no interfaces have a carrier [ 38.054895][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.067500][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.110' (ED25519) to the list of known hosts. 2026/06/26 13:46:36 parsed 1 programs 2026/06/26 13:46:36 serving rpc on tcp://34283 syzkaller login: [ 62.597929][ T4200] cgroup: Unknown subsys name 'net' [ 62.749965][ T4200] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.046680][ T4200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.158356][ T4232] chnl_net:caif_netlink_parms(): no params data found [ 66.425082][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.432807][ T4232] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.440751][ T4232] device bridge_slave_0 entered promiscuous mode [ 66.510343][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.527263][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.551190][ T4232] device bridge_slave_1 entered promiscuous mode [ 66.637071][ T4232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.677406][ T4232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.774366][ T4232] team0: Port device team_slave_0 added [ 66.786197][ T4232] team0: Port device team_slave_1 added [ 66.899568][ T4232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.935188][ T4232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.985929][ T4232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.025340][ T4232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.032399][ T4232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.083425][ T4232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.103283][ T3035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.118799][ T3035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.142311][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.186820][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.198096][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.199824][ T4232] device hsr_slave_0 entered promiscuous mode [ 67.222545][ T4232] device hsr_slave_1 entered promiscuous mode [ 67.232966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.542117][ T4232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.571519][ T4232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.602898][ T4232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.628715][ T4232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.700952][ T4232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.716765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.728907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.740158][ T4232] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.750957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.760317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.770759][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.778097][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.790489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.802841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.812935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.821741][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.828858][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.845773][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.856794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.876754][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.888193][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.897954][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.912174][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.926497][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.935878][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.944322][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.959243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.969902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.980282][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.107710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.116504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.129670][ T4232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.152975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.164124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.179808][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.188740][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.198443][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.206966][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.216593][ T4232] device veth0_vlan entered promiscuous mode [ 68.231080][ T4232] device veth1_vlan entered promiscuous mode [ 68.256258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.267030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.275234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.283843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.295538][ T4232] device veth0_macvtap entered promiscuous mode [ 68.306074][ T4232] device veth1_macvtap entered promiscuous mode [ 68.324480][ T4232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.333244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.342879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.351157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.360792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.372497][ T4232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.382326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.391295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.402291][ T4232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.411970][ T4232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.422139][ T4232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.431316][ T4232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/26 13:46:43 executed programs: 0 [ 68.542455][ T9] ODEBUG: Out of memory. ODEBUG disabled [ 69.111361][ T4293] chnl_net:caif_netlink_parms(): no params data found [ 69.149317][ T4290] chnl_net:caif_netlink_parms(): no params data found [ 69.232150][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.239376][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.247726][ T4293] device bridge_slave_0 entered promiscuous mode [ 69.255659][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.263000][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.271730][ T4293] device bridge_slave_1 entered promiscuous mode [ 69.279247][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 69.301953][ T4291] chnl_net:caif_netlink_parms(): no params data found [ 69.367677][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.377251][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.385144][ T4290] device bridge_slave_0 entered promiscuous mode [ 69.402321][ T4293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.426781][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.433852][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.441973][ T4290] device bridge_slave_1 entered promiscuous mode [ 69.455737][ T4293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.530875][ T4290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.541968][ T4290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.556082][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.563228][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.572293][ T4298] device bridge_slave_0 entered promiscuous mode [ 69.587192][ T4293] team0: Port device team_slave_0 added [ 69.593175][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.600331][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.608495][ T4291] device bridge_slave_0 entered promiscuous mode [ 69.627486][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.634729][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.642709][ T4291] device bridge_slave_1 entered promiscuous mode [ 69.656733][ T4293] team0: Port device team_slave_1 added [ 69.669374][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.676511][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.684159][ T4298] device bridge_slave_1 entered promiscuous mode [ 69.706758][ T4291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.726189][ T4291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.744743][ T4290] team0: Port device team_slave_0 added [ 69.751017][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 69.775685][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.787548][ T4290] team0: Port device team_slave_1 added [ 69.794800][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.807437][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.814386][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.840907][ T4293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.867097][ T4291] team0: Port device team_slave_0 added [ 69.890648][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.897852][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.924733][ T4293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.942239][ T4291] team0: Port device team_slave_1 added [ 69.971075][ T4298] team0: Port device team_slave_0 added [ 69.986157][ T4298] team0: Port device team_slave_1 added [ 69.993251][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.000729][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.028203][ T4290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.055386][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.062337][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.089892][ T4291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.114273][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.121509][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.148149][ T4290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.162314][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.169351][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.195690][ T4291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.242520][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.249696][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.275854][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.300267][ T4293] device hsr_slave_0 entered promiscuous mode [ 70.307232][ T4293] device hsr_slave_1 entered promiscuous mode [ 70.313937][ T4293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.322260][ T4293] Cannot create hsr debugfs directory [ 70.331607][ T4291] device hsr_slave_0 entered promiscuous mode [ 70.338412][ T4291] device hsr_slave_1 entered promiscuous mode [ 70.345406][ T4291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.352965][ T4291] Cannot create hsr debugfs directory [ 70.365427][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.372384][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.398854][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.449862][ T4290] device hsr_slave_0 entered promiscuous mode [ 70.457140][ T4290] device hsr_slave_1 entered promiscuous mode [ 70.463630][ T4290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.471598][ T4290] Cannot create hsr debugfs directory [ 70.492211][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.499404][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.507667][ T4300] device bridge_slave_0 entered promiscuous mode [ 70.521137][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.528317][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.536723][ T4300] device bridge_slave_1 entered promiscuous mode [ 70.561493][ T4298] device hsr_slave_0 entered promiscuous mode [ 70.568920][ T4298] device hsr_slave_1 entered promiscuous mode [ 70.575648][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.583256][ T4298] Cannot create hsr debugfs directory [ 70.658558][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.704936][ T4321] Bluetooth: hci1: command 0x0409 tx timeout [ 70.705456][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.711732][ T4321] Bluetooth: hci0: command 0x0409 tx timeout [ 70.774995][ T1106] Bluetooth: hci2: command 0x0409 tx timeout [ 70.775647][ T4321] Bluetooth: hci3: command 0x0409 tx timeout [ 70.824096][ T4300] team0: Port device team_slave_0 added [ 70.849702][ T4300] team0: Port device team_slave_1 added [ 70.865251][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 70.893217][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.904952][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.931096][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.987301][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.994269][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.021988][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.039380][ T4293] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.052074][ T4293] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.066517][ T4291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.095797][ T4300] device hsr_slave_0 entered promiscuous mode [ 71.102505][ T4300] device hsr_slave_1 entered promiscuous mode [ 71.109291][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.117018][ T4300] Cannot create hsr debugfs directory [ 71.122541][ T4293] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.133794][ T4293] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.274141][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.300037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.308242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.318167][ T4293] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.337805][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.344330][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.358764][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.367602][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.377098][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.384149][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.392439][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.406148][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.415747][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.424091][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.431260][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.450198][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.458892][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.470129][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.479688][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.489624][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.500700][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.509708][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.520648][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.529208][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.541610][ T4293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.553705][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.568451][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.581798][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.680413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.690698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.707327][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.734922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.744224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.771283][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.780895][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.790913][ T4293] device veth0_vlan entered promiscuous mode [ 71.800612][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.809406][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.822033][ T4293] device veth1_vlan entered promiscuous mode [ 71.851843][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.861381][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.869936][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.878626][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.889783][ T4293] device veth0_macvtap entered promiscuous mode [ 71.901535][ T4293] device veth1_macvtap entered promiscuous mode [ 71.924419][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.943392][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.956037][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.963786][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.972896][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.981348][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.990212][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.002415][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.013288][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.031568][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.040990][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.050959][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.062971][ T4293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.073368][ T4293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.084267][ T4293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.098943][ T4293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.156557][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.164401][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.188152][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.226593][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.236346][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.244451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.071334][ T4318] Bluetooth: hci0: command 0x041b tx timeout [ 73.090379][ T4318] Bluetooth: hci1: command 0x041b tx timeout [ 73.096931][ T4318] Bluetooth: hci3: command 0x041b tx timeout [ 73.103557][ T4318] Bluetooth: hci2: command 0x041b tx timeout [ 73.110056][ T4318] Bluetooth: hci4: command 0x041b tx timeout 2026/06/26 13:46:48 executed programs: 14 [ 74.579453][ T4291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.682946][ T4291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.761405][ T4291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.014423][ T4290] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.063284][ T4290] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.091196][ T4290] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.141308][ T4290] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.173615][ T4298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.233458][ T4298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.256448][ T4305] Bluetooth: hci0: command 0x040f tx timeout [ 75.267579][ T4298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.275106][ T4305] Bluetooth: hci4: command 0x040f tx timeout [ 75.281188][ T4305] Bluetooth: hci2: command 0x040f tx timeout [ 75.290553][ T4305] Bluetooth: hci3: command 0x040f tx timeout [ 75.296752][ T4305] Bluetooth: hci1: command 0x040f tx timeout [ 75.303382][ T4298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.357642][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.384563][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.448459][ T4298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.462680][ T4298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.653723][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.668842][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.679873][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.693396][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.704264][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.711369][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.729381][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.742614][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.754491][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.761617][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.776109][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.790890][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.801095][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.817437][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.831519][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.841817][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.857803][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.871004][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.882089][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.897526][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.983729][ T4290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.026381][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.034315][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.059857][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.074244][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.083144][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.103866][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.133356][ T4300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.185065][ T4290] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.222413][ T4300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.248875][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.262531][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.303994][ T4300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.359647][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.376894][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.402177][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.409290][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.417154][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.426023][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.434685][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.441785][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.449451][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.461158][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.469936][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.478732][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.487480][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.495460][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.727967][ T9] device hsr_slave_0 left promiscuous mode [ 76.734641][ T9] device hsr_slave_1 left promiscuous mode [ 76.747851][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.755483][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.764602][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.772614][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.780996][ T9] device bridge_slave_1 left promiscuous mode [ 76.787652][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.803570][ T9] device bridge_slave_0 left promiscuous mode [ 76.811162][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.831852][ T9] device veth1_macvtap left promiscuous mode [ 76.838319][ T9] device veth0_macvtap left promiscuous mode [ 76.844646][ T9] device veth1_vlan left promiscuous mode [ 76.861001][ T9] device veth0_vlan left promiscuous mode [ 77.284507][ T9] team0 (unregistering): Port device team_slave_1 removed [ 77.309947][ T9] team0 (unregistering): Port device team_slave_0 removed [ 77.332968][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.341850][ T4305] Bluetooth: hci1: command 0x0419 tx timeout [ 77.354694][ T4305] Bluetooth: hci3: command 0x0419 tx timeout [ 77.361100][ T4305] Bluetooth: hci2: command 0x0419 tx timeout [ 77.373976][ T4305] Bluetooth: hci4: command 0x0419 tx timeout [ 77.380177][ T4305] Bluetooth: hci0: command 0x0419 tx timeout [ 77.401716][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.503529][ T9] bond0 (unregistering): Released all slaves [ 77.625032][ T4300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.639212][ T4291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.693456][ T4290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.710403][ T4290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.764474][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.773489][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.782592][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.792969][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.815631][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.824021][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.846013][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.907264][ T4291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.930205][ T4291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.957848][ T4291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.059620][ T4291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.083147][ T4291] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.139204][ T4291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.154043][ T4291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.235878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.262985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.295610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.335628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.356859][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.363947][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.448666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.472119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.488292][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.495420][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.510650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.521162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.537990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.553765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.563059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.579034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.591396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.603407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.614513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.623489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.632036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.640081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.648549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.706357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.713858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.745628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.790046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.833980][ T4290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.876215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.910527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.956976][ T4298] device veth0_vlan entered promiscuous mode [ 78.987140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.002935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 2026/06/26 13:46:54 executed programs: 29 [ 79.041092][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.071355][ T4291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.093120][ T4298] device veth1_vlan entered promiscuous mode [ 79.153004][ T4298] device veth0_macvtap entered promiscuous mode [ 79.170418][ T4298] device veth1_macvtap entered promiscuous mode [ 79.203690][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.220867][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.232743][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.248840][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.267488][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.284670][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.301461][ T4298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.312734][ T4298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.328019][ T4298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.342752][ T4298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.406743][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.426590][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.441384][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.449079][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.462231][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.470926][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.485009][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.493094][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.513007][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.525127][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.533809][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.552950][ T4290] device veth0_vlan entered promiscuous mode [ 79.571155][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.629925][ T4291] device veth0_vlan entered promiscuous mode [ 79.649119][ T4291] device veth1_vlan entered promiscuous mode [ 79.700953][ T4291] device veth0_macvtap entered promiscuous mode [ 79.716401][ T4291] device veth1_macvtap entered promiscuous mode [ 79.742959][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.759965][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.771186][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.784584][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.795988][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.830621][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.848345][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.861451][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.871420][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.884546][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.894634][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.913166][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.923604][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.936747][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.951136][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.963035][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.974715][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.999103][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.023539][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.042797][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.062834][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.086625][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.117870][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.133707][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.144999][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.161747][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.210298][ T4290] device veth1_vlan entered promiscuous mode [ 80.304680][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.317877][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.338190][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.362198][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.392947][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.431919][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.462707][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.504762][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.532561][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.539736][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.574775][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.599579][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.632653][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.641881][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.650446][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.657567][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.669944][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.682897][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.695305][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.704130][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.721252][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.729985][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.738711][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.747416][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.758262][ T4291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.767565][ T4291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.776944][ T4291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.788477][ T4291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.014137][ T4300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.027397][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.028715][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.044637][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.062775][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.145289][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.154000][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.190443][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.461142][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.469966][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.526449][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.562941][ T4290] device veth0_macvtap entered promiscuous mode [ 81.574210][ T4290] device veth1_macvtap entered promiscuous mode [ 81.603483][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.619776][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.630022][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.647009][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.687402][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.718320][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.750650][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.781079][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.811762][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.842318][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.871431][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.901553][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.111032][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.151824][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.202497][ T4471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.240510][ T4471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.249167][ T4290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.285481][ T4290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.323922][ T4290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.385133][ T4290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.485311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.494337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.518072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.543120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.570363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.597601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.805226][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.813156][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.866026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.873531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.253868][ T4471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.265079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.277320][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.326052][ T4471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.355577][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.376268][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.446300][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.909821][ T4300] device veth0_vlan entered promiscuous mode [ 83.921528][ T4300] device veth1_vlan entered promiscuous mode [ 83.991567][ T4300] device veth0_macvtap entered promiscuous mode 2026/06/26 13:46:59 executed programs: 43 [ 84.282640][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.317203][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.875618][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.884011][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.905610][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.913747][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.964592][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.195918][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.361468][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.381714][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.440426][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.577239][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.590060][ T4300] device veth1_macvtap entered promiscuous mode [ 85.641408][ T3035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.672332][ T3035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.731672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.377335][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.643279][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.668978][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.712278][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.738361][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.752169][ T23] cfg80211: failed to load regulatory.db [ 86.788100][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.803242][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.820170][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.831439][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.842615][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.853104][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.132566][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.243618][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.280336][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.365699][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.752214][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.814606][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.889655][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.946131][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.323629][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.340235][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.349415][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.757466][ T4300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.768645][ T4300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.777715][ T4300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.801364][ T4300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/26 13:47:04 executed programs: 65 [ 90.663396][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.968348][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.055955][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.085539][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.093518][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.442436][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/06/26 13:47:09 executed programs: 88 2026/06/26 13:47:15 executed programs: 115 2026/06/26 13:47:20 executed programs: 139 2026/06/26 13:47:25 executed programs: 165 [ 115.571424][ T4928] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) 2026/06/26 13:47:30 executed programs: 188 [ 115.620438][ T4941] ================================================================== [ 115.628730][ T4941] BUG: KASAN: use-after-free in dvb_frontend_release+0x3f8/0x4a0 [ 115.636477][ T4941] Read of size 4 at addr ffff88802723563c by task syz.2.193/4941 [ 115.644200][ T4941] [ 115.646523][ T4941] CPU: 0 PID: 4941 Comm: syz.2.193 Not tainted syzkaller #0 [ 115.653806][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.663874][ T4941] Call Trace: [ 115.667160][ T4941] [ 115.670118][ T4941] dump_stack_lvl+0x188/0x250 [ 115.674812][ T4941] ? show_regs_print_info+0x20/0x20 [ 115.680013][ T4941] ? _printk+0xda/0x130 [ 115.684164][ T4941] ? dvb_frontend_release+0x3f8/0x4a0 [ 115.689540][ T4941] ? load_image+0x410/0x410 [ 115.694048][ T4941] print_address_description+0x60/0x2d0 [ 115.699592][ T4941] ? dvb_frontend_release+0x3f8/0x4a0 [ 115.704964][ T4941] kasan_report+0xdf/0x130 [ 115.709384][ T4941] ? dvb_frontend_release+0x3f8/0x4a0 [ 115.714761][ T4941] dvb_frontend_release+0x3f8/0x4a0 [ 115.719963][ T4941] ? dvb_frontend_open+0x12d0/0x12d0 [ 115.725249][ T4941] __fput+0x212/0x8c0 [ 115.729236][ T4941] task_work_run+0x125/0x1a0 [ 115.733827][ T4941] exit_to_user_mode_loop+0x10f/0x130 [ 115.739196][ T4941] exit_to_user_mode_prepare+0xee/0x180 [ 115.744743][ T4941] syscall_exit_to_user_mode+0x16/0x40 [ 115.750198][ T4941] do_syscall_64+0x58/0xa0 [ 115.754629][ T4941] ? clear_bhb_loop+0x30/0x80 [ 115.759303][ T4941] ? clear_bhb_loop+0x30/0x80 [ 115.763979][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.769881][ T4941] RIP: 0033:0x7f0867098e59 [ 115.774300][ T4941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.793916][ T4941] RSP: 002b:00007ffed8a28c28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 115.802339][ T4941] RAX: 0000000000000000 RBX: 00007f0867313da0 RCX: 00007f0867098e59 [ 115.810317][ T4941] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 115.818290][ T4941] RBP: 00007f0867313da0 R08: 00007f0867312038 R09: 0000000000000000 [ 115.826266][ T4941] R10: 000000000003fdb0 R11: 0000000000000246 R12: 000000000001c3f6 [ 115.834232][ T4941] R13: 00007f0867311fac R14: 000000000001c366 R15: 00007ffed8a28d30 [ 115.842217][ T4941] [ 115.845249][ T4941] [ 115.847577][ T4941] Allocated by task 1: [ 115.851636][ T4941] __kasan_kmalloc+0xaf/0xe0 [ 115.856239][ T4941] dvb_register_device+0x300/0x1dc0 [ 115.861442][ T4941] dvb_register_frontend+0x629/0x900 [ 115.866726][ T4941] vidtv_bridge_probe+0x9c1/0xf30 [ 115.871756][ T4941] platform_probe+0x137/0x1c0 [ 115.876431][ T4941] really_probe+0x276/0xc70 [ 115.880930][ T4941] __driver_probe_device+0x1f5/0x390 [ 115.886207][ T4941] driver_probe_device+0x4f/0x420 [ 115.891240][ T4941] __driver_attach+0x45d/0x660 [ 115.895999][ T4941] bus_for_each_dev+0x182/0x1f0 [ 115.900852][ T4941] bus_add_driver+0x324/0x5d0 [ 115.905612][ T4941] driver_register+0x32d/0x430 [ 115.910443][ T4941] vidtv_bridge_init+0x39/0x70 [ 115.915211][ T4941] do_one_initcall+0x272/0x730 [ 115.919982][ T4941] do_initcall_level+0x13d/0x1f0 [ 115.924916][ T4941] do_initcalls+0x4b/0x90 [ 115.929249][ T4941] kernel_init_freeable+0x3d5/0x560 [ 115.934441][ T4941] kernel_init+0x19/0x1b0 [ 115.938771][ T4941] ret_from_fork+0x1f/0x30 [ 115.943184][ T4941] [ 115.945503][ T4941] Freed by task 4941: [ 115.949471][ T4941] kasan_set_track+0x4b/0x70 [ 115.954063][ T4941] kasan_set_free_info+0x1f/0x40 [ 115.959003][ T4941] ____kasan_slab_free+0xd5/0x110 [ 115.964025][ T4941] slab_free_freelist_hook+0xec/0x170 [ 115.969392][ T4941] kfree+0xef/0x2a0 [ 115.973201][ T4941] dvb_generic_release+0x11c/0x1b0 [ 115.978327][ T4941] dvb_frontend_release+0x134/0x4a0 [ 115.983527][ T4941] __fput+0x212/0x8c0 [ 115.987510][ T4941] task_work_run+0x125/0x1a0 [ 115.992097][ T4941] exit_to_user_mode_loop+0x10f/0x130 [ 115.997462][ T4941] exit_to_user_mode_prepare+0xee/0x180 [ 115.997762][ T4950] ------------[ cut here ]------------ [ 116.003004][ T4941] syscall_exit_to_user_mode+0x16/0x40 [ 116.008521][ T4950] refcount_t: addition on 0; use-after-free. [ 116.013882][ T4941] do_syscall_64+0x58/0xa0 [ 116.020207][ T4950] WARNING: CPU: 1 PID: 4950 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 116.024226][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.033536][ T4950] Modules linked in: [ 116.039350][ T4941] [ 116.039357][ T4941] The buggy address belongs to the object at ffff888027235600 [ 116.039357][ T4941] which belongs to the cache kmalloc-256 of size 256 [ 116.039370][ T4941] The buggy address is located 60 bytes inside of [ 116.039370][ T4941] 256-byte region [ffff888027235600, ffff888027235700) [ 116.039385][ T4941] The buggy address belongs to the page: [ 116.039399][ T4941] page:ffffea00009c8d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888027235000 pfn:0x27234 [ 116.039415][ T4941] head:ffffea00009c8d00 order:1 compound_mapcount:0 [ 116.039426][ T4941] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 116.043294][ T4950] [ 116.045606][ T4941] raw: 00fff00000010200 ffffea0000929e88 ffffea00009d5d88 ffff888016c41b40 [ 116.045620][ T4941] raw: ffff888027235000 0000000000100005 00000001ffffffff 0000000000000000 [ 116.045628][ T4941] page dumped because: kasan: bad access detected [ 116.045645][ T4941] page_owner tracks the page as allocated [ 116.060048][ T4950] CPU: 1 PID: 4950 Comm: syz.0.195 Not tainted syzkaller #0 [ 116.072812][ T4941] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 18590039940, free_ts 0 [ 116.072851][ T4941] get_page_from_freelist+0x24f6/0x2670 [ 116.078516][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.089879][ T4941] __alloc_pages+0x1ee/0x480 [ 116.089897][ T4941] alloc_page_interleave+0x24/0x1e0 [ 116.096540][ T4950] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 116.104427][ T4941] new_slab+0xc0/0x4b0 [ 116.106778][ T4950] Code: 09 01 48 c7 c7 a0 8b 79 8a e8 3d 20 cc 05 0f 0b eb e0 e8 04 29 96 fd c6 05 ab 6d 93 09 01 48 c7 c7 e0 8a 79 8a e8 21 20 cc 05 <0f> 0b eb c4 e8 e8 28 96 fd c6 05 90 6d 93 09 01 48 c7 c7 40 8b 79 [ 116.115288][ T4941] ___slab_alloc+0x807/0xdd0 [ 116.115304][ T4941] __kmalloc_node+0x142/0x3a0 [ 116.115317][ T4941] kvmalloc_node+0x84/0x130 [ 116.115330][ T4941] v4l2_ctrl_new+0x70f/0x1310 [ 116.123890][ T4950] RSP: 0018:ffffc9000449f7d8 EFLAGS: 00010246 [ 116.130391][ T4941] v4l2_ctrl_new_std+0x247/0x300 [ 116.130407][ T4941] handler_new_ref+0x14f/0x8d0 [ 116.130421][ T4941] v4l2_ctrl_add_handler+0x197/0x280 [ 116.136546][ T4950] [ 116.143378][ T4941] vivid_create_controls+0x2411/0x3380 [ 116.161738][ T4950] RAX: 5edb4e40c1538a00 RBX: 0000000000000002 RCX: ffff88802c183b80 [ 116.166840][ T4941] vivid_probe+0x39ff/0x6240 [ 116.166859][ T4941] platform_probe+0x137/0x1c0 [ 116.166874][ T4941] really_probe+0x276/0xc70 [ 116.166886][ T4941] __driver_probe_device+0x1f5/0x390 [ 116.176957][ T4950] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 116.181489][ T4941] page_owner free stack trace missing [ 116.181496][ T4941] [ 116.186703][ T4950] RBP: 0000000000000000 R08: ffffffff901cb147 R09: 1ffffffff2039628 [ 116.192704][ T4941] Memory state around the buggy address: [ 116.192715][ T4941] ffff888027235500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.196793][ T4950] R10: dffffc0000000000 R11: fffffbfff2039629 R12: ffff888027235618 [ 116.216338][ T4941] ffff888027235580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.216350][ T4941] >ffff888027235600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.216357][ T4941] ^ [ 116.216365][ T4941] ffff888027235680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.216374][ T4941] ffff888027235700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.216381][ T4941] ================================================================== [ 116.216387][ T4941] Disabling lock debugging due to kernel taint [ 116.285679][ C1] sched: RT throttling activated [ 116.393759][ T4950] R13: ffff88802a3b7000 R14: 0000000000000002 R15: ffff888027235600 [ 116.401766][ T4950] FS: 00007ff5232b56c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 116.410714][ T4950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.417303][ T4950] CR2: 0000200000404030 CR3: 000000002a900000 CR4: 00000000003506e0 [ 116.425292][ T4950] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.433249][ T4950] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.441238][ T4950] Call Trace: [ 116.444504][ T4950] [ 116.447433][ T4950] dvb_device_open+0x31b/0x360 [ 116.452200][ T4950] chrdev_open+0x585/0x5f0 [ 116.456625][ T4950] ? cd_forget+0x160/0x160 [ 116.461037][ T4950] ? fsnotify_perm+0x3a7/0x560 [ 116.465804][ T4950] ? cd_forget+0x160/0x160 [ 116.470218][ T4950] do_dentry_open+0x7f7/0xf90 [ 116.474900][ T4950] ? vfs_open+0x2b/0x80 [ 116.479046][ T4950] path_openat+0x2718/0x2fb0 [ 116.483632][ T4950] ? __kasan_slab_alloc+0xa9/0xc0 [ 116.488672][ T4950] ? do_filp_open+0x400/0x400 [ 116.493356][ T4950] do_filp_open+0x1df/0x400 [ 116.497863][ T4950] ? vfs_tmpfile+0x300/0x300 [ 116.502452][ T4950] ? _raw_spin_unlock+0x24/0x40 [ 116.507303][ T4950] ? alloc_fd+0x59e/0x650 [ 116.511630][ T4950] do_sys_openat2+0x14b/0x500 [ 116.516308][ T4950] ? __lock_acquire+0x7b50/0x7b50 [ 116.521341][ T4950] ? do_sys_open+0xe0/0xe0 [ 116.525843][ T4950] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.531817][ T4950] ? lock_chain_count+0x20/0x20 [ 116.536673][ T4950] __x64_sys_openat+0x135/0x160 [ 116.541515][ T4950] do_syscall_64+0x4c/0xa0 [ 116.545936][ T4950] ? clear_bhb_loop+0x30/0x80 [ 116.550601][ T4950] ? clear_bhb_loop+0x30/0x80 [ 116.555282][ T4950] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.561171][ T4950] RIP: 0033:0x7ff523c1468e [ 116.565592][ T4950] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 116.585202][ T4950] RSP: 002b:00007ff5232b4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.593607][ T4950] RAX: ffffffffffffffda RBX: 00007ff5232b56c0 RCX: 00007ff523c1468e [ 116.601586][ T4950] RDX: 0000000000000002 RSI: 00007ff5232b4c00 RDI: ffffffffffffff9c [ 116.609556][ T4950] RBP: 00007ff5232b4c00 R08: 0000000000000000 R09: 0000000000000000 [ 116.617527][ T4950] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 116.625499][ T4950] R13: 00007ff523ecd038 R14: 00007ff523eccfa0 R15: 00007fff963599a8 [ 116.633461][ T4950] [ 116.636496][ T4950] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.643755][ T4950] CPU: 1 PID: 4950 Comm: syz.0.195 Tainted: G B syzkaller #0 [ 116.652411][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.662452][ T4950] Call Trace: [ 116.665721][ T4950] [ 116.668635][ T4950] dump_stack_lvl+0x188/0x250 [ 116.673299][ T4950] ? show_regs_print_info+0x20/0x20 [ 116.678483][ T4950] ? load_image+0x410/0x410 [ 116.682973][ T4950] panic+0x2f8/0x850 [ 116.686855][ T4950] ? bpf_jit_dump+0xd0/0xd0 [ 116.691344][ T4950] ? refcount_warn_saturate+0xff/0x1a0 [ 116.696789][ T4950] __warn+0x248/0x2b0 [ 116.700754][ T4950] ? refcount_warn_saturate+0xff/0x1a0 [ 116.706195][ T4950] report_bug+0x1b9/0x2e0 [ 116.710510][ T4950] handle_bug+0x3a/0x70 [ 116.714652][ T4950] exc_invalid_op+0x16/0x40 [ 116.719141][ T4950] asm_exc_invalid_op+0x16/0x20 [ 116.723975][ T4950] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 116.730028][ T4950] Code: 09 01 48 c7 c7 a0 8b 79 8a e8 3d 20 cc 05 0f 0b eb e0 e8 04 29 96 fd c6 05 ab 6d 93 09 01 48 c7 c7 e0 8a 79 8a e8 21 20 cc 05 <0f> 0b eb c4 e8 e8 28 96 fd c6 05 90 6d 93 09 01 48 c7 c7 40 8b 79 [ 116.749620][ T4950] RSP: 0018:ffffc9000449f7d8 EFLAGS: 00010246 [ 116.755673][ T4950] RAX: 5edb4e40c1538a00 RBX: 0000000000000002 RCX: ffff88802c183b80 [ 116.763627][ T4950] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 116.771581][ T4950] RBP: 0000000000000000 R08: ffffffff901cb147 R09: 1ffffffff2039628 [ 116.779535][ T4950] R10: dffffc0000000000 R11: fffffbfff2039629 R12: ffff888027235618 [ 116.787491][ T4950] R13: ffff88802a3b7000 R14: 0000000000000002 R15: ffff888027235600 [ 116.795454][ T4950] ? refcount_warn_saturate+0xff/0x1a0 [ 116.800901][ T4950] dvb_device_open+0x31b/0x360 [ 116.805654][ T4950] chrdev_open+0x585/0x5f0 [ 116.810055][ T4950] ? cd_forget+0x160/0x160 [ 116.814456][ T4950] ? fsnotify_perm+0x3a7/0x560 [ 116.819209][ T4950] ? cd_forget+0x160/0x160 [ 116.823612][ T4950] do_dentry_open+0x7f7/0xf90 [ 116.828278][ T4950] ? vfs_open+0x2b/0x80 [ 116.832423][ T4950] path_openat+0x2718/0x2fb0 [ 116.837004][ T4950] ? __kasan_slab_alloc+0xa9/0xc0 [ 116.842016][ T4950] ? do_filp_open+0x400/0x400 [ 116.846681][ T4950] do_filp_open+0x1df/0x400 [ 116.851175][ T4950] ? vfs_tmpfile+0x300/0x300 [ 116.855753][ T4950] ? _raw_spin_unlock+0x24/0x40 [ 116.860586][ T4950] ? alloc_fd+0x59e/0x650 [ 116.864905][ T4950] do_sys_openat2+0x14b/0x500 [ 116.869565][ T4950] ? __lock_acquire+0x7b50/0x7b50 [ 116.874576][ T4950] ? do_sys_open+0xe0/0xe0 [ 116.878974][ T4950] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.884939][ T4950] ? lock_chain_count+0x20/0x20 [ 116.889776][ T4950] __x64_sys_openat+0x135/0x160 [ 116.894611][ T4950] do_syscall_64+0x4c/0xa0 [ 116.899011][ T4950] ? clear_bhb_loop+0x30/0x80 [ 116.903671][ T4950] ? clear_bhb_loop+0x30/0x80 [ 116.908338][ T4950] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.914219][ T4950] RIP: 0033:0x7ff523c1468e [ 116.918621][ T4950] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 116.938209][ T4950] RSP: 002b:00007ff5232b4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.946606][ T4950] RAX: ffffffffffffffda RBX: 00007ff5232b56c0 RCX: 00007ff523c1468e [ 116.954564][ T4950] RDX: 0000000000000002 RSI: 00007ff5232b4c00 RDI: ffffffffffffff9c [ 116.962518][ T4950] RBP: 00007ff5232b4c00 R08: 0000000000000000 R09: 0000000000000000 [ 116.970473][ T4950] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 116.978430][ T4950] R13: 00007ff523ecd038 R14: 00007ff523eccfa0 R15: 00007fff963599a8 [ 116.986394][ T4950] [ 116.989696][ T4950] Kernel Offset: disabled [ 116.994107][ T4950] Rebooting in 86400 seconds..