777220][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.785897][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.794159][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.803541][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.211259][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 97.444460][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.468202][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.475619][ T5975] bridge_slave_0: entered allmulticast mode [ 97.485166][ T5975] bridge_slave_0: entered promiscuous mode [ 97.578063][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.585606][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.598200][ T5975] bridge_slave_1: entered allmulticast mode [ 97.609578][ T5975] bridge_slave_1: entered promiscuous mode [ 97.674516][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.688537][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.728443][ T5975] team0: Port device team_slave_0 added [ 97.738281][ T5975] team0: Port device team_slave_1 added [ 97.775278][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.782305][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.809100][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.823502][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.831209][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.857992][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.951950][ T5975] hsr_slave_0: entered promiscuous mode [ 97.959762][ T5975] hsr_slave_1: entered promiscuous mode [ 98.669878][ T5975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.693436][ T5975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.708972][ T5975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.725661][ T5975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.886993][ T5149] Bluetooth: hci0: command tx timeout [ 98.917215][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.952872][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.974567][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.981826][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.002732][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.010098][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.359566][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.459160][ T5975] veth0_vlan: entered promiscuous mode [ 99.480658][ T5975] veth1_vlan: entered promiscuous mode [ 99.576854][ T5975] veth0_macvtap: entered promiscuous mode [ 99.605500][ T5975] veth1_macvtap: entered promiscuous mode [ 99.689160][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.715526][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.766321][ T1110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.776841][ T1110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.789423][ T1110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.808497][ T1110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.926590][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.934726][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.984013][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.993554][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.966128][ T5149] Bluetooth: hci0: command tx timeout [ 101.681986][ T6089] ================================================================== [ 101.690083][ T6089] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x40a/0x4d0 [ 101.698331][ T6089] Read of size 4 at addr ffff88802c2b0e3c by task syz.0.18/6089 [ 101.706220][ T6089] [ 101.708568][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 101.708582][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.708588][ T6089] Call Trace: [ 101.708595][ T6089] [ 101.708600][ T6089] dump_stack_lvl+0xe8/0x150 [ 101.708619][ T6089] print_report+0xba/0x230 [ 101.708633][ T6089] ? dvb_frontend_release+0x40a/0x4d0 [ 101.708649][ T6089] kasan_report+0x117/0x150 [ 101.708662][ T6089] ? dvb_frontend_release+0x40a/0x4d0 [ 101.708678][ T6089] dvb_frontend_release+0x40a/0x4d0 [ 101.708693][ T6089] ? __pfx_dvb_frontend_release+0x10/0x10 [ 101.708708][ T6089] __fput+0x44f/0xa70 [ 101.708725][ T6089] task_work_run+0x1d9/0x270 [ 101.708737][ T6089] ? __pfx_task_work_run+0x10/0x10 [ 101.708748][ T6089] ? __lock_acquire+0x6b5/0x2cf0 [ 101.708764][ T6089] get_signal+0x11eb/0x1330 [ 101.708777][ T6089] ? __pfx___fput_deferred+0x10/0x10 [ 101.708794][ T6089] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.708806][ T6089] arch_do_signal_or_restart+0xbc/0x830 [ 101.708820][ T6089] ? do_raw_spin_unlock+0xf5/0x210 [ 101.708830][ T6089] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.708847][ T6089] exit_to_user_mode_loop+0x86/0x480 [ 101.708859][ T6089] ? rcu_is_watching+0x15/0xb0 [ 101.708874][ T6089] do_syscall_64+0x32d/0xf80 [ 101.708885][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.708896][ T6089] ? clear_bhb_loop+0x40/0x90 [ 101.708908][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.708918][ T6089] RIP: 0033:0x7fcd99f9bf79 [ 101.708930][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.708940][ T6089] RSP: 002b:00007ffc1f1bdb08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 101.708958][ T6089] RAX: 0000000000000000 RBX: 00007ffc1f1bdbf0 RCX: 00007fcd99f9bf79 [ 101.708966][ T6089] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 101.708973][ T6089] RBP: 0000000000018cef R08: 0000000000000001 R09: 0000000000000000 [ 101.708979][ T6089] R10: 0000001b31620000 R11: 0000000000000246 R12: 0000000000000000 [ 101.708986][ T6089] R13: 00007fcd9a215fac R14: 00007fcd9a215fa8 R15: 00007fcd9a215fa0 [ 101.708998][ T6089] [ 101.709002][ T6089] [ 101.932896][ T6089] Allocated by task 1: [ 101.937007][ T6089] kasan_save_track+0x3e/0x80 [ 101.941799][ T6089] __kasan_kmalloc+0x93/0xb0 [ 101.946583][ T6089] __kmalloc_cache_noprof+0x31c/0x660 [ 101.952393][ T6089] dvb_register_device+0x2fd/0x2210 [ 101.957782][ T6089] dvb_register_frontend+0x649/0x950 [ 101.963178][ T6089] vidtv_bridge_probe+0x9aa/0xf80 [ 101.968224][ T6089] platform_probe+0xf9/0x190 [ 101.972844][ T6089] really_probe+0x267/0xaf0 [ 101.977351][ T6089] __driver_probe_device+0x18c/0x320 [ 101.982865][ T6089] driver_probe_device+0x4f/0x240 [ 101.988001][ T6089] __driver_attach+0x3e7/0x710 [ 101.992769][ T6089] bus_for_each_dev+0x23b/0x2c0 [ 101.997621][ T6089] bus_add_driver+0x345/0x670 [ 102.002294][ T6089] driver_register+0x23a/0x320 [ 102.007149][ T6089] vidtv_bridge_init+0x28/0x50 [ 102.012186][ T6089] do_one_initcall+0x250/0x8d0 [ 102.017133][ T6089] do_initcall_level+0x104/0x190 [ 102.022128][ T6089] do_initcalls+0x59/0xa0 [ 102.026567][ T6089] kernel_init_freeable+0x2a6/0x3e0 [ 102.031884][ T6089] kernel_init+0x1d/0x1d0 [ 102.036325][ T6089] ret_from_fork+0x51e/0xb90 [ 102.040947][ T6089] ret_from_fork_asm+0x1a/0x30 [ 102.045725][ T6089] [ 102.048074][ T6089] Freed by task 6089: [ 102.052156][ T6089] kasan_save_track+0x3e/0x80 [ 102.057108][ T6089] kasan_save_free_info+0x46/0x50 [ 102.062333][ T6089] __kasan_slab_free+0x5c/0x80 [ 102.067116][ T6089] kfree+0x1c1/0x630 [ 102.071107][ T6089] dvb_generic_release+0x11d/0x1b0 [ 102.076584][ T6089] dvb_frontend_release+0x132/0x4d0 [ 102.081790][ T6089] __fput+0x44f/0xa70 [ 102.085923][ T6089] task_work_run+0x1d9/0x270 [ 102.090608][ T6089] get_signal+0x11eb/0x1330 [ 102.095481][ T6089] arch_do_signal_or_restart+0xbc/0x830 [ 102.101244][ T6089] exit_to_user_mode_loop+0x86/0x480 [ 102.107186][ T6089] do_syscall_64+0x32d/0xf80 [ 102.112001][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.118177][ T6089] [ 102.120515][ T6089] The buggy address belongs to the object at ffff88802c2b0e00 [ 102.120515][ T6089] which belongs to the cache kmalloc-256 of size 256 [ 102.134763][ T6089] The buggy address is located 60 bytes inside of [ 102.134763][ T6089] freed 256-byte region [ffff88802c2b0e00, ffff88802c2b0f00) [ 102.148759][ T6089] [ 102.151094][ T6089] The buggy address belongs to the physical page: [ 102.157772][ T6089] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c2b0 [ 102.166979][ T6089] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.175592][ T6089] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 102.183253][ T6089] page_type: f5(slab) [ 102.187291][ T6089] raw: 00fff00000000040 ffff88813ff1eb40 dead000000000122 0000000000000000 [ 102.195879][ T6089] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 102.204498][ T6089] head: 00fff00000000040 ffff88813ff1eb40 dead000000000122 0000000000000000 [ 102.213635][ T6089] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 102.222399][ T6089] head: 00fff00000000001 ffffea0000b0ac01 00000000ffffffff 00000000ffffffff [ 102.231076][ T6089] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 102.239828][ T6089] page dumped because: kasan: bad access detected [ 102.246340][ T6089] page_owner tracks the page as allocated [ 102.252065][ T6089] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17073102367, free_ts 0 [ 102.271950][ T6089] post_alloc_hook+0x231/0x280 [ 102.276729][ T6089] get_page_from_freelist+0x24dc/0x2580 [ 102.282364][ T6089] __alloc_frozen_pages_noprof+0x18d/0x380 [ 102.288268][ T6089] allocate_slab+0x77/0x660 [ 102.292885][ T6089] refill_objects+0x331/0x3c0 [ 102.297566][ T6089] __pcs_replace_empty_main+0x2b9/0x620 [ 102.303203][ T6089] __kmalloc_cache_noprof+0x392/0x660 [ 102.308756][ T6089] bus_add_driver+0x162/0x670 [ 102.313559][ T6089] driver_register+0x23a/0x320 [ 102.318640][ T6089] usb_register_driver+0x1e4/0x390 [ 102.324214][ T6089] do_one_initcall+0x250/0x8d0 [ 102.329089][ T6089] do_initcall_level+0x104/0x190 [ 102.334207][ T6089] do_initcalls+0x59/0xa0 [ 102.338559][ T6089] kernel_init_freeable+0x2a6/0x3e0 [ 102.343974][ T6089] kernel_init+0x1d/0x1d0 [ 102.348588][ T6089] ret_from_fork+0x51e/0xb90 [ 102.353434][ T6089] page_owner free stack trace missing [ 102.358818][ T6089] [ 102.361149][ T6089] Memory state around the buggy address: [ 102.367043][ T6089] ffff88802c2b0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.375450][ T6089] ffff88802c2b0d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.383530][ T6089] >ffff88802c2b0e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.391703][ T6089] ^ [ 102.397773][ T6089] ffff88802c2b0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.405917][ T6089] ffff88802c2b0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.414081][ T6089] ================================================================== [ 102.432906][ T6089] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.440174][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 102.449551][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.459725][ T6089] Call Trace: [ 102.463043][ T6089] [ 102.465987][ T6089] vpanic+0x56c/0xa60 [ 102.470009][ T6089] ? __pfx_vpanic+0x10/0x10 [ 102.474541][ T6089] ? __pfx___schedule+0x10/0x10 [ 102.479487][ T6089] panic+0xc5/0xd0 [ 102.483310][ T6089] ? __pfx_panic+0x10/0x10 [ 102.487732][ T6089] ? preempt_schedule_common+0x82/0xd0 [ 102.493553][ T6089] ? dvb_frontend_release+0x40a/0x4d0 [ 102.498936][ T6089] check_panic_on_warn+0x89/0xb0 [ 102.503960][ T6089] ? dvb_frontend_release+0x40a/0x4d0 [ 102.509605][ T6089] end_report+0x73/0x180 [ 102.513940][ T6089] ? dvb_frontend_release+0x40a/0x4d0 [ 102.519400][ T6089] kasan_report+0x128/0x150 [ 102.524097][ T6089] ? dvb_frontend_release+0x40a/0x4d0 [ 102.529480][ T6089] dvb_frontend_release+0x40a/0x4d0 [ 102.534769][ T6089] ? __pfx_dvb_frontend_release+0x10/0x10 [ 102.540767][ T6089] __fput+0x44f/0xa70 [ 102.544782][ T6089] task_work_run+0x1d9/0x270 [ 102.550084][ T6089] ? __pfx_task_work_run+0x10/0x10 [ 102.555487][ T6089] ? __lock_acquire+0x6b5/0x2cf0 [ 102.560437][ T6089] get_signal+0x11eb/0x1330 [ 102.564947][ T6089] ? __pfx___fput_deferred+0x10/0x10 [ 102.570297][ T6089] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.575409][ T6089] arch_do_signal_or_restart+0xbc/0x830 [ 102.580964][ T6089] ? do_raw_spin_unlock+0xf5/0x210 [ 102.586255][ T6089] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.592856][ T6089] exit_to_user_mode_loop+0x86/0x480 [ 102.598233][ T6089] ? rcu_is_watching+0x15/0xb0 [ 102.603263][ T6089] do_syscall_64+0x32d/0xf80 [ 102.607941][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.614226][ T6089] ? clear_bhb_loop+0x40/0x90 [ 102.618911][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.624989][ T6089] RIP: 0033:0x7fcd99f9bf79 [ 102.629678][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.649645][ T6089] RSP: 002b:00007ffc1f1bdb08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 102.658251][ T6089] RAX: 0000000000000000 RBX: 00007ffc1f1bdbf0 RCX: 00007fcd99f9bf79 [ 102.666791][ T6089] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 102.674870][ T6089] RBP: 0000000000018cef R08: 0000000000000001 R09: 0000000000000000 [ 102.683041][ T6089] R10: 0000001b31620000 R11: 0000000000000246 R12: 0000000000000000 [ 102.691041][ T6089] R13: 00007fcd9a215fac R14: 00007fcd9a215fa8 R15: 00007fcd9a215fa0 [ 102.699304][ T6089] [ 102.703089][ T6089] Kernel Offset: disabled [ 102.707628][ T6089] Rebooting in 86400 seconds..