no interfaces have a carrier [ 53.939597][ T3932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.952464][ T3932] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. 2026/04/05 08:48:19 parsed 1 programs syzkaller login: [ 82.974314][ T4271] cgroup: Unknown subsys name 'net' [ 83.078826][ T4271] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.691310][ T4271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 86.283158][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.291850][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.299823][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.307853][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.315980][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.323445][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.772734][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.780812][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.994043][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.048397][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.073090][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.115486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.138604][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 89.388338][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.412028][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.440670][ T4340] device bridge_slave_0 entered promiscuous mode [ 89.464480][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.482940][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.502686][ T4340] device bridge_slave_1 entered promiscuous mode [ 89.589961][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.606424][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.670912][ T4340] team0: Port device team_slave_0 added [ 89.680370][ T4340] team0: Port device team_slave_1 added [ 89.739058][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.747107][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.780128][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.815539][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.822921][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.849543][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.910952][ T4340] device hsr_slave_0 entered promiscuous mode [ 89.918556][ T4340] device hsr_slave_1 entered promiscuous mode [ 90.077823][ T4340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.089064][ T4340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.099184][ T4340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.108519][ T4340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.225915][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.272505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.281504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.332820][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.343369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.352884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.362937][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.370295][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.381453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.402898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.414599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.425268][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.432483][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.451416][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.461529][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.476715][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.488063][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.497785][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.513099][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.522307][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.542599][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.566931][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.579423][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.799737][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.808763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.823780][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.846172][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.866235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.875274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.884660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.896345][ T4340] device veth0_vlan entered promiscuous mode [ 90.908486][ T4340] device veth1_vlan entered promiscuous mode [ 90.934127][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.943582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.955293][ T4340] device veth0_macvtap entered promiscuous mode [ 90.966510][ T4340] device veth1_macvtap entered promiscuous mode [ 90.984163][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.992045][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.000312][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.009005][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.018892][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.030663][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.039428][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.049115][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.060914][ T4340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.070927][ T4340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.079756][ T4340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.088531][ T4340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/05 08:48:30 executed programs: 0 [ 91.303053][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.313268][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.324129][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.334635][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.342962][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.351008][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.383080][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.401400][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.410151][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.431855][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.439739][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.447644][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.609273][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.622646][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.631371][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.639657][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.648273][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.659967][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.733132][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.741100][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.754984][ T4386] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.763622][ T4386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.773461][ T4386] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.780780][ T4386] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.802018][ T4386] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.813928][ T4386] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.822373][ T4386] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.830190][ T4386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.837762][ T4386] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.845313][ T4386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.980242][ T128] cfg80211: failed to load regulatory.db [ 92.216721][ T4381] chnl_net:caif_netlink_parms(): no params data found [ 92.319961][ T4385] chnl_net:caif_netlink_parms(): no params data found [ 92.449916][ T4390] chnl_net:caif_netlink_parms(): no params data found [ 92.473936][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.481084][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.490443][ T4381] device bridge_slave_0 entered promiscuous mode [ 92.543033][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.550284][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.560125][ T4381] device bridge_slave_1 entered promiscuous mode [ 92.634925][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.671443][ T4381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.685665][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.703154][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.711513][ T4385] device bridge_slave_0 entered promiscuous mode [ 92.723876][ T4393] chnl_net:caif_netlink_parms(): no params data found [ 92.746926][ T4381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.796616][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.804007][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.813211][ T4385] device bridge_slave_1 entered promiscuous mode [ 92.830134][ T4392] chnl_net:caif_netlink_parms(): no params data found [ 92.843407][ T4381] team0: Port device team_slave_0 added [ 92.911235][ T4381] team0: Port device team_slave_1 added [ 92.944451][ T4385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.964740][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.972262][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.980586][ T4390] device bridge_slave_0 entered promiscuous mode [ 93.000548][ T4385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.012298][ T4381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.019304][ T4381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.045501][ T4381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.058554][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.065883][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.074281][ T4390] device bridge_slave_1 entered promiscuous mode [ 93.130884][ T4381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.138144][ T4381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.165082][ T4381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.216325][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.223777][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.232765][ T4392] device bridge_slave_0 entered promiscuous mode [ 93.247360][ T4390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.259899][ T4385] team0: Port device team_slave_0 added [ 93.267279][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.274774][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.283250][ T4393] device bridge_slave_0 entered promiscuous mode [ 93.292700][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.299836][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.308986][ T4392] device bridge_slave_1 entered promiscuous mode [ 93.327405][ T4390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.338874][ T4385] team0: Port device team_slave_1 added [ 93.345520][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.356145][ T4393] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.365102][ T4393] device bridge_slave_1 entered promiscuous mode [ 93.413022][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 93.426977][ T4385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.434037][ T4385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.460429][ T4385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.482653][ T4392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.491973][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 93.519416][ T4385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.527293][ T4385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.553515][ T4385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.567153][ T4393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.579365][ T4392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.593483][ T4381] device hsr_slave_0 entered promiscuous mode [ 93.600402][ T4381] device hsr_slave_1 entered promiscuous mode [ 93.609419][ T4381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.617475][ T4381] Cannot create hsr debugfs directory [ 93.625867][ T4390] team0: Port device team_slave_0 added [ 93.639098][ T4393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.665166][ T4390] team0: Port device team_slave_1 added [ 93.708154][ T4392] team0: Port device team_slave_0 added [ 93.731736][ T4386] Bluetooth: hci2: command 0x0409 tx timeout [ 93.758305][ T4392] team0: Port device team_slave_1 added [ 93.769311][ T4390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.776397][ T4390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.802775][ T4390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.821761][ T4385] device hsr_slave_0 entered promiscuous mode [ 93.821943][ T4386] Bluetooth: hci3: command 0x0409 tx timeout [ 93.835952][ T4385] device hsr_slave_1 entered promiscuous mode [ 93.843213][ T4385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.850812][ T4385] Cannot create hsr debugfs directory [ 93.859899][ T4393] team0: Port device team_slave_0 added [ 93.871474][ T4393] team0: Port device team_slave_1 added [ 93.891804][ T4386] Bluetooth: hci4: command 0x0409 tx timeout [ 93.903632][ T4390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.910636][ T4390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.937219][ T4390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.978121][ T4392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.985615][ T4392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.011921][ T4392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.054244][ T4392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.062083][ T4392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.088715][ T4392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.126770][ T4393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.134199][ T4393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.162752][ T4393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.175929][ T4393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.183154][ T4393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.209806][ T4393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.255193][ T4390] device hsr_slave_0 entered promiscuous mode [ 94.262649][ T4390] device hsr_slave_1 entered promiscuous mode [ 94.269438][ T4390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.277418][ T4390] Cannot create hsr debugfs directory [ 94.370987][ T4392] device hsr_slave_0 entered promiscuous mode [ 94.378076][ T4392] device hsr_slave_1 entered promiscuous mode [ 94.385552][ T4392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.393869][ T4392] Cannot create hsr debugfs directory [ 94.403356][ T4393] device hsr_slave_0 entered promiscuous mode [ 94.414709][ T4393] device hsr_slave_1 entered promiscuous mode [ 94.421364][ T4393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.429101][ T4393] Cannot create hsr debugfs directory [ 94.742563][ T4381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.763657][ T4381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.784070][ T4381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.797895][ T4381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.836159][ T4385] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.850565][ T4385] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.863917][ T4385] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.876229][ T4385] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.936238][ T4381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.960157][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.969568][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.979901][ T4381] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.000922][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.011265][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.020639][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.027955][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.037557][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.046994][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.056062][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.063259][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.087959][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.097456][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.110483][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.131171][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.141143][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.156877][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.165785][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.176814][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.188618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.197676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.217680][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.227362][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.245723][ T4385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.285215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.297656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.313015][ T4385] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.326754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.336851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.346874][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.354069][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.364886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.399563][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.413967][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.432975][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.440132][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.462151][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.479044][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.493123][ T4386] Bluetooth: hci0: command 0x041b tx timeout [ 95.502649][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.519237][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.529648][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.547433][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.560207][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.578456][ T4386] Bluetooth: hci1: command 0x041b tx timeout [ 95.607287][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.619035][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.670282][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.690537][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.699565][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.716788][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.726609][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.738760][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.762399][ T4381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.786387][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.803521][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.813276][ T4386] Bluetooth: hci2: command 0x041b tx timeout [ 95.841033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.857798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.870168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.885886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.903856][ T4386] Bluetooth: hci3: command 0x041b tx timeout [ 95.904616][ T4381] device veth0_vlan entered promiscuous mode [ 95.937708][ T4381] device veth1_vlan entered promiscuous mode [ 95.975287][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 95.988049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.006420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.018996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.036365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.061374][ T4381] device veth0_macvtap entered promiscuous mode [ 96.087963][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.104591][ T4381] device veth1_macvtap entered promiscuous mode [ 96.125848][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.138231][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.151443][ T4381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.166364][ T4381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.180280][ T4381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.192902][ T4381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.218197][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.232209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.240609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.248828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.257885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.267366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.278800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.291068][ T4381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.302207][ T4381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.310975][ T4381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.320668][ T4381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.347387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.360570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.387075][ T4385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.485166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.500686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.543953][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.585992][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.595518][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.609838][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.640048][ T4385] device veth0_vlan entered promiscuous mode [ 96.690372][ T4385] device veth1_vlan entered promiscuous mode [ 96.700168][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.731049][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.753170][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.766699][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.779435][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.792481][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.801477][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.825378][ T4385] device veth0_macvtap entered promiscuous mode [ 96.919130][ T4385] device veth1_macvtap entered promiscuous mode [ 96.982047][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.997828][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.015953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.034056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.050870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.066534][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.091787][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.106048][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.116768][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 2026/04/05 08:48:36 executed programs: 10 [ 97.143330][ T4385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.322357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.331298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.343360][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.354647][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.382385][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.422634][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.489204][ T4385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.572330][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 97.601772][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.651488][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.659763][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 97.830402][ T4385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.839273][ T4385] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.848133][ T4385] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.857019][ T4385] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.901738][ T4386] Bluetooth: hci2: command 0x040f tx timeout [ 97.971829][ T4386] Bluetooth: hci3: command 0x040f tx timeout [ 98.051724][ T4386] Bluetooth: hci4: command 0x040f tx timeout [ 98.530852][ T4392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.643640][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.656296][ T4392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.694463][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.772413][ T4392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.812854][ T4392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.824105][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.832198][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.832679][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.925369][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.961507][ T46] device hsr_slave_0 left promiscuous mode [ 98.969888][ T46] device hsr_slave_1 left promiscuous mode [ 98.987377][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.995558][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.004176][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.013135][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.021123][ T46] device bridge_slave_1 left promiscuous mode [ 99.029403][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.057008][ T46] device bridge_slave_0 left promiscuous mode [ 99.063367][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.093954][ T46] device veth1_macvtap left promiscuous mode [ 99.100448][ T46] device veth0_macvtap left promiscuous mode [ 99.107233][ T46] device veth1_vlan left promiscuous mode [ 99.123798][ T46] device veth0_vlan left promiscuous mode [ 99.651808][ T4386] Bluetooth: hci0: command 0x0419 tx timeout [ 99.731741][ T4386] Bluetooth: hci1: command 0x0419 tx timeout [ 99.980474][ T4386] Bluetooth: hci2: command 0x0419 tx timeout [ 100.051663][ T4386] Bluetooth: hci3: command 0x0419 tx timeout [ 100.131824][ T4386] Bluetooth: hci4: command 0x0419 tx timeout [ 100.185484][ T46] team0 (unregistering): Port device team_slave_1 removed [ 100.268480][ T46] team0 (unregistering): Port device team_slave_0 removed [ 100.319704][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.426691][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.955799][ T46] bond0 (unregistering): Released all slaves [ 101.102626][ T4393] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.127930][ T4393] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.234202][ T4393] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.259903][ T4393] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.700894][ T4390] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.074921][ T4390] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.137869][ T4390] netdevsim netdevsim2 netdevsim2: renamed from eth2 2026/04/05 08:48:41 executed programs: 28 [ 102.487757][ T4390] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.736840][ T4392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.848625][ T4393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.934476][ T4392] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.991750][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.020472][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.113282][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.201085][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.210569][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.224822][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.234646][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.241854][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.317689][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.336818][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.501246][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.508528][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.754490][ T4393] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.805921][ T4390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.019013][ T4390] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.035416][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.045249][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.054356][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.063384][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.071491][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.088029][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.114176][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.123106][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.130264][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.193168][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.227097][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.522517][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.531142][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.538371][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.546669][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.555964][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.564941][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.574281][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.583459][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.590657][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.606696][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.615847][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.625458][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.632685][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.640691][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.650556][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.659944][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.669158][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.701058][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.752626][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.761168][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.769813][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.780414][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.991359][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.027223][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.122437][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.142437][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.154547][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.163423][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.172777][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.200914][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.210185][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.220017][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.228952][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.238457][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.323022][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.391988][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.419288][ T4393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.430283][ T4393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.479248][ T4390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.571287][ T4390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.645849][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.867838][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.890400][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.962417][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.971053][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.010933][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.020399][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.077541][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.129921][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.138711][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.815126][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.832058][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.846101][ T4390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.871291][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.880993][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.012325][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.032887][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.086781][ T4390] device veth0_vlan entered promiscuous mode [ 107.104624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.166998][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.242537][ T4390] device veth1_vlan entered promiscuous mode [ 107.418302][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 2026/04/05 08:48:46 executed programs: 49 [ 107.547760][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.562665][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.570220][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.587552][ T4392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.650857][ T4390] device veth0_macvtap entered promiscuous mode [ 107.806542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.843812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.884737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.984100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.018813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.039840][ T4390] device veth1_macvtap entered promiscuous mode [ 108.099465][ T4393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.239403][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.310074][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.501650][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.541687][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.633462][ T4390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.701150][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.751277][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.761823][ T4390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.780354][ T4390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.798791][ T4390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.860403][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.879808][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.899101][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.942310][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.994132][ T4390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.051676][ T4390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.060501][ T4390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.137988][ T4390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.430873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.442000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.807799][ T4393] device veth0_vlan entered promiscuous mode [ 109.848894][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.889196][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.934181][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.942443][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.107743][ T4393] device veth1_vlan entered promiscuous mode [ 110.315219][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.352141][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.388479][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.409050][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.449838][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.650985][ T4393] device veth0_macvtap entered promiscuous mode [ 110.700261][ T4393] device veth1_macvtap entered promiscuous mode [ 110.776756][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.791419][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.810108][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.838416][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.868147][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.885833][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.909695][ T4393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.932058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.988580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.034849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.078793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.113635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.122667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.412305][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.420209][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.436636][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.472275][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.518585][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.595806][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.631639][ T4393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.642945][ T4393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.655044][ T4393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.691408][ T4393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.729108][ T4393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.748557][ T4393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.762406][ T4393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.934492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.943081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.952361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.042046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.051309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.400000][ T4392] device veth0_vlan entered promiscuous mode [ 112.432612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 2026/04/05 08:48:51 executed programs: 73 [ 112.752486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.870569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.975540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.019297][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.031909][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.066000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.173210][ T4392] device veth1_vlan entered promiscuous mode [ 113.247874][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.396447][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.419105][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.453587][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.815797][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.873407][ T4392] device veth0_macvtap entered promiscuous mode [ 113.934381][ T4392] device veth1_macvtap entered promiscuous mode [ 113.979292][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.989951][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.000547][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.011462][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.021674][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.058068][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.068174][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.249383][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.311014][ T4392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.697298][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.829480][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.000311][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.052383][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.088547][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.328797][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.566407][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.989563][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.004494][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.015084][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.025039][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.035657][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.048067][ T4392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.073349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.125391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.472985][ T4392] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.642496][ T4392] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.651771][ T4392] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.660958][ T4392] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.762216][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.770148][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.783524][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.791408][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.961784][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.980853][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/04/05 08:48:57 executed programs: 106 [ 120.003199][ T4862] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 120.076013][ T4857] ================================================================== [ 120.084258][ T4857] BUG: KASAN: use-after-free in dvb_frontend_release+0x3f8/0x4a0 [ 120.092065][ T4857] Read of size 4 at addr ffff8880293bfc3c by task syz.2.126/4857 [ 120.099919][ T4857] [ 120.102309][ T4857] CPU: 1 PID: 4857 Comm: syz.2.126 Not tainted syzkaller #0 [ 120.109642][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.119771][ T4857] Call Trace: [ 120.123102][ T4857] [ 120.126069][ T4857] dump_stack_lvl+0x188/0x24e [ 120.130806][ T4857] ? __lock_acquire+0x7d10/0x7d10 [ 120.135903][ T4857] ? show_regs_print_info+0x12/0x12 [ 120.141162][ T4857] ? load_image+0x400/0x400 [ 120.145804][ T4857] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 120.151328][ T4857] ? __virt_addr_valid+0x188/0x540 [ 120.156496][ T4857] ? __virt_addr_valid+0x465/0x540 [ 120.161652][ T4857] ? dvb_frontend_release+0x3f8/0x4a0 [ 120.167064][ T4857] print_report+0xa8/0x210 [ 120.171540][ T4857] kasan_report+0x10b/0x140 [ 120.176106][ T4857] ? dvb_frontend_release+0x3f8/0x4a0 [ 120.181532][ T4857] dvb_frontend_release+0x3f8/0x4a0 [ 120.186807][ T4857] ? dvb_frontend_open+0x12d0/0x12d0 [ 120.192124][ T4857] __fput+0x22c/0x920 [ 120.196148][ T4857] task_work_run+0x1d0/0x260 [ 120.200789][ T4857] ? task_work_cancel+0x220/0x220 [ 120.205852][ T4857] ? exit_to_user_mode_loop+0x3b/0x110 [ 120.211452][ T4857] exit_to_user_mode_loop+0xe6/0x110 [ 120.216772][ T4857] exit_to_user_mode_prepare+0xee/0x180 [ 120.222443][ T4857] syscall_exit_to_user_mode+0x16/0x40 [ 120.227933][ T4857] do_syscall_64+0x58/0xa0 [ 120.232390][ T4857] ? clear_bhb_loop+0x60/0xb0 [ 120.237096][ T4857] ? clear_bhb_loop+0x60/0xb0 [ 120.241901][ T4857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.247841][ T4857] RIP: 0033:0x7f507b39c819 [ 120.252299][ T4857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.271945][ T4857] RSP: 002b:00007ffda04778e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 120.280480][ T4857] RAX: 0000000000000000 RBX: 00007f507b617da0 RCX: 00007f507b39c819 [ 120.288503][ T4857] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 120.296503][ T4857] RBP: 00007f507b617da0 R08: 00007f507b616128 R09: 0000000000000000 [ 120.304515][ T4857] R10: 000000000003fdc0 R11: 0000000000000246 R12: 000000000001d56c [ 120.312524][ T4857] R13: 00007f507b61609c R14: 000000000001d364 R15: 00007ffda04779f0 [ 120.320649][ T4857] [ 120.323689][ T4857] [ 120.326041][ T4857] Allocated by task 1: [ 120.330159][ T4857] kasan_set_track+0x4b/0x70 [ 120.334784][ T4857] __kasan_kmalloc+0x8e/0xa0 [ 120.339405][ T4857] dvb_register_device+0x311/0x2150 [ 120.344636][ T4857] dvb_register_frontend+0x645/0x920 [ 120.350374][ T4857] vidtv_bridge_probe+0x9a1/0xf70 [ 120.355423][ T4857] platform_probe+0x137/0x1c0 [ 120.360137][ T4857] really_probe+0x2aa/0xc70 [ 120.364684][ T4857] __driver_probe_device+0x18c/0x330 [ 120.370036][ T4857] driver_probe_device+0x4f/0x420 [ 120.375105][ T4857] __driver_attach+0x44a/0x6e0 [ 120.379897][ T4857] bus_for_each_dev+0x182/0x1f0 [ 120.384776][ T4857] bus_add_driver+0x30a/0x5a0 [ 120.389503][ T4857] driver_register+0x32d/0x430 [ 120.394304][ T4857] vidtv_bridge_init+0x39/0x67 [ 120.399102][ T4857] do_one_initcall+0x26a/0x840 [ 120.403982][ T4857] do_initcall_level+0x137/0x1e4 [ 120.408986][ T4857] do_initcalls+0x4b/0x8a [ 120.413351][ T4857] kernel_init_freeable+0x415/0x5be [ 120.418608][ T4857] kernel_init+0x19/0x1b0 [ 120.422966][ T4857] ret_from_fork+0x1f/0x30 [ 120.427411][ T4857] [ 120.429754][ T4857] Freed by task 4857: [ 120.433758][ T4857] kasan_set_track+0x4b/0x70 [ 120.438379][ T4857] kasan_save_free_info+0x2d/0x50 [ 120.443431][ T4857] ____kasan_slab_free+0x126/0x1e0 [ 120.448579][ T4857] slab_free_freelist_hook+0x131/0x1a0 [ 120.454078][ T4857] __kmem_cache_free+0xb6/0x1f0 [ 120.458956][ T4857] dvb_generic_release+0x11c/0x1b0 [ 120.464185][ T4857] dvb_frontend_release+0x131/0x4a0 [ 120.469416][ T4857] __fput+0x22c/0x920 [ 120.473419][ T4857] task_work_run+0x1d0/0x260 [ 120.478047][ T4857] exit_to_user_mode_loop+0xe6/0x110 [ 120.483372][ T4857] exit_to_user_mode_prepare+0xee/0x180 [ 120.488952][ T4857] syscall_exit_to_user_mode+0x16/0x40 [ 120.494435][ T4857] do_syscall_64+0x58/0xa0 [ 120.498885][ T4857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.504809][ T4857] [ 120.507161][ T4857] The buggy address belongs to the object at ffff8880293bfc00 [ 120.507161][ T4857] which belongs to the cache kmalloc-256 of size 256 [ 120.521241][ T4857] The buggy address is located 60 bytes inside of [ 120.521241][ T4857] 256-byte region [ffff8880293bfc00, ffff8880293bfd00) [ 120.534486][ T4857] [ 120.536837][ T4857] The buggy address belongs to the physical page: [ 120.543280][ T4857] page:ffffea0000a4ef80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x293be [ 120.553488][ T4857] head:ffffea0000a4ef80 order:1 compound_mapcount:0 compound_pincount:0 [ 120.561837][ T4857] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 120.569869][ T4857] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 120.578478][ T4857] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 120.587086][ T4857] page dumped because: kasan: bad access detected [ 120.593528][ T4857] page_owner tracks the page as allocated [ 120.599259][ T4857] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19220725308, free_ts 0 [ 120.618994][ T4857] post_alloc_hook+0x173/0x1a0 [ 120.623799][ T4857] get_page_from_freelist+0x1a1e/0x1ab0 [ 120.629381][ T4857] __alloc_pages+0x1ec/0x4f0 [ 120.633999][ T4857] alloc_page_interleave+0x24/0x1e0 [ 120.639232][ T4857] alloc_slab_page+0x5d/0x160 [ 120.643939][ T4857] new_slab+0x87/0x2c0 [ 120.648043][ T4857] ___slab_alloc+0xbc6/0x1240 [ 120.652750][ T4857] __kmem_cache_alloc_node+0x1a0/0x260 [ 120.658236][ T4857] kmalloc_trace+0x26/0xe0 [ 120.662691][ T4857] bus_add_driver+0xda/0x5a0 [ 120.667306][ T4857] driver_register+0x32d/0x430 [ 120.672180][ T4857] usb_register_driver+0x202/0x3d0 [ 120.677342][ T4857] do_one_initcall+0x26a/0x840 [ 120.682147][ T4857] do_initcall_level+0x137/0x1e4 [ 120.687112][ T4857] do_initcalls+0x4b/0x8a [ 120.691474][ T4857] kernel_init_freeable+0x415/0x5be [ 120.696742][ T4857] page_owner free stack trace missing [ 120.702134][ T4857] [ 120.704745][ T4857] Memory state around the buggy address: [ 120.710420][ T4857] ffff8880293bfb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.718601][ T4857] ffff8880293bfb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.726693][ T4857] >ffff8880293bfc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.735058][ T4857] ^ [ 120.740978][ T4857] ffff8880293bfc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.749065][ T4857] ffff8880293bfd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.757140][ T4857] ================================================================== [ 120.818762][ T4881] ------------[ cut here ]------------ [ 120.824441][ T4881] refcount_t: addition on 0; use-after-free. [ 120.834446][ T4881] WARNING: CPU: 0 PID: 4881 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 120.843960][ T4881] Modules linked in: [ 120.847897][ T4881] CPU: 0 PID: 4881 Comm: syz.1.128 Not tainted syzkaller #0 [ 120.856206][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.866707][ T4881] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 120.872963][ T4881] Code: 09 01 48 c7 c7 40 ca de 8a e8 1d a8 3c fd 0f 0b eb e0 e8 74 37 71 fd c6 05 31 38 fa 09 01 48 c7 c7 80 c9 de 8a e8 01 a8 3c fd <0f> 0b eb c4 e8 58 37 71 fd c6 05 16 38 fa 09 01 48 c7 c7 e0 c9 de [ 120.892875][ T4881] RSP: 0018:ffffc90004b17798 EFLAGS: 00010246 [ 120.898996][ T4881] RAX: f6c589742ffa4000 RBX: 0000000000000002 RCX: ffff88801a3d9dc0 [ 120.907059][ T4881] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 120.915115][ T4881] RBP: 0000000000000000 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 120.923170][ T4881] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff8880293bfc18 [ 120.931271][ T4881] R13: ffff888029a3b800 R14: 0000000000000002 R15: ffff8880293bfc00 [ 120.939328][ T4881] FS: 00007fca77ef26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 120.948427][ T4881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.955102][ T4881] CR2: 00007fca77ef1ff8 CR3: 000000002eef2000 CR4: 00000000003506f0 [ 120.963156][ T4881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.971170][ T4881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.979221][ T4881] Call Trace: [ 120.982570][ T4881] [ 120.985551][ T4881] dvb_device_open+0x330/0x370 [ 120.990385][ T4881] chrdev_open+0x5c5/0x6a0 [ 120.994889][ T4881] ? cd_forget+0x160/0x160 [ 120.999384][ T4881] ? fsnotify_perm+0x39b/0x550 [ 121.004227][ T4881] ? cd_forget+0x160/0x160 [ 121.008689][ T4881] do_dentry_open+0x7e9/0x10d0 [ 121.013560][ T4881] path_openat+0x2635/0x2ee0 [ 121.018214][ T4881] ? verify_lock_unused+0x140/0x140 [ 121.023488][ T4881] ? do_syscall_64+0x4c/0xa0 [ 121.028133][ T4881] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.034278][ T4881] ? do_filp_open+0x430/0x430 [ 121.039056][ T4881] do_filp_open+0x1f1/0x430 [ 121.043659][ T4881] ? vfs_tmpfile+0x480/0x480 [ 121.048410][ T4881] ? _raw_spin_unlock+0x24/0x40 [ 121.053351][ T4881] ? alloc_fd+0x58f/0x630 [ 121.057763][ T4881] do_sys_openat2+0x150/0x4b0 [ 121.062567][ T4881] ? _raw_spin_unlock_irq+0x1f/0x40 [ 121.067821][ T4881] ? lockdep_hardirqs_on+0x94/0x140 [ 121.073200][ T4881] ? do_sys_open+0xe0/0xe0 [ 121.077676][ T4881] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.083766][ T4881] ? lock_chain_count+0x20/0x20 [ 121.088717][ T4881] __x64_sys_openat+0x135/0x160 [ 121.093657][ T4881] do_syscall_64+0x4c/0xa0 [ 121.098127][ T4881] ? clear_bhb_loop+0x60/0xb0 [ 121.102984][ T4881] ? clear_bhb_loop+0x60/0xb0 [ 121.107731][ T4881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.113708][ T4881] RIP: 0033:0x7fca76f5d04e [ 121.118168][ T4881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.137857][ T4881] RSP: 002b:00007fca77ef1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.146381][ T4881] RAX: ffffffffffffffda RBX: 00007fca77ef26c0 RCX: 00007fca76f5d04e [ 121.154557][ T4881] RDX: 0000000000000002 RSI: 00007fca77ef1c00 RDI: ffffffffffffff9c [ 121.162654][ T4881] RBP: 00007fca77ef1c00 R08: 0000000000000000 R09: 0000000000000000 [ 121.170690][ T4881] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 121.178747][ T4881] R13: 00007fca77216128 R14: 00007fca77216090 R15: 00007ffefcdc7c38 [ 121.186842][ T4881] [ 121.189912][ T4881] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.197234][ T4881] CPU: 0 PID: 4881 Comm: syz.1.128 Not tainted syzkaller #0 [ 121.204578][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.214695][ T4881] Call Trace: [ 121.218105][ T4881] [ 121.221082][ T4881] dump_stack_lvl+0x188/0x24e [ 121.225833][ T4881] ? memcpy+0x3c/0x60 [ 121.229867][ T4881] ? show_regs_print_info+0x12/0x12 [ 121.235118][ T4881] ? load_image+0x400/0x400 [ 121.239762][ T4881] panic+0x2e5/0x730 [ 121.243713][ T4881] ? bpf_jit_dump+0xd0/0xd0 [ 121.248276][ T4881] __warn+0x2f8/0x4f0 [ 121.252296][ T4881] ? refcount_warn_saturate+0xff/0x1a0 [ 121.257812][ T4881] ? refcount_warn_saturate+0xff/0x1a0 [ 121.263326][ T4881] report_bug+0x2ba/0x4f0 [ 121.267707][ T4881] ? refcount_warn_saturate+0xff/0x1a0 [ 121.273217][ T4881] handle_bug+0x3a/0x70 [ 121.277426][ T4881] exc_invalid_op+0x16/0x40 [ 121.282033][ T4881] asm_exc_invalid_op+0x16/0x20 [ 121.286944][ T4881] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 121.293060][ T4881] Code: 09 01 48 c7 c7 40 ca de 8a e8 1d a8 3c fd 0f 0b eb e0 e8 74 37 71 fd c6 05 31 38 fa 09 01 48 c7 c7 80 c9 de 8a e8 01 a8 3c fd <0f> 0b eb c4 e8 58 37 71 fd c6 05 16 38 fa 09 01 48 c7 c7 e0 c9 de [ 121.312799][ T4881] RSP: 0018:ffffc90004b17798 EFLAGS: 00010246 [ 121.318912][ T4881] RAX: f6c589742ffa4000 RBX: 0000000000000002 RCX: ffff88801a3d9dc0 [ 121.326921][ T4881] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 121.334931][ T4881] RBP: 0000000000000000 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 121.342948][ T4881] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffff8880293bfc18 [ 121.350957][ T4881] R13: ffff888029a3b800 R14: 0000000000000002 R15: ffff8880293bfc00 [ 121.358982][ T4881] ? refcount_warn_saturate+0xff/0x1a0 [ 121.364489][ T4881] dvb_device_open+0x330/0x370 [ 121.369349][ T4881] chrdev_open+0x5c5/0x6a0 [ 121.373812][ T4881] ? cd_forget+0x160/0x160 [ 121.378366][ T4881] ? fsnotify_perm+0x39b/0x550 [ 121.383176][ T4881] ? cd_forget+0x160/0x160 [ 121.387639][ T4881] do_dentry_open+0x7e9/0x10d0 [ 121.392464][ T4881] path_openat+0x2635/0x2ee0 [ 121.397117][ T4881] ? verify_lock_unused+0x140/0x140 [ 121.402366][ T4881] ? do_syscall_64+0x4c/0xa0 [ 121.407089][ T4881] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.413201][ T4881] ? do_filp_open+0x430/0x430 [ 121.417939][ T4881] do_filp_open+0x1f1/0x430 [ 121.422493][ T4881] ? vfs_tmpfile+0x480/0x480 [ 121.427161][ T4881] ? _raw_spin_unlock+0x24/0x40 [ 121.432066][ T4881] ? alloc_fd+0x58f/0x630 [ 121.436498][ T4881] do_sys_openat2+0x150/0x4b0 [ 121.441228][ T4881] ? _raw_spin_unlock_irq+0x1f/0x40 [ 121.446476][ T4881] ? lockdep_hardirqs_on+0x94/0x140 [ 121.451727][ T4881] ? do_sys_open+0xe0/0xe0 [ 121.456198][ T4881] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.462228][ T4881] ? lock_chain_count+0x20/0x20 [ 121.467132][ T4881] __x64_sys_openat+0x135/0x160 [ 121.472041][ T4881] do_syscall_64+0x4c/0xa0 [ 121.476506][ T4881] ? clear_bhb_loop+0x60/0xb0 [ 121.481231][ T4881] ? clear_bhb_loop+0x60/0xb0 [ 121.485955][ T4881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.491896][ T4881] RIP: 0033:0x7fca76f5d04e [ 121.496376][ T4881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.516211][ T4881] RSP: 002b:00007fca77ef1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.524665][ T4881] RAX: ffffffffffffffda RBX: 00007fca77ef26c0 RCX: 00007fca76f5d04e [ 121.532686][ T4881] RDX: 0000000000000002 RSI: 00007fca77ef1c00 RDI: ffffffffffffff9c [ 121.540698][ T4881] RBP: 00007fca77ef1c00 R08: 0000000000000000 R09: 0000000000000000 [ 121.548730][ T4881] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 121.556744][ T4881] R13: 00007fca77216128 R14: 00007fca77216090 R15: 00007ffefcdc7c38 [ 121.564771][ T4881] [ 121.568406][ T4881] Kernel Offset: disabled [ 121.572786][ T4881] Rebooting in 86400 seconds..