[ 91.287312][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.51' (ED25519) to the list of known hosts. 2026/08/01 18:25:10 parsed 1 programs 2026/08/01 18:25:10 serving rpc on tcp://46409 [ 103.297046][ T5638] cgroup: Unknown subsys name 'net' [ 103.388270][ T5638] cgroup: Unknown subsys name 'cpuset' [ 103.397914][ T5638] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 105.089161][ T5638] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.514259][ T5656] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.207093][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.246771][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.439472][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.472967][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.267924][ T5696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.279922][ T5696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.288708][ T5696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.303607][ T5696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.312691][ T5696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.299021][ T5683] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.319481][ T5683] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.328913][ T5683] bridge_slave_0: entered allmulticast mode [ 113.340188][ T5683] bridge_slave_0: entered promiscuous mode [ 113.351491][ T5683] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.358771][ T5683] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.367409][ T5683] bridge_slave_1: entered allmulticast mode [ 113.378968][ T5683] bridge_slave_1: entered promiscuous mode [ 113.422239][ T5683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.435939][ T5683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.482048][ T5683] team0: Port device team_slave_0 added [ 113.491322][ T5683] team0: Port device team_slave_1 added [ 113.523997][ T5683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.530999][ T5683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.556980][ T5683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.570591][ T5683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.577633][ T5683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.603631][ T5683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.660056][ T5683] hsr_slave_0: entered promiscuous mode [ 113.667165][ T5683] hsr_slave_1: entered promiscuous mode [ 113.860122][ T5683] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.874849][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.883814][ T5683] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.895351][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.904300][ T5683] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.914760][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.922926][ T5683] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.935619][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.971714][ T5683] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.979995][ T5683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.988521][ T5683] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.995724][ T5683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.085645][ T5683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.107388][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.117687][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.140321][ T5683] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.159371][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.167285][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.189748][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.196961][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.684280][ T5683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.742797][ T5683] veth0_vlan: entered promiscuous mode [ 114.758789][ T5683] veth1_vlan: entered promiscuous mode [ 114.798075][ T5683] veth0_macvtap: entered promiscuous mode [ 114.810153][ T5683] veth1_macvtap: entered promiscuous mode [ 114.836256][ T5683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.855610][ T5683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.880340][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.944348][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.959174][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.972292][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/01 18:25:28 executed programs: 0 [ 115.139145][ T5696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.154512][ T5696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.167437][ T5696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.180104][ T5696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.190741][ T5696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.364076][ T5696] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.382812][ T5696] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.396507][ T5696] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.420844][ T5696] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.434358][ T5696] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.465160][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.492172][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.502391][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.511997][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.515696][ T4936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.522855][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.531983][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.538074][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.543044][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.548478][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.599545][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.622541][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.634094][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.645968][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.659269][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.704748][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.718358][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.736321][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.754281][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.769786][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.209037][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.936485][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.211218][ T50] Bluetooth: hci0: command tx timeout [ 117.526667][ T50] Bluetooth: hci1: command tx timeout [ 117.603257][ T50] Bluetooth: hci3: command tx timeout [ 117.640794][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.763256][ T4936] Bluetooth: hci4: command tx timeout [ 117.769383][ T50] Bluetooth: hci2: command tx timeout [ 117.843405][ T50] Bluetooth: hci5: command tx timeout [ 117.845430][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.513799][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.521122][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.529083][ T5761] bridge_slave_0: entered allmulticast mode [ 118.537071][ T5761] bridge_slave_0: entered promiscuous mode [ 118.618076][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.625454][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.632706][ T5761] bridge_slave_1: entered allmulticast mode [ 118.640587][ T5761] bridge_slave_1: entered promiscuous mode [ 118.777739][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.785118][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.792387][ T5768] bridge_slave_0: entered allmulticast mode [ 118.801188][ T5768] bridge_slave_0: entered promiscuous mode [ 118.809893][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.817078][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.824541][ T5768] bridge_slave_1: entered allmulticast mode [ 118.832415][ T5768] bridge_slave_1: entered promiscuous mode [ 118.869205][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.876563][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.885010][ T5773] bridge_slave_0: entered allmulticast mode [ 118.892629][ T5773] bridge_slave_0: entered promiscuous mode [ 118.955557][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.969683][ T36] bridge_slave_1: left allmulticast mode [ 118.975799][ T36] bridge_slave_1: left promiscuous mode [ 118.982837][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.996355][ T36] bridge_slave_0: left allmulticast mode [ 119.002014][ T36] bridge_slave_0: left promiscuous mode [ 119.009460][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.225624][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.237582][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.249662][ T36] bond0 (unregistering): Released all slaves [ 119.284916][ T50] Bluetooth: hci0: command tx timeout [ 119.352107][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.359382][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.367147][ T5773] bridge_slave_1: entered allmulticast mode [ 119.376719][ T5773] bridge_slave_1: entered promiscuous mode [ 119.469307][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.505200][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.551002][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.566383][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.598527][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.605790][ T50] Bluetooth: hci1: command tx timeout [ 119.614705][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.622039][ T5771] bridge_slave_0: entered allmulticast mode [ 119.630516][ T5771] bridge_slave_0: entered promiscuous mode [ 119.678249][ T5761] team0: Port device team_slave_0 added [ 119.688232][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.697503][ T50] Bluetooth: hci3: command tx timeout [ 119.742880][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.750286][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.757822][ T5771] bridge_slave_1: entered allmulticast mode [ 119.766572][ T5771] bridge_slave_1: entered promiscuous mode [ 119.774100][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.781287][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.788782][ T5770] bridge_slave_0: entered allmulticast mode [ 119.796801][ T5770] bridge_slave_0: entered promiscuous mode [ 119.808943][ T5761] team0: Port device team_slave_1 added [ 119.826962][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.834290][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.841511][ T5772] bridge_slave_0: entered allmulticast mode [ 119.847863][ T50] Bluetooth: hci2: command tx timeout [ 119.847985][ T50] Bluetooth: hci4: command tx timeout [ 119.861258][ T5772] bridge_slave_0: entered promiscuous mode [ 119.875352][ T36] hsr_slave_0: left promiscuous mode [ 119.881284][ T36] hsr_slave_1: left promiscuous mode [ 119.887497][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.895388][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.903696][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.911071][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.926482][ T36] veth1_macvtap: left promiscuous mode [ 119.932111][ T36] veth0_macvtap: left promiscuous mode [ 119.938334][ T4936] Bluetooth: hci5: command tx timeout [ 119.941804][ T36] veth1_vlan: left promiscuous mode [ 119.949270][ T36] veth0_vlan: left promiscuous mode [ 120.204417][ T36] team0 (unregistering): Port device team_slave_1 removed [ 120.223884][ T36] team0 (unregistering): Port device team_slave_0 removed [ 120.375743][ T5768] team0: Port device team_slave_0 added [ 120.429108][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.436439][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.448164][ T5770] bridge_slave_1: entered allmulticast mode [ 120.456202][ T5770] bridge_slave_1: entered promiscuous mode [ 120.504936][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.512121][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.519572][ T5772] bridge_slave_1: entered allmulticast mode [ 120.527826][ T5772] bridge_slave_1: entered promiscuous mode [ 120.537659][ T5768] team0: Port device team_slave_1 added [ 120.551447][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.565981][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.612613][ T5773] team0: Port device team_slave_0 added [ 120.666354][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.676454][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.683906][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.710480][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.725694][ T5773] team0: Port device team_slave_1 added [ 120.781281][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.811684][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.819152][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.845714][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.907084][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.917118][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.925056][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.951826][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.967356][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.974546][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.001202][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.016112][ T5771] team0: Port device team_slave_0 added [ 121.065894][ T5770] team0: Port device team_slave_0 added [ 121.072478][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.082008][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.119227][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.137557][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.170548][ T5771] team0: Port device team_slave_1 added [ 121.179922][ T5770] team0: Port device team_slave_1 added [ 121.188165][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.195260][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.221972][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.373671][ T4936] Bluetooth: hci0: command tx timeout [ 121.504200][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.511368][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.539535][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.555660][ T5772] team0: Port device team_slave_0 added [ 121.566351][ T5772] team0: Port device team_slave_1 added [ 121.573870][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 121.589373][ T5768] hsr_slave_0: entered promiscuous mode [ 121.596136][ T5768] hsr_slave_1: entered promiscuous mode [ 121.611012][ T5761] hsr_slave_0: entered promiscuous mode [ 121.617779][ T5761] hsr_slave_1: entered promiscuous mode [ 121.625129][ T5761] debugfs: 'hsr0' already exists in 'hsr' [ 121.631000][ T5761] Cannot create hsr debugfs directory [ 121.637794][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.644806][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.671088][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.683253][ T4936] Bluetooth: hci1: command tx timeout [ 121.683983][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.695992][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.722529][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.763410][ T4936] Bluetooth: hci3: command tx timeout [ 121.776995][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.784886][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.811481][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.859627][ T5773] hsr_slave_0: entered promiscuous mode [ 121.866539][ T5773] hsr_slave_1: entered promiscuous mode [ 121.874083][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 121.879832][ T5773] Cannot create hsr debugfs directory [ 121.923339][ T4936] Bluetooth: hci4: command tx timeout [ 121.928824][ T50] Bluetooth: hci2: command tx timeout [ 121.944010][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.950960][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.976896][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.003367][ T50] Bluetooth: hci5: command tx timeout [ 122.045516][ T5770] hsr_slave_0: entered promiscuous mode [ 122.052040][ T5770] hsr_slave_1: entered promiscuous mode [ 122.058429][ T5770] debugfs: 'hsr0' already exists in 'hsr' [ 122.064233][ T5770] Cannot create hsr debugfs directory [ 122.083819][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.090890][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.117091][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.230993][ T5771] hsr_slave_0: entered promiscuous mode [ 122.238731][ T5771] hsr_slave_1: entered promiscuous mode [ 122.246642][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 122.252442][ T5771] Cannot create hsr debugfs directory [ 122.584743][ T5772] hsr_slave_0: entered promiscuous mode [ 122.591628][ T5772] hsr_slave_1: entered promiscuous mode [ 122.598601][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 122.605027][ T5772] Cannot create hsr debugfs directory [ 123.057788][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 123.264721][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.281773][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.290811][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.302926][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.313237][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.329687][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.380576][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.396348][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.443341][ T50] Bluetooth: hci0: command tx timeout [ 123.675875][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.726820][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.758833][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.766122][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.773323][ T50] Bluetooth: hci1: command tx timeout [ 123.807382][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.814701][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.859547][ T50] Bluetooth: hci3: command tx timeout [ 124.007673][ T50] Bluetooth: hci2: command tx timeout [ 124.013307][ T50] Bluetooth: hci4: command tx timeout [ 124.025617][ T5761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.045540][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.060495][ T5761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.087772][ T50] Bluetooth: hci5: command tx timeout [ 124.091347][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.154431][ T5761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.170148][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.197390][ T5761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.212035][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.376211][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.398901][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.421002][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.452126][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.490948][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.509901][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.519270][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.544956][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.828476][ T5771] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.844465][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.852947][ T5771] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.878989][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.908120][ T5771] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.945555][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.954812][ T5771] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.968556][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.376340][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.421686][ T5773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.437620][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.460197][ T5773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.488570][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.500081][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.530748][ T5773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.548285][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.616152][ T5773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.628205][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.802785][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.845103][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.907184][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.937167][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.955178][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.962348][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.992574][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.009148][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.067645][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.089859][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.102714][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.110107][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.138964][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.149170][ T5768] veth0_vlan: entered promiscuous mode [ 126.157542][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.175021][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.242073][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.249331][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.312885][ T5768] veth1_vlan: entered promiscuous mode [ 126.359531][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.366771][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.413758][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.622253][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.702970][ T5768] veth0_macvtap: entered promiscuous mode [ 126.760498][ T5768] veth1_macvtap: entered promiscuous mode [ 126.792932][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.800184][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.850306][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.857644][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.959952][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.050874][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.092011][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.182068][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.189301][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.204447][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.268687][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.275943][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.377030][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.448569][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.496241][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.586085][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.699021][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.820112][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.827367][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.963854][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.971100][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.004869][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.039166][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.085778][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.256107][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.299705][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.325503][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/01 18:25:42 executed programs: 12 [ 128.704605][ T5761] veth0_vlan: entered promiscuous mode [ 129.559499][ T5761] veth1_vlan: entered promiscuous mode [ 129.682097][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.562956][ T5761] veth0_macvtap: entered promiscuous mode [ 130.631359][ T5761] veth1_macvtap: entered promiscuous mode [ 131.562187][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.912193][ T5770] veth0_vlan: entered promiscuous mode [ 132.138114][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.247825][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.260072][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.382438][ T5770] veth1_vlan: entered promiscuous mode [ 132.403666][ T151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.421256][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.677210][ T6064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.971530][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.336091][ T139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/01 18:25:47 executed programs: 18 [ 134.397389][ T5770] veth0_macvtap: entered promiscuous mode [ 134.479822][ T5790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.493622][ T5770] veth1_macvtap: entered promiscuous mode [ 134.522369][ T5790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.370099][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.469611][ T5790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.586742][ T5790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.822767][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.254629][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.426043][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.516920][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.745283][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.396194][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.253983][ T151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.262851][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.299925][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/01 18:25:52 executed programs: 26 [ 141.197329][ T6062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.260414][ T6062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.881442][ T5771] veth0_vlan: entered promiscuous mode [ 141.915230][ T5772] veth0_vlan: entered promiscuous mode [ 143.062258][ T5771] veth1_vlan: entered promiscuous mode [ 143.956914][ T5772] veth1_vlan: entered promiscuous mode [ 144.792718][ T5773] veth0_vlan: entered promiscuous mode 2026/08/01 18:25:58 executed programs: 35 [ 145.766743][ T5773] veth1_vlan: entered promiscuous mode [ 146.745849][ T5771] veth0_macvtap: entered promiscuous mode [ 147.820220][ T5771] veth1_macvtap: entered promiscuous mode [ 149.003447][ T5772] veth0_macvtap: entered promiscuous mode [ 149.906192][ T5772] veth1_macvtap: entered promiscuous mode [ 149.935132][ T5773] veth0_macvtap: entered promiscuous mode [ 149.971856][ T5773] veth1_macvtap: entered promiscuous mode 2026/08/01 18:26:04 executed programs: 44 [ 150.939360][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.162396][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.207850][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.230194][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.256638][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.301546][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.320440][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.423448][ T6062] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.378354][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.442619][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.244093][ T6253] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 156.253811][ T6254] ================================================================== [ 156.261914][ T6254] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 156.269692][ T6254] Read of size 8 at addr ffff88802b032418 by task syz.1.62/6254 [ 156.277341][ T6254] [ 156.279680][ T6254] CPU: 1 UID: 0 PID: 6254 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(full) [ 156.279727][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 156.279750][ T6254] Call Trace: [ 156.279766][ T6254] [ 156.279781][ T6254] dump_stack_lvl+0x100/0x190 [ 156.279828][ T6254] print_report+0x13d/0x4b0 [ 156.279885][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.279941][ T6254] ? __virt_addr_valid+0x239/0x430 [ 156.279990][ T6254] ? dvb_device_open+0x33f/0x3b0 [ 156.280050][ T6254] kasan_report+0xdf/0x1c0 [ 156.280092][ T6254] ? dvb_device_open+0x33f/0x3b0 [ 156.280155][ T6254] ? __pfx_dvb_device_open+0x10/0x10 [ 156.280215][ T6254] dvb_device_open+0x33f/0x3b0 [ 156.280276][ T6254] ? __pfx_dvb_device_open+0x10/0x10 [ 156.280335][ T6254] chrdev_open+0x234/0x6a0 [ 156.280391][ T6254] ? __pfx_apparmor_file_open+0x10/0x10 [ 156.280436][ T6254] ? __pfx_chrdev_open+0x10/0x10 [ 156.280492][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.280539][ T6254] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 156.280612][ T6254] do_dentry_open+0x6ab/0x14d0 [ 156.280664][ T6254] ? __pfx_chrdev_open+0x10/0x10 [ 156.280724][ T6254] vfs_open+0x82/0x3f0 [ 156.280784][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.280834][ T6254] path_openat+0x2873/0x4280 [ 156.280901][ T6254] ? __pfx_path_openat+0x10/0x10 [ 156.280970][ T6254] do_file_open+0x20e/0x430 [ 156.281027][ T6254] ? __pfx_do_file_open+0x10/0x10 [ 156.281101][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.281147][ T6254] ? alloc_fd+0x471/0x7a0 [ 156.281206][ T6254] ? do_getname+0x191/0x390 [ 156.281246][ T6254] do_sys_openat2+0x10f/0x1e0 [ 156.281283][ T6254] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.281319][ T6254] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 156.281364][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.281410][ T6254] ? rcu_is_watching+0x12/0xc0 [ 156.281469][ T6254] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.281516][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.281562][ T6254] ? lockdep_hardirqs_on+0x78/0x100 [ 156.281617][ T6254] __x64_sys_openat+0x12d/0x210 [ 156.281656][ T6254] ? __pfx___x64_sys_openat+0x10/0x10 [ 156.281696][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.281745][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.281795][ T6254] do_syscall_64+0x115/0x870 [ 156.281850][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.281891][ T6254] RIP: 0033:0x7f773915e84e [ 156.281921][ T6254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.281964][ T6254] RSP: 002b:00007f773a015b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 156.282001][ T6254] RAX: ffffffffffffffda RBX: 00007f773a0166c0 RCX: 00007f773915e84e [ 156.282028][ T6254] RDX: 0000000000040402 RSI: 00007f773a015c00 RDI: ffffffffffffff9c [ 156.282053][ T6254] RBP: 00007f773a015c00 R08: 0000000000000000 R09: 0000000000000000 [ 156.282078][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 156.282103][ T6254] R13: 00007f7739426128 R14: 00007f7739426090 R15: 00007fffa86b15c8 [ 156.282141][ T6254] [ 156.282154][ T6254] [ 156.587356][ T6254] Allocated by task 1: [ 156.591417][ T6254] kasan_save_stack+0x30/0x50 [ 156.596139][ T6254] kasan_save_track+0x14/0x30 [ 156.600845][ T6254] __kasan_kmalloc+0xaa/0xb0 [ 156.605475][ T6254] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 156.610868][ T6254] dvb_register_device+0x1d6/0x1e20 [ 156.616096][ T6254] dvb_register_frontend+0x552/0x820 [ 156.621407][ T6254] vidtv_bridge_probe+0x44b/0xa30 [ 156.626448][ T6254] platform_probe+0x106/0x1d0 [ 156.631134][ T6254] really_probe+0x241/0xa60 [ 156.635653][ T6254] __driver_probe_device+0x20e/0x450 [ 156.640963][ T6254] driver_probe_device+0x4a/0x140 [ 156.646009][ T6254] __driver_attach+0x21f/0x5b0 [ 156.650795][ T6254] bus_for_each_dev+0x13e/0x1d0 [ 156.655658][ T6254] bus_add_driver+0x305/0x5b0 [ 156.660350][ T6254] driver_register+0x1e2/0x360 [ 156.665140][ T6254] vidtv_bridge_init+0x52/0x80 [ 156.669914][ T6254] do_one_initcall+0x11d/0x700 [ 156.674696][ T6254] kernel_init_freeable+0x6ea/0x7b0 [ 156.679938][ T6254] kernel_init+0x1f/0x1e0 [ 156.684296][ T6254] ret_from_fork+0x72b/0xd50 [ 156.688906][ T6254] ret_from_fork_asm+0x1a/0x30 [ 156.693694][ T6254] [ 156.696009][ T6254] Freed by task 6253: [ 156.699977][ T6254] kasan_save_stack+0x30/0x50 [ 156.704686][ T6254] kasan_save_track+0x14/0x30 [ 156.709398][ T6254] kasan_save_free_info+0x3b/0x70 [ 156.714463][ T6254] __kasan_slab_free+0x5f/0x80 [ 156.719249][ T6254] kfree+0x22b/0x6c0 [ 156.723159][ T6254] dvb_device_put.part.0+0x57/0x90 [ 156.728297][ T6254] dvb_device_open+0x2ba/0x3b0 [ 156.733085][ T6254] chrdev_open+0x234/0x6a0 [ 156.737531][ T6254] do_dentry_open+0x6ab/0x14d0 [ 156.742308][ T6254] vfs_open+0x82/0x3f0 [ 156.746398][ T6254] path_openat+0x2873/0x4280 [ 156.751013][ T6254] do_file_open+0x20e/0x430 [ 156.755536][ T6254] do_sys_openat2+0x10f/0x1e0 [ 156.760214][ T6254] __x64_sys_openat+0x12d/0x210 [ 156.765066][ T6254] do_syscall_64+0x115/0x870 [ 156.769671][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.775567][ T6254] [ 156.777879][ T6254] The buggy address belongs to the object at ffff88802b032400 [ 156.777879][ T6254] which belongs to the cache kmalloc-256 of size 256 [ 156.791947][ T6254] The buggy address is located 24 bytes inside of [ 156.791947][ T6254] freed 256-byte region [ffff88802b032400, ffff88802b032500) [ 156.805680][ T6254] [ 156.808004][ T6254] The buggy address belongs to the physical page: [ 156.814411][ T6254] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b032e00 pfn:0x2b032 [ 156.824478][ T6254] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 156.832975][ T6254] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 156.841477][ T6254] page_type: f5(slab) [ 156.845471][ T6254] raw: 00fff00000000240 ffff88813fe21b40 ffffea0000aaf110 ffffea0000ac0b10 [ 156.854066][ T6254] raw: ffff88802b032e00 000000080010000f 00000000f5000000 0000000000000000 [ 156.862657][ T6254] head: 00fff00000000240 ffff88813fe21b40 ffffea0000aaf110 ffffea0000ac0b10 [ 156.871331][ T6254] head: ffff88802b032e00 000000080010000f 00000000f5000000 0000000000000000 [ 156.880007][ T6254] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 156.888684][ T6254] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 156.897347][ T6254] page dumped because: kasan: bad access detected [ 156.903751][ T6254] page_owner tracks the page as allocated [ 156.909456][ T6254] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14551047072, free_ts 0 [ 156.927621][ T6254] post_alloc_hook+0xfd/0x120 [ 156.932319][ T6254] get_page_from_freelist+0xf48/0x3530 [ 156.937798][ T6254] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 156.943717][ T6254] new_slab+0xa2/0x640 [ 156.947804][ T6254] refill_objects+0xe3/0x410 [ 156.952412][ T6254] __pcs_replace_empty_main+0x376/0x680 [ 156.957975][ T6254] __kmalloc_cache_noprof+0x479/0x6c0 [ 156.963364][ T6254] usb_string+0x10f/0x570 [ 156.967706][ T6254] usb_cache_string+0x7c/0x100 [ 156.972479][ T6254] usb_new_device+0x166/0x7d0 [ 156.977171][ T6254] register_root_hub+0x4e6/0x639 [ 156.982123][ T6254] usb_add_hcd.cold+0xccd/0x1158 [ 156.987072][ T6254] vhci_hcd_probe+0x14b/0x4e0 [ 156.991765][ T6254] platform_probe+0x106/0x1d0 [ 156.996451][ T6254] really_probe+0x241/0xa60 [ 157.000968][ T6254] __driver_probe_device+0x20e/0x450 [ 157.006272][ T6254] page_owner free stack trace missing [ 157.011629][ T6254] [ 157.013946][ T6254] Memory state around the buggy address: [ 157.019568][ T6254] ffff88802b032300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.027626][ T6254] ffff88802b032380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.035686][ T6254] >ffff88802b032400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.043744][ T6254] ^ [ 157.048587][ T6254] ffff88802b032480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.056647][ T6254] ffff88802b032500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.064700][ T6254] ================================================================== [ 157.075101][ T6254] Disabling lock debugging due to kernel taint [ 157.082176][ T6254] ================================================================== [ 157.090245][ T6254] BUG: KASAN: slab-use-after-free in dvb_device_open+0x152/0x3b0 [ 157.098008][ T6254] Write of size 4 at addr ffff88802b032410 by task syz.1.62/6254 [ 157.105737][ T6254] [ 157.108075][ T6254] CPU: 1 UID: 0 PID: 6254 Comm: syz.1.62 Tainted: G B syzkaller #0 PREEMPT(full) [ 157.108131][ T6254] Tainted: [B]=BAD_PAGE [ 157.108145][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.108169][ T6254] Call Trace: [ 157.108183][ T6254] [ 157.108197][ T6254] dump_stack_lvl+0x100/0x190 [ 157.108242][ T6254] print_report+0x13d/0x4b0 [ 157.108299][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.108346][ T6254] ? __virt_addr_valid+0x239/0x430 [ 157.108395][ T6254] ? dvb_device_open+0x152/0x3b0 [ 157.108454][ T6254] kasan_report+0xdf/0x1c0 [ 157.108497][ T6254] ? dvb_device_open+0x152/0x3b0 [ 157.108561][ T6254] kasan_check_range+0x10f/0x1e0 [ 157.108609][ T6254] dvb_device_open+0x152/0x3b0 [ 157.108668][ T6254] ? __pfx_dvb_device_open+0x10/0x10 [ 157.108728][ T6254] chrdev_open+0x234/0x6a0 [ 157.108783][ T6254] ? __pfx_apparmor_file_open+0x10/0x10 [ 157.108827][ T6254] ? __pfx_chrdev_open+0x10/0x10 [ 157.108883][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.108930][ T6254] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 157.109011][ T6254] do_dentry_open+0x6ab/0x14d0 [ 157.109063][ T6254] ? __pfx_chrdev_open+0x10/0x10 [ 157.109123][ T6254] vfs_open+0x82/0x3f0 [ 157.109182][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.109233][ T6254] path_openat+0x2873/0x4280 [ 157.109299][ T6254] ? __pfx_path_openat+0x10/0x10 [ 157.109361][ T6254] do_file_open+0x20e/0x430 [ 157.109419][ T6254] ? __pfx_do_file_open+0x10/0x10 [ 157.109491][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.109537][ T6254] ? alloc_fd+0x471/0x7a0 [ 157.109595][ T6254] ? do_getname+0x191/0x390 [ 157.109635][ T6254] do_sys_openat2+0x10f/0x1e0 [ 157.109672][ T6254] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.109707][ T6254] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 157.109752][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.109799][ T6254] ? rcu_is_watching+0x12/0xc0 [ 157.109854][ T6254] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.109900][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.109952][ T6254] ? lockdep_hardirqs_on+0x78/0x100 [ 157.110006][ T6254] __x64_sys_openat+0x12d/0x210 [ 157.110044][ T6254] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.110085][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.110133][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.110184][ T6254] do_syscall_64+0x115/0x870 [ 157.110238][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.110278][ T6254] RIP: 0033:0x7f773915e84e [ 157.110308][ T6254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.110346][ T6254] RSP: 002b:00007f773a015b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.110382][ T6254] RAX: ffffffffffffffda RBX: 00007f773a0166c0 RCX: 00007f773915e84e [ 157.110409][ T6254] RDX: 0000000000040402 RSI: 00007f773a015c00 RDI: ffffffffffffff9c [ 157.110435][ T6254] RBP: 00007f773a015c00 R08: 0000000000000000 R09: 0000000000000000 [ 157.110459][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 157.110484][ T6254] R13: 00007f7739426128 R14: 00007f7739426090 R15: 00007fffa86b15c8 [ 157.110522][ T6254] [ 157.110535][ T6254] [ 157.421243][ T6254] Allocated by task 1: [ 157.425316][ T6254] kasan_save_stack+0x30/0x50 [ 157.430039][ T6254] kasan_save_track+0x14/0x30 [ 157.434761][ T6254] __kasan_kmalloc+0xaa/0xb0 [ 157.439387][ T6254] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 157.444789][ T6254] dvb_register_device+0x1d6/0x1e20 [ 157.450031][ T6254] dvb_register_frontend+0x552/0x820 [ 157.455354][ T6254] vidtv_bridge_probe+0x44b/0xa30 [ 157.460400][ T6254] platform_probe+0x106/0x1d0 [ 157.465097][ T6254] really_probe+0x241/0xa60 [ 157.469626][ T6254] __driver_probe_device+0x20e/0x450 [ 157.474948][ T6254] driver_probe_device+0x4a/0x140 [ 157.480004][ T6254] __driver_attach+0x21f/0x5b0 [ 157.484800][ T6254] bus_for_each_dev+0x13e/0x1d0 [ 157.489667][ T6254] bus_add_driver+0x305/0x5b0 [ 157.494369][ T6254] driver_register+0x1e2/0x360 [ 157.499167][ T6254] vidtv_bridge_init+0x52/0x80 [ 157.503953][ T6254] do_one_initcall+0x11d/0x700 [ 157.508749][ T6254] kernel_init_freeable+0x6ea/0x7b0 [ 157.513987][ T6254] kernel_init+0x1f/0x1e0 [ 157.518354][ T6254] ret_from_fork+0x72b/0xd50 [ 157.523042][ T6254] ret_from_fork_asm+0x1a/0x30 [ 157.527842][ T6254] [ 157.530166][ T6254] Freed by task 6253: [ 157.534145][ T6254] kasan_save_stack+0x30/0x50 [ 157.538863][ T6254] kasan_save_track+0x14/0x30 [ 157.543588][ T6254] kasan_save_free_info+0x3b/0x70 [ 157.548644][ T6254] __kasan_slab_free+0x5f/0x80 [ 157.553424][ T6254] kfree+0x22b/0x6c0 [ 157.557347][ T6254] dvb_device_put.part.0+0x57/0x90 [ 157.562500][ T6254] dvb_device_open+0x2ba/0x3b0 [ 157.567306][ T6254] chrdev_open+0x234/0x6a0 [ 157.571762][ T6254] do_dentry_open+0x6ab/0x14d0 [ 157.576559][ T6254] vfs_open+0x82/0x3f0 [ 157.580676][ T6254] path_openat+0x2873/0x4280 [ 157.585309][ T6254] do_file_open+0x20e/0x430 [ 157.589853][ T6254] do_sys_openat2+0x10f/0x1e0 [ 157.594547][ T6254] __x64_sys_openat+0x12d/0x210 [ 157.599413][ T6254] do_syscall_64+0x115/0x870 [ 157.604039][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.609958][ T6254] [ 157.612281][ T6254] The buggy address belongs to the object at ffff88802b032400 [ 157.612281][ T6254] which belongs to the cache kmalloc-256 of size 256 [ 157.626352][ T6254] The buggy address is located 16 bytes inside of [ 157.626352][ T6254] freed 256-byte region [ffff88802b032400, ffff88802b032500) [ 157.640096][ T6254] [ 157.642435][ T6254] The buggy address belongs to the physical page: [ 157.648854][ T6254] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b032e00 pfn:0x2b032 [ 157.658949][ T6254] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.667471][ T6254] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 157.675997][ T6254] page_type: f5(slab) [ 157.680010][ T6254] raw: 00fff00000000240 ffff88813fe21b40 ffffea0000aaf110 ffffea0000ac0b10 [ 157.688625][ T6254] raw: ffff88802b032e00 000000080010000f 00000000f5000000 0000000000000000 [ 157.697239][ T6254] head: 00fff00000000240 ffff88813fe21b40 ffffea0000aaf110 ffffea0000ac0b10 [ 157.705947][ T6254] head: ffff88802b032e00 000000080010000f 00000000f5000000 0000000000000000 [ 157.714653][ T6254] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 157.723362][ T6254] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 157.732045][ T6254] page dumped because: kasan: bad access detected [ 157.738466][ T6254] page_owner tracks the page as allocated [ 157.744187][ T6254] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14551047072, free_ts 0 [ 157.762373][ T6254] post_alloc_hook+0xfd/0x120 [ 157.767096][ T6254] get_page_from_freelist+0xf48/0x3530 [ 157.772591][ T6254] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 157.778524][ T6254] new_slab+0xa2/0x640 [ 157.782624][ T6254] refill_objects+0xe3/0x410 [ 157.787247][ T6254] __pcs_replace_empty_main+0x376/0x680 [ 157.792828][ T6254] __kmalloc_cache_noprof+0x479/0x6c0 [ 157.798232][ T6254] usb_string+0x10f/0x570 [ 157.802584][ T6254] usb_cache_string+0x7c/0x100 [ 157.807372][ T6254] usb_new_device+0x166/0x7d0 [ 157.812076][ T6254] register_root_hub+0x4e6/0x639 [ 157.817042][ T6254] usb_add_hcd.cold+0xccd/0x1158 [ 157.822005][ T6254] vhci_hcd_probe+0x14b/0x4e0 [ 157.826708][ T6254] platform_probe+0x106/0x1d0 [ 157.831406][ T6254] really_probe+0x241/0xa60 [ 157.835941][ T6254] __driver_probe_device+0x20e/0x450 [ 157.841258][ T6254] page_owner free stack trace missing [ 157.846623][ T6254] [ 157.848950][ T6254] Memory state around the buggy address: [ 157.854585][ T6254] ffff88802b032300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.862656][ T6254] ffff88802b032380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.870737][ T6254] >ffff88802b032400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.878810][ T6254] ^ [ 157.883529][ T6254] ffff88802b032480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.891599][ T6254] ffff88802b032500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.899665][ T6254] ================================================================== [ 157.910783][ T6254] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 157.918526][ T6254] CPU: 1 UID: 0 PID: 6254 Comm: syz.1.62 Tainted: G B syzkaller #0 PREEMPT(full) [ 157.929232][ T6254] Tainted: [B]=BAD_PAGE [ 157.933388][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.943459][ T6254] Call Trace: [ 157.946743][ T6254] [ 157.949682][ T6254] dump_stack_lvl+0x100/0x190 [ 157.954391][ T6254] vpanic+0x552/0x970 [ 157.958400][ T6254] ? __pfx_vpanic+0x10/0x10 [ 157.962931][ T6254] ? rcu_is_watching+0x12/0xc0 [ 157.967739][ T6254] ? __pfx___schedule+0x10/0x10 [ 157.972622][ T6254] ? dvb_device_open+0x152/0x3b0 [ 157.977605][ T6254] panic+0xd1/0xe0 [ 157.981348][ T6254] ? __pfx_panic+0x10/0x10 [ 157.985790][ T6254] ? preempt_schedule_common+0x42/0xc0 [ 157.991282][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.996953][ T6254] ? preempt_schedule_thunk+0x16/0x40 [ 158.002380][ T6254] end_report.part.0+0x68/0x90 [ 158.007198][ T6254] kasan_report.cold+0xe/0x18 [ 158.011924][ T6254] ? dvb_device_open+0x152/0x3b0 [ 158.016914][ T6254] kasan_check_range+0x10f/0x1e0 [ 158.021890][ T6254] dvb_device_open+0x152/0x3b0 [ 158.026698][ T6254] ? __pfx_dvb_device_open+0x10/0x10 [ 158.032029][ T6254] chrdev_open+0x234/0x6a0 [ 158.036493][ T6254] ? __pfx_apparmor_file_open+0x10/0x10 [ 158.042072][ T6254] ? __pfx_chrdev_open+0x10/0x10 [ 158.047059][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.052728][ T6254] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 158.059121][ T6254] do_dentry_open+0x6ab/0x14d0 [ 158.063932][ T6254] ? __pfx_chrdev_open+0x10/0x10 [ 158.068921][ T6254] vfs_open+0x82/0x3f0 [ 158.073041][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.078706][ T6254] path_openat+0x2873/0x4280 [ 158.083347][ T6254] ? __pfx_path_openat+0x10/0x10 [ 158.088345][ T6254] do_file_open+0x20e/0x430 [ 158.092897][ T6254] ? __pfx_do_file_open+0x10/0x10 [ 158.098020][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.103684][ T6254] ? alloc_fd+0x471/0x7a0 [ 158.108057][ T6254] ? do_getname+0x191/0x390 [ 158.112582][ T6254] do_sys_openat2+0x10f/0x1e0 [ 158.117278][ T6254] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.122507][ T6254] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 158.128258][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.133923][ T6254] ? rcu_is_watching+0x12/0xc0 [ 158.138724][ T6254] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.143947][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.149609][ T6254] ? lockdep_hardirqs_on+0x78/0x100 [ 158.154845][ T6254] __x64_sys_openat+0x12d/0x210 [ 158.159720][ T6254] ? __pfx___x64_sys_openat+0x10/0x10 [ 158.165117][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.170784][ T6254] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.176450][ T6254] do_syscall_64+0x115/0x870 [ 158.181080][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.186994][ T6254] RIP: 0033:0x7f773915e84e [ 158.191427][ T6254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.211060][ T6254] RSP: 002b:00007f773a015b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.219502][ T6254] RAX: ffffffffffffffda RBX: 00007f773a0166c0 RCX: 00007f773915e84e [ 158.227487][ T6254] RDX: 0000000000040402 RSI: 00007f773a015c00 RDI: ffffffffffffff9c [ 158.235474][ T6254] RBP: 00007f773a015c00 R08: 0000000000000000 R09: 0000000000000000 [ 158.243460][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 158.251445][ T6254] R13: 00007f7739426128 R14: 00007f7739426090 R15: 00007fffa86b15c8 [ 158.259448][ T6254] [ 158.262700][ T6254] Kernel Offset: disabled [ 158.267021][ T6254] Rebooting in 86400 seconds..