Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. 2026/06/08 20:14:08 parsed 1 programs [ 79.828724][ T5638] cgroup: Unknown subsys name 'net' [ 79.946860][ T5638] cgroup: Unknown subsys name 'cpuset' [ 79.956245][ T5638] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.541352][ T5638] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.578870][ T5661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.593723][ T5661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.603226][ T5661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.617902][ T5661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.627309][ T5661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.087098][ T5659] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.592072][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.615326][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.848824][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.875602][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.043591][ T29] cfg80211: failed to load regulatory.db [ 88.421443][ T5679] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.437143][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.445456][ T5679] bridge_slave_0: entered allmulticast mode [ 88.464647][ T5679] bridge_slave_0: entered promiscuous mode [ 88.487547][ T5679] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.502866][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.527532][ T5679] bridge_slave_1: entered allmulticast mode [ 88.540707][ T5679] bridge_slave_1: entered promiscuous mode [ 88.583606][ T5679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.596615][ T5679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.682664][ T5679] team0: Port device team_slave_0 added [ 88.691387][ T5679] team0: Port device team_slave_1 added [ 88.811502][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.818485][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.844713][ T5679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.857523][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.864516][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.890441][ T5679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.946811][ T5679] hsr_slave_0: entered promiscuous mode [ 88.953878][ T5679] hsr_slave_1: entered promiscuous mode [ 89.118283][ T5679] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.130523][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.138853][ T5679] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.151972][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.159827][ T5679] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.169747][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.177943][ T5679] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.190025][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.267245][ T5679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.288831][ T5679] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.302443][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.309871][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.327475][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.334609][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.712086][ T5679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.764246][ T5679] veth0_vlan: entered promiscuous mode [ 89.778095][ T5679] veth1_vlan: entered promiscuous mode [ 89.809113][ T5679] veth0_macvtap: entered promiscuous mode [ 89.820596][ T5679] veth1_macvtap: entered promiscuous mode [ 89.840906][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.856790][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.872093][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.881992][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.891818][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.907478][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/08 20:14:22 executed programs: 0 [ 90.109905][ T5661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.119563][ T5661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.144753][ T4942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.155067][ T4942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.165511][ T4942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.178081][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.179629][ T4942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.195073][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.197277][ T4942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.211234][ T4942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.212049][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.218433][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.233904][ T4942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.245154][ T4942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.252897][ T4942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.398403][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.407058][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.414799][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.430085][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.438383][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.494170][ T5661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.506642][ T5661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.518139][ T5661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.531600][ T5661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.540135][ T5661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.586971][ T5774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.601545][ T5774] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.612394][ T5774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.624432][ T5774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.635826][ T5774] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.007609][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.229475][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.303915][ T5661] Bluetooth: hci2: command tx timeout [ 92.309876][ T5772] Bluetooth: hci1: command tx timeout [ 92.316556][ T5774] Bluetooth: hci0: command tx timeout [ 92.430219][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.462931][ T5774] Bluetooth: hci3: command tx timeout [ 92.626682][ T5774] Bluetooth: hci4: command tx timeout [ 92.703966][ T5774] Bluetooth: hci5: command tx timeout [ 92.884839][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.892068][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.899755][ T5773] bridge_slave_0: entered allmulticast mode [ 92.907455][ T5773] bridge_slave_0: entered promiscuous mode [ 92.980143][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.987329][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.994776][ T5766] bridge_slave_0: entered allmulticast mode [ 93.002508][ T5766] bridge_slave_0: entered promiscuous mode [ 93.030163][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.037639][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.045888][ T5773] bridge_slave_1: entered allmulticast mode [ 93.055887][ T5773] bridge_slave_1: entered promiscuous mode [ 93.096859][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.104639][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.111849][ T5766] bridge_slave_1: entered allmulticast mode [ 93.119498][ T5766] bridge_slave_1: entered promiscuous mode [ 93.172216][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.248243][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.327345][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.334804][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.342001][ T5785] bridge_slave_0: entered allmulticast mode [ 93.351138][ T5785] bridge_slave_0: entered promiscuous mode [ 93.361218][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.397150][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.422556][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.430266][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.437669][ T5785] bridge_slave_1: entered allmulticast mode [ 93.445084][ T5785] bridge_slave_1: entered promiscuous mode [ 93.474630][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.481758][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.489040][ T5768] bridge_slave_0: entered allmulticast mode [ 93.496545][ T5768] bridge_slave_0: entered promiscuous mode [ 93.507632][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.552207][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.559481][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.567485][ T5788] bridge_slave_0: entered allmulticast mode [ 93.575142][ T5788] bridge_slave_0: entered promiscuous mode [ 93.582648][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.590090][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.597290][ T5768] bridge_slave_1: entered allmulticast mode [ 93.604816][ T5768] bridge_slave_1: entered promiscuous mode [ 93.663554][ T5773] team0: Port device team_slave_0 added [ 93.669696][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.676898][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.684188][ T5788] bridge_slave_1: entered allmulticast mode [ 93.692109][ T5788] bridge_slave_1: entered promiscuous mode [ 93.724939][ T5766] team0: Port device team_slave_0 added [ 93.746351][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.758414][ T5773] team0: Port device team_slave_1 added [ 93.802158][ T5766] team0: Port device team_slave_1 added [ 93.807988][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.815278][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.822616][ T5789] bridge_slave_0: entered allmulticast mode [ 93.831280][ T5789] bridge_slave_0: entered promiscuous mode [ 93.841047][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.875985][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.888781][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.924354][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.931591][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.939053][ T5789] bridge_slave_1: entered allmulticast mode [ 93.947167][ T5789] bridge_slave_1: entered promiscuous mode [ 93.980080][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.037855][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.045077][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.071632][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.092893][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.122237][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.129249][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.155819][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.181321][ T5785] team0: Port device team_slave_0 added [ 94.187797][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.195204][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.221259][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.247167][ T5768] team0: Port device team_slave_0 added [ 94.253860][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.260831][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.286841][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.300942][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.312674][ T5785] team0: Port device team_slave_1 added [ 94.351902][ T5768] team0: Port device team_slave_1 added [ 94.360828][ T12] bridge_slave_1: left allmulticast mode [ 94.366639][ T12] bridge_slave_1: left promiscuous mode [ 94.373542][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.384734][ T12] bridge_slave_0: left allmulticast mode [ 94.390360][ T12] bridge_slave_0: left promiscuous mode [ 94.396633][ T5774] Bluetooth: hci0: command tx timeout [ 94.396686][ T5774] Bluetooth: hci1: command tx timeout [ 94.396717][ T5774] Bluetooth: hci2: command tx timeout [ 94.414601][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.552794][ T5772] Bluetooth: hci3: command tx timeout [ 94.713201][ T5772] Bluetooth: hci4: command tx timeout [ 94.729912][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.741012][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.751413][ T12] bond0 (unregistering): Released all slaves [ 94.775138][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.785304][ T5772] Bluetooth: hci5: command tx timeout [ 94.814208][ T5788] team0: Port device team_slave_0 added [ 94.900875][ T5789] team0: Port device team_slave_0 added [ 94.909344][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.916875][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.943574][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.956606][ T5788] team0: Port device team_slave_1 added [ 94.962978][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.969974][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.996008][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.009510][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.016594][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.043770][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.064970][ T5789] team0: Port device team_slave_1 added [ 95.082024][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.089151][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.116697][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.184585][ T5766] hsr_slave_0: entered promiscuous mode [ 95.192019][ T5766] hsr_slave_1: entered promiscuous mode [ 95.198668][ T5766] debugfs: 'hsr0' already exists in 'hsr' [ 95.204741][ T5766] Cannot create hsr debugfs directory [ 95.248411][ T12] hsr_slave_0: left promiscuous mode [ 95.255538][ T12] hsr_slave_1: left promiscuous mode [ 95.261607][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.269613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.280303][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.290864][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.308679][ T12] veth1_macvtap: left promiscuous mode [ 95.314682][ T12] veth0_macvtap: left promiscuous mode [ 95.320250][ T12] veth1_vlan: left promiscuous mode [ 95.325921][ T12] veth0_vlan: left promiscuous mode [ 95.689123][ T12] team0 (unregistering): Port device team_slave_1 removed [ 95.715277][ T12] team0 (unregistering): Port device team_slave_0 removed [ 95.888178][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.895697][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.922002][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.936816][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 95.949703][ T5773] hsr_slave_0: entered promiscuous mode [ 95.956368][ T5773] hsr_slave_1: entered promiscuous mode [ 95.977930][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.985063][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.011364][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.054909][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.061931][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.087984][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.126013][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.133294][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.160986][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.230760][ T5785] hsr_slave_0: entered promiscuous mode [ 96.238386][ T5785] hsr_slave_1: entered promiscuous mode [ 96.244935][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 96.250699][ T5785] Cannot create hsr debugfs directory [ 96.276348][ T5768] hsr_slave_0: entered promiscuous mode [ 96.283371][ T5768] hsr_slave_1: entered promiscuous mode [ 96.289656][ T5768] debugfs: 'hsr0' already exists in 'hsr' [ 96.295448][ T5768] Cannot create hsr debugfs directory [ 96.436758][ T5789] hsr_slave_0: entered promiscuous mode [ 96.444256][ T5789] hsr_slave_1: entered promiscuous mode [ 96.450403][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 96.456186][ T5789] Cannot create hsr debugfs directory [ 96.462926][ T5772] Bluetooth: hci2: command tx timeout [ 96.468368][ T5774] Bluetooth: hci1: command tx timeout [ 96.468388][ T5661] Bluetooth: hci0: command tx timeout [ 96.592216][ T5788] hsr_slave_0: entered promiscuous mode [ 96.599288][ T5788] hsr_slave_1: entered promiscuous mode [ 96.606636][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 96.612402][ T5788] Cannot create hsr debugfs directory [ 96.622990][ T5661] Bluetooth: hci3: command tx timeout [ 96.782824][ T5661] Bluetooth: hci4: command tx timeout [ 96.864774][ T5661] Bluetooth: hci5: command tx timeout [ 97.201257][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 97.267303][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.278095][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.286390][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.296387][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.304352][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.314630][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.355214][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.365493][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.546373][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.579284][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.625120][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.632270][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.657814][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.664976][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.867049][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.901073][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.926939][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.948077][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.966088][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.977996][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.986504][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.998004][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.179859][ T5785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.192176][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.207211][ T5785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.220498][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.238032][ T5785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.264873][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.302437][ T5785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.333972][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.497929][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.511309][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.524572][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.536359][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.543215][ T5661] Bluetooth: hci1: command tx timeout [ 98.543246][ T5661] Bluetooth: hci2: command tx timeout [ 98.556614][ T5661] Bluetooth: hci0: command tx timeout [ 98.568104][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.579896][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.596158][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.627289][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.664280][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.713073][ T5661] Bluetooth: hci3: command tx timeout [ 98.774210][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.828182][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.838321][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.845514][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.863171][ T5661] Bluetooth: hci4: command tx timeout [ 98.915896][ T5788] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.931712][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.943230][ T5661] Bluetooth: hci5: command tx timeout [ 98.944446][ T5788] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.959771][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.972117][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.979358][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.996829][ T5788] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.009222][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.017806][ T5788] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.029416][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.211432][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.300293][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.312091][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.327808][ T5766] veth0_vlan: entered promiscuous mode [ 99.344691][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.359105][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.368568][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.380372][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.407428][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.426351][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.437222][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.490858][ T5766] veth1_vlan: entered promiscuous mode [ 99.515405][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.522580][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.601031][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.608240][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.768657][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.879005][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.897269][ T5766] veth0_macvtap: entered promiscuous mode [ 99.931810][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.977651][ T5766] veth1_macvtap: entered promiscuous mode [ 99.999479][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.030267][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.037466][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.100172][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.107380][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.164865][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.172043][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.194746][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.201906][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.275771][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.322715][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.364741][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.455360][ T1003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.490447][ T1003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.532600][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.564911][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.636153][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.685731][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.700974][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.708191][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.750902][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.758127][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.938821][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.968793][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.112799][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.117707][ T5773] veth0_vlan: entered promiscuous mode [ 101.128753][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.178329][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.210789][ T5773] veth1_vlan: entered promiscuous mode 2026/06/08 20:14:34 executed programs: 12 [ 101.445668][ T5773] veth0_macvtap: entered promiscuous mode [ 101.486761][ T5773] veth1_macvtap: entered promiscuous mode [ 101.593927][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.665743][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.724938][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.778682][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.805480][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.844917][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.291664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.329435][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.618413][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.684026][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.997379][ T5785] veth0_vlan: entered promiscuous mode [ 103.112008][ T5785] veth1_vlan: entered promiscuous mode [ 103.184550][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.560355][ T5785] veth0_macvtap: entered promiscuous mode [ 104.600347][ T5785] veth1_macvtap: entered promiscuous mode [ 105.473431][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.540838][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.587862][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.546453][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 2026/06/08 20:14:39 executed programs: 20 [ 106.807741][ T6090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.266859][ T6090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.708850][ T6090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.637451][ T6090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.802618][ T5768] veth0_vlan: entered promiscuous mode [ 110.689250][ T5768] veth1_vlan: entered promiscuous mode [ 111.500819][ T5789] veth0_vlan: entered promiscuous mode [ 111.571771][ T5806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.056740][ T5806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/08 20:14:45 executed programs: 32 [ 112.176126][ T5789] veth1_vlan: entered promiscuous mode [ 113.439535][ T6091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.973706][ T6091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.273015][ T5788] veth0_vlan: entered promiscuous mode [ 116.250074][ T5768] veth0_macvtap: entered promiscuous mode [ 116.316098][ T5788] veth1_vlan: entered promiscuous mode 2026/06/08 20:14:50 executed programs: 43 [ 117.204377][ T5768] veth1_macvtap: entered promiscuous mode [ 117.260010][ T5789] veth0_macvtap: entered promiscuous mode [ 118.228146][ T5789] veth1_macvtap: entered promiscuous mode [ 119.299479][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.380061][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.243660][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.326491][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.349820][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.361272][ T6087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.100903][ T5788] veth0_macvtap: entered promiscuous mode [ 122.120405][ T6087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.143837][ T6087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.168751][ T6087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.198924][ T5788] veth1_macvtap: entered promiscuous mode [ 122.247668][ T6087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.319635][ T6087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/08 20:14:55 executed programs: 57 [ 123.186711][ T6087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.225021][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.047790][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.347387][ T6090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.374783][ T6090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.393607][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.554689][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/08 20:15:00 executed programs: 69 [ 127.918762][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.348367][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.303168][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.348229][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.750615][ T6089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.064821][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.075652][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.251782][ T6089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/08 20:15:06 executed programs: 84 [ 134.122495][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.189217][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.396439][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.223903][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.224427][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.261525][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/08 20:15:11 executed programs: 99 2026/06/08 20:15:16 executed programs: 117 2026/06/08 20:15:21 executed programs: 131 2026/06/08 20:15:26 executed programs: 143 [ 153.980849][ T6544] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 154.232946][ T6538] ================================================================== [ 154.241054][ T6538] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x40a/0x4d0 [ 154.249226][ T6538] Read of size 4 at addr ffff88802ac8d63c by task syz.1.145/6538 [ 154.256942][ T6538] [ 154.259272][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.1.145 Not tainted syzkaller #0 PREEMPT(full) [ 154.259301][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.259316][ T6538] Call Trace: [ 154.259326][ T6538] [ 154.259335][ T6538] dump_stack_lvl+0xe8/0x150 [ 154.259374][ T6538] print_address_description+0x55/0x1e0 [ 154.259400][ T6538] ? dvb_frontend_release+0x40a/0x4d0 [ 154.259434][ T6538] print_report+0x58/0x70 [ 154.259456][ T6538] kasan_report+0x117/0x150 [ 154.259481][ T6538] ? dvb_frontend_release+0x40a/0x4d0 [ 154.259520][ T6538] dvb_frontend_release+0x40a/0x4d0 [ 154.259554][ T6538] ? __pfx_dvb_frontend_release+0x10/0x10 [ 154.259588][ T6538] __fput+0x44f/0xa60 [ 154.259626][ T6538] task_work_run+0x1d9/0x270 [ 154.259664][ T6538] ? __pfx_task_work_run+0x10/0x10 [ 154.259706][ T6538] exit_to_user_mode_loop+0x193/0x680 [ 154.259731][ T6538] ? rcu_is_watching+0x15/0xb0 [ 154.259761][ T6538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.259788][ T6538] do_syscall_64+0x353/0x580 [ 154.259815][ T6538] ? trace_irq_disable+0x3b/0x140 [ 154.259856][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.259882][ T6538] RIP: 0033:0x7f16b339ce59 [ 154.259903][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.259924][ T6538] RSP: 002b:00007ffdf2830d18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 154.259949][ T6538] RAX: 0000000000000000 RBX: 00007f16b3617da0 RCX: 00007f16b339ce59 [ 154.259967][ T6538] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 154.259982][ T6538] RBP: 00007f16b3617da0 R08: 0000000000000006 R09: 0000000000000000 [ 154.259998][ T6538] R10: 00007f16b3617cb0 R11: 0000000000000246 R12: 0000000000025a4b [ 154.260015][ T6538] R13: 00007f16b361609c R14: 00000000000257a1 R15: 00007ffdf2830e20 [ 154.260044][ T6538] [ 154.260052][ T6538] [ 154.448543][ T6538] Allocated by task 1: [ 154.452605][ T6538] kasan_save_track+0x3e/0x80 [ 154.457342][ T6538] __kasan_kmalloc+0x93/0xb0 [ 154.461950][ T6538] __kmalloc_cache_noprof+0x31c/0x660 [ 154.467338][ T6538] dvb_register_device+0x2fd/0x21e0 [ 154.472554][ T6538] dvb_register_frontend+0x61b/0x920 [ 154.477849][ T6538] vidtv_bridge_probe+0x9aa/0xf80 [ 154.482875][ T6538] platform_probe+0xf9/0x190 [ 154.487468][ T6538] really_probe+0x267/0xaf0 [ 154.491976][ T6538] __driver_probe_device+0x1ef/0x380 [ 154.497263][ T6538] driver_probe_device+0x4f/0x240 [ 154.502295][ T6538] __driver_attach+0x34c/0x640 [ 154.507062][ T6538] bus_for_each_dev+0x23b/0x2c0 [ 154.511921][ T6538] bus_add_driver+0x345/0x670 [ 154.516608][ T6538] driver_register+0x23a/0x320 [ 154.521382][ T6538] vidtv_bridge_init+0x28/0x50 [ 154.526156][ T6538] do_one_initcall+0x250/0x870 [ 154.530923][ T6538] do_initcall_level+0x104/0x190 [ 154.535867][ T6538] do_initcalls+0x59/0xa0 [ 154.540205][ T6538] kernel_init_freeable+0x2a6/0x3e0 [ 154.545410][ T6538] kernel_init+0x1d/0x1d0 [ 154.549755][ T6538] ret_from_fork+0x514/0xb70 [ 154.554345][ T6538] ret_from_fork_asm+0x1a/0x30 [ 154.559118][ T6538] [ 154.561433][ T6538] Freed by task 6538: [ 154.565403][ T6538] kasan_save_track+0x3e/0x80 [ 154.570091][ T6538] kasan_save_free_info+0x46/0x50 [ 154.575122][ T6538] __kasan_slab_free+0x5c/0x80 [ 154.579907][ T6538] kfree+0x1c5/0x640 [ 154.583811][ T6538] dvb_generic_release+0x11d/0x1b0 [ 154.588933][ T6538] dvb_frontend_release+0x132/0x4d0 [ 154.594146][ T6538] __fput+0x44f/0xa60 [ 154.598135][ T6538] task_work_run+0x1d9/0x270 [ 154.602739][ T6538] exit_to_user_mode_loop+0x193/0x680 [ 154.608128][ T6538] do_syscall_64+0x353/0x580 [ 154.612725][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.618619][ T6538] [ 154.620932][ T6538] The buggy address belongs to the object at ffff88802ac8d600 [ 154.620932][ T6538] which belongs to the cache kmalloc-256 of size 256 [ 154.634982][ T6538] The buggy address is located 60 bytes inside of [ 154.634982][ T6538] freed 256-byte region [ffff88802ac8d600, ffff88802ac8d700) [ 154.648697][ T6538] [ 154.651017][ T6538] The buggy address belongs to the physical page: [ 154.657421][ T6538] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ac8c [ 154.666181][ T6538] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 154.674674][ T6538] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 154.682218][ T6538] page_type: f5(slab) [ 154.686204][ T6538] raw: 00fff00000000040 ffff88813fe17b40 dead000000000100 dead000000000122 [ 154.694788][ T6538] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 154.703375][ T6538] head: 00fff00000000040 ffff88813fe17b40 dead000000000100 dead000000000122 [ 154.712131][ T6538] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 154.720801][ T6538] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 154.729466][ T6538] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 154.738118][ T6538] page dumped because: kasan: bad access detected [ 154.744513][ T6538] page_owner tracks the page as allocated [ 154.750206][ T6538] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10466265128, free_ts 0 [ 154.769907][ T6538] post_alloc_hook+0x22d/0x280 [ 154.774674][ T6538] get_page_from_freelist+0x2593/0x2610 [ 154.780234][ T6538] __alloc_frozen_pages_noprof+0x18d/0x380 [ 154.786048][ T6538] allocate_slab+0x77/0x660 [ 154.790571][ T6538] refill_objects+0x339/0x3d0 [ 154.795245][ T6538] __pcs_replace_empty_main+0x321/0x720 [ 154.800783][ T6538] __kmalloc_cache_noprof+0x392/0x660 [ 154.806154][ T6538] bus_add_driver+0x162/0x670 [ 154.810829][ T6538] driver_register+0x23a/0x320 [ 154.815585][ T6538] i2c_register_driver+0xbb/0x1a0 [ 154.820598][ T6538] do_one_initcall+0x250/0x870 [ 154.825353][ T6538] do_initcall_level+0x104/0x190 [ 154.830340][ T6538] do_initcalls+0x59/0xa0 [ 154.834667][ T6538] kernel_init_freeable+0x2a6/0x3e0 [ 154.839860][ T6538] kernel_init+0x1d/0x1d0 [ 154.844189][ T6538] ret_from_fork+0x514/0xb70 [ 154.848775][ T6538] page_owner free stack trace missing [ 154.854119][ T6538] [ 154.856427][ T6538] Memory state around the buggy address: [ 154.862037][ T6538] ffff88802ac8d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 154.870167][ T6538] ffff88802ac8d580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 154.878215][ T6538] >ffff88802ac8d600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.886258][ T6538] ^ [ 154.892128][ T6538] ffff88802ac8d680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.900173][ T6538] ffff88802ac8d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 154.908217][ T6538] ================================================================== [ 154.924155][ T6552] ------------[ cut here ]------------ [ 154.930485][ T6552] refcount_t: addition on 0; use-after-free. [ 154.936494][ T6552] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#1: syz.5.146/6552 [ 154.946382][ T6552] Modules linked in: [ 154.950384][ T6552] CPU: 1 UID: 0 PID: 6552 Comm: syz.5.146 Not tainted syzkaller #0 PREEMPT(full) [ 154.959614][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.969700][ T6552] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 154.977228][ T6552] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 3b de 13 fd 48 8d 3d e4 41 89 0b 67 48 0f b9 3a eb 4a e8 28 de 13 fd 48 8d 3d e1 41 89 0b <67> 48 0f b9 3a eb 37 e8 15 de 13 fd 48 8d 3d de 41 89 0b 67 48 0f [ 154.997909][ T6552] RSP: 0018:ffffc90005187758 EFLAGS: 00010293 [ 155.004106][ T6552] RAX: ffffffff84b1d978 RBX: 0000000000000002 RCX: ffff88805adf9f00 [ 155.012115][ T6552] RDX: 0000000000000000 RSI: ffffffff8f111340 RDI: ffffffff903b1b60 [ 155.020171][ T6552] RBP: 0000000000000000 R08: ffff88805adf9f00 R09: 0000000000000005 [ 155.028381][ T6552] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88802ac8d618 [ 155.036633][ T6552] R13: ffff88802c20c800 R14: ffff88802ac8d610 R15: ffff88802ac8d600 [ 155.044645][ T6552] FS: 00007f2f9dacf6c0(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 155.053613][ T6552] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.060198][ T6552] CR2: 00007f2f9daceff8 CR3: 0000000034377000 CR4: 0000000000350ef0 [ 155.068222][ T6552] Call Trace: [ 155.071505][ T6552] [ 155.074490][ T6552] dvb_device_open+0x316/0x350 [ 155.080686][ T6552] chrdev_open+0x4cd/0x5e0 [ 155.086007][ T6552] ? __pfx_chrdev_open+0x10/0x10 [ 155.090961][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.096678][ T6552] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 155.104241][ T6552] ? __pfx_chrdev_open+0x10/0x10 [ 155.109191][ T6552] do_dentry_open+0x822/0x13a0 [ 155.114280][ T6552] vfs_open+0x3b/0x340 [ 155.118371][ T6552] ? path_openat+0x2df0/0x3860 [ 155.123189][ T6552] path_openat+0x2e08/0x3860 [ 155.127815][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.133504][ T6552] ? __pfx_stack_trace_save+0x10/0x10 [ 155.138902][ T6552] ? stack_depot_save_flags+0x33/0x810 [ 155.144420][ T6552] ? __pfx_path_openat+0x10/0x10 [ 155.149380][ T6552] ? __x64_sys_openat+0x138/0x170 [ 155.154462][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.160107][ T6552] ? __lock_acquire+0x6b5/0x2cf0 [ 155.165113][ T6552] do_file_open+0x23e/0x4a0 [ 155.169645][ T6552] ? __pfx_do_file_open+0x10/0x10 [ 155.174744][ T6552] ? _raw_spin_unlock+0x28/0x50 [ 155.181017][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.187608][ T6552] ? alloc_fd+0x64b/0x6c0 [ 155.191971][ T6552] do_sys_openat2+0x113/0x200 [ 155.196721][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.202370][ T6552] ? _raw_spin_unlock_irq+0x2e/0x50 [ 155.207647][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.213352][ T6552] ? __pfx_do_sys_openat2+0x10/0x10 [ 155.218569][ T6552] ? exc_page_fault+0x6a/0xc0 [ 155.223301][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.228944][ T6552] ? do_user_addr_fault+0xc6f/0x1340 [ 155.234269][ T6552] __x64_sys_openat+0x138/0x170 [ 155.239142][ T6552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.245263][ T6552] do_syscall_64+0x174/0x580 [ 155.249869][ T6552] ? trace_irq_disable+0x3b/0x140 [ 155.254951][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.260859][ T6552] RIP: 0033:0x7f2f9cb5d68e [ 155.265411][ T6552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.286651][ T6552] RSP: 002b:00007f2f9daceb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 155.295977][ T6552] RAX: ffffffffffffffda RBX: 00007f2f9dacf6c0 RCX: 00007f2f9cb5d68e [ 155.303987][ T6552] RDX: 0000000000040002 RSI: 00007f2f9dacec00 RDI: ffffffffffffff9c [ 155.311961][ T6552] RBP: 00007f2f9dacec00 R08: 0000000000000000 R09: 0000000000000000 [ 155.319972][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 155.327992][ T6552] R13: 00007f2f9ce16128 R14: 00007f2f9ce16090 R15: 00007ffe67bc2768 [ 155.336032][ T6552] [ 155.339054][ T6552] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.346329][ T6552] CPU: 1 UID: 0 PID: 6552 Comm: syz.5.146 Not tainted syzkaller #0 PREEMPT(full) [ 155.355527][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.365580][ T6552] Call Trace: [ 155.368863][ T6552] [ 155.371791][ T6552] vpanic+0x56c/0xa60 [ 155.375791][ T6552] ? __pfx__printk+0x10/0x10 [ 155.380404][ T6552] ? __pfx_vpanic+0x10/0x10 [ 155.384912][ T6552] ? is_bpf_text_address+0x292/0x2b0 [ 155.390206][ T6552] ? is_bpf_text_address+0x26/0x2b0 [ 155.395421][ T6552] panic+0xc5/0xd0 [ 155.399154][ T6552] ? __pfx_panic+0x10/0x10 [ 155.403599][ T6552] __warn+0x315/0x4c0 [ 155.407586][ T6552] ? refcount_warn_saturate+0x9f/0x110 [ 155.413061][ T6552] ? refcount_warn_saturate+0x9f/0x110 [ 155.418532][ T6552] __report_bug+0x29a/0x540 [ 155.423050][ T6552] ? refcount_warn_saturate+0x9f/0x110 [ 155.428521][ T6552] ? __pfx___report_bug+0x10/0x10 [ 155.433558][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.439212][ T6552] report_bug_entry+0x19a/0x290 [ 155.444073][ T6552] ? refcount_warn_saturate+0x9f/0x110 [ 155.449540][ T6552] ? refcount_warn_saturate+0xa4/0x110 [ 155.455013][ T6552] handle_bug+0xce/0x200 [ 155.459272][ T6552] exc_invalid_op+0x1a/0x50 [ 155.463792][ T6552] asm_exc_invalid_op+0x1a/0x20 [ 155.468653][ T6552] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 155.474730][ T6552] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 3b de 13 fd 48 8d 3d e4 41 89 0b 67 48 0f b9 3a eb 4a e8 28 de 13 fd 48 8d 3d e1 41 89 0b <67> 48 0f b9 3a eb 37 e8 15 de 13 fd 48 8d 3d de 41 89 0b 67 48 0f [ 155.494337][ T6552] RSP: 0018:ffffc90005187758 EFLAGS: 00010293 [ 155.500414][ T6552] RAX: ffffffff84b1d978 RBX: 0000000000000002 RCX: ffff88805adf9f00 [ 155.508387][ T6552] RDX: 0000000000000000 RSI: ffffffff8f111340 RDI: ffffffff903b1b60 [ 155.516362][ T6552] RBP: 0000000000000000 R08: ffff88805adf9f00 R09: 0000000000000005 [ 155.524346][ T6552] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88802ac8d618 [ 155.532320][ T6552] R13: ffff88802c20c800 R14: ffff88802ac8d610 R15: ffff88802ac8d600 [ 155.540307][ T6552] ? refcount_warn_saturate+0x98/0x110 [ 155.545789][ T6552] ? refcount_warn_saturate+0x98/0x110 [ 155.551265][ T6552] dvb_device_open+0x316/0x350 [ 155.556057][ T6552] chrdev_open+0x4cd/0x5e0 [ 155.560489][ T6552] ? __pfx_chrdev_open+0x10/0x10 [ 155.565434][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.571076][ T6552] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 155.577436][ T6552] ? __pfx_chrdev_open+0x10/0x10 [ 155.582385][ T6552] do_dentry_open+0x822/0x13a0 [ 155.587173][ T6552] vfs_open+0x3b/0x340 [ 155.591256][ T6552] ? path_openat+0x2df0/0x3860 [ 155.596040][ T6552] path_openat+0x2e08/0x3860 [ 155.600662][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.606309][ T6552] ? __pfx_stack_trace_save+0x10/0x10 [ 155.611703][ T6552] ? stack_depot_save_flags+0x33/0x810 [ 155.617182][ T6552] ? __pfx_path_openat+0x10/0x10 [ 155.622140][ T6552] ? __x64_sys_openat+0x138/0x170 [ 155.627181][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.632821][ T6552] ? __lock_acquire+0x6b5/0x2cf0 [ 155.637785][ T6552] do_file_open+0x23e/0x4a0 [ 155.642318][ T6552] ? __pfx_do_file_open+0x10/0x10 [ 155.647383][ T6552] ? _raw_spin_unlock+0x28/0x50 [ 155.652252][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.657892][ T6552] ? alloc_fd+0x64b/0x6c0 [ 155.662244][ T6552] do_sys_openat2+0x113/0x200 [ 155.666933][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.672573][ T6552] ? _raw_spin_unlock_irq+0x2e/0x50 [ 155.677789][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.683441][ T6552] ? __pfx_do_sys_openat2+0x10/0x10 [ 155.688651][ T6552] ? exc_page_fault+0x6a/0xc0 [ 155.693342][ T6552] ? srso_alias_return_thunk+0x5/0xfbef5 [ 155.698988][ T6552] ? do_user_addr_fault+0xc6f/0x1340 [ 155.704284][ T6552] __x64_sys_openat+0x138/0x170 [ 155.709153][ T6552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.715228][ T6552] do_syscall_64+0x174/0x580 [ 155.719823][ T6552] ? trace_irq_disable+0x3b/0x140 [ 155.724882][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.730777][ T6552] RIP: 0033:0x7f2f9cb5d68e [ 155.735199][ T6552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.754808][ T6552] RSP: 002b:00007f2f9daceb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 155.763321][ T6552] RAX: ffffffffffffffda RBX: 00007f2f9dacf6c0 RCX: 00007f2f9cb5d68e [ 155.771295][ T6552] RDX: 0000000000040002 RSI: 00007f2f9dacec00 RDI: ffffffffffffff9c [ 155.779269][ T6552] RBP: 00007f2f9dacec00 R08: 0000000000000000 R09: 0000000000000000 [ 155.787242][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 155.795214][ T6552] R13: 00007f2f9ce16128 R14: 00007f2f9ce16090 R15: 00007ffe67bc2768 [ 155.803210][ T6552] [ 155.806453][ T6552] Kernel Offset: disabled [ 155.810766][ T6552] Rebooting in 86400 seconds..